Privacy Policy

This Privacy Policy explains how Quizzar Go ("we", "us", or "our") collects, uses, protects, and discloses your information when you use our mobile application (the "Service"). By accessing or using the Service, you consent to the data practices described in this policy.

1. Information We Collect

Quizzar Go is for users 13 and older. Age is self-declared by birth year before accessing sign-in or guest features. Accounts found to be under 13 are blocked, and you may contact us at quizzargo@gmail.com if you believe an account was blocked in error.

Account Information

• Google Sign-In: If you authenticate via Google, we read your name, email address, and profile picture (avatar_url) associated with your Google account.
• Email Sign-Up: We collect your email address and generate a default display name (which can be edited).
• Birth Year: We collect your self-declared birth year (year only) to verify that you are at least 13 years old.
• Guest Mode: Guest mode is not available for users under 13. In guest mode, we store a usage count on our servers, linked to an anonymous account ID. A platform identifier (Android ID or iOS identifier for vendor) is used to limit free usage and prevent abuse. We keep it after account deletion for that purpose.

User-Generated Content & Local Device Storage

• Vault Content: Quizzes and generated content you choose to save are stored in our database and linked to your account.
• Chat Data: For registered accounts, Ask AI chat sessions and messages are stored in our cloud database (Supabase) for cross-session history, and cached locally on your device (SQLite via Drift). For guest users, chat data remains local on the device. Chat turns within the quiz Defend feature are held transiently in memory during your active session and are not stored in database tables.
• Local Device Storage: Your device locally stores prompt history, pending quiz drafts, question tags, and question attempts. Question tags and attempts are kept across sign-out so your local study progress is preserved, and are cleared when you delete your account or uninstall the app.
• Uploaded Assets: Documents (PDFs) and images uploaded for quiz generation are processed transiently in memory to extract text and generate quiz questions. These source files are not permanently stored on our servers post-generation.

Usage, Technical, and Support Data

• Usage Records: We record AI generation usage events (model, provider, token counts, estimated cost, latency, app version, and status) for metering, rate limiting, and service reliability.
• Account & Purchase Status: Usage pool balances, subscription status, and purchase records.
• Support Email Diagnostics: When you tap Contact us in Settings, the pre-filled support email includes your app version, OS version, device model, user ID, and account type so we can troubleshoot issues.

Advertising Data

• If you interact with advertisements, our ad provider (Google AdMob) may collect device identifiers (such as Android Ad ID), IP addresses, and app interaction metrics to deliver ads and verify reward claims.

2. How We Use Your Information

We process the collected data to:

• Provide, operate, and maintain the core features of the Service (e.g., cross-device synchronization).
• Verify age eligibility (13+).
• Manage user accounts, subscriptions, and AI generation balances.
• Monitor for and prevent abusive activity, fraud, and unauthorized usage.
• Serve advertisements and verify rewarded ad interactions.

We do not sell your personal data to third parties.

Lawful Bases for Processing

• Contract: Running the Service and managing subscriptions.
• Legal obligation: Retaining billing and tax records.
• Legitimate interest: Fraud and abuse prevention.
• Consent: Personalized ads, where UMP asks for it.

3. Advertising

Quizzar Go utilizes Google AdMob to display advertisements, including optional rewarded ads. Data collection for advertising is governed by Google’s privacy practices.

• Age-Based Restrictions: Users aged 13 to 15 receive non-personalized ads.
• Consent and Control: In compliance with GDPR, UK GDPR, and relevant US state laws, users in applicable jurisdictions are presented with a consent dialog via the Google User Messaging Platform (UMP). Settings → Privacy Choices appears only in regions where consent is required, allowing you to review, grant, or withdraw consent for personalized advertising.

4. Third-Party Data Processors

When you use AI features, your requests are sent to Google (Gemini) and, when needed, to OpenAI. Quizzar Go uses a billed Google Cloud project, and Google does not use your prompts or responses to improve its products or train its models. OpenAI does not train its models on API data by default and retains API data for up to 30 days for abuse and misuse monitoring.

5. Payments and Subscriptions

All financial transactions are processed securely through Google Play Billing. Quizzar Go does not intercept, collect, or store payment card details. We solely retain secure transaction tokens and subscription statuses to grant applicable account entitlements.

6. Children's Privacy

Quizzar Go is strictly for users 13 and older. We do not knowingly collect personal information from children under 13. Accounts found to be under 13 are blocked. If you are a parent or guardian and believe your child under 13 has provided us with personal data, please contact us at quizzargo@gmail.com to request deletion.

7. Your Privacy Rights

Depending on where you live, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Data Portability: You can request a copy of your data in a common, machine-readable format.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request erasure of your account and associated personal data.
• Restriction: Request that we limit the processing of your personal data in certain circumstances.
• Objection: Object to our processing of your personal data, or withdraw consent where processing is based on consent.
• Right to Complain to a Regulator: If you believe our processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with your data protection regulator, including:
  • Nigeria: Nigeria Data Protection Commission (NDPC) (https://ndpc.gov.ng)
  • EU / EEA: Your local supervisory authority
  • United Kingdom: Information Commissioner's Office (ICO) (https://ico.org.uk)
  • United States: Your state attorney general or the Federal Trade Commission (FTC), where applicable

We respond to all deletion and privacy rights requests within 30 days.

Accounts indicating that you are under 13 are blocked automatically. If you believe this is wrong, contact quizzargo@gmail.com.

8. Data Retention and Deletion

• Active Accounts: Profile data, birth year, vault content, and usage pool balances are retained while the account remains active.
• Chat Data: Chat sessions and messages are kept until you delete them or delete your account.
• Device Identifier: A platform identifier (Android ID or iOS identifier for vendor) is used to limit free usage and prevent abuse. We keep it after account deletion for that purpose.
• Usage Records: AI usage records (model, token counts, cost, latency) are retained for operational analytics and metering, with the user link (user_id) removed (NULL) upon account deletion.
• Account Deletion: You may delete your account within the app via Settings → Delete Account, follow the instructions on our Delete Account page, or email quizzargo@gmail.com (processed within 30 days). Upon initiation, your profile, avatar, saved vault content, chat histories, guest usage records, and advertising reward logs are immediately purged from our servers.
• Purchase & Billing Records: When an account is deleted, we keep the email address snapshot, deletion date, and subscription record for billing and legal compliance, unlinked from your deleted user account.
• Database Backups: Deleted data is removed from our live systems. Backup copies are deleted on the schedule set by our database provider.

9. International Data Transfers

Our service providers, including Supabase and Google, operate globally. Your information may be transferred to, stored, or processed in the United States, Europe, or other locations outside of your resident jurisdiction under applicable safeguards.

10. Security

We implement technical and organizational security measures, including encrypted transit (HTTPS), secure local storage, and Row-Level Security (RLS) policies within our database, to protect your data.

11. Changes to This Policy

We reserve the right to update this Privacy Policy periodically. When we make material changes, we will update the "Last updated" date at the top of this document and post the updated policy on our website.

12. Contact Information

Data Controller: Quizzar Go, operated by Usmalik David Alexander, quizzargo@gmail.com