This Privacy Policy explains how Quizzy AI Pro ("Quizzy AI Pro", "the App", "we", "us", or "our") collects, uses, and shares information when you use our mobile application and related services (together, the "Service").
We designed the Service to collect as little personal data as reasonably possible. This policy is written to comply with the EU/UK General Data Protection Regulation (GDPR) and U.S. state privacy laws including the California Consumer Privacy Act (CCPA/CPRA).
Legal entity / developer name & address, contact email, and governing-law jurisdiction are still placeholders (highlighted below). Fill them in once the legal owner is decided.
1. Who is responsible for your data (Data Controller)
The data controller responsible for your personal data is:
[LEGAL NAME]
[ADDRESS]
Email: [SUPPORT EMAIL]
If you are in the EEA or UK, you may contact us using the details above regarding any data-protection matter.
2. Information we collect
2.1 Information you provide
- Account information. When you sign in with Google (via Firebase Authentication), we receive your email address, display name, and a unique user ID. We do not receive or store your Google password.
- Your content. The flashcard decks and cards you create, import, or copy (including the questions and answers you type). This content is stored on our servers so it syncs across your devices.
2.2 Information collected automatically
- Usage analytics. Events about how the App is used (e.g., which screens are opened and which features are used), the app version, platform (iOS/Android), and device type. We use a self-hosted analytics system, so this data is not shared with a third-party analytics company.
- Approximate location (country only). We derive your country from your IP address. We do not store your IP address and do not collect precise (GPS) location.
- Subscription status. Whether you have a free or premium subscription.
2.3 Information related to purchases
- If you buy a subscription, the purchase is processed by Apple App Store or Google Play and managed through RevenueCat. We receive your subscription and purchase status (e.g., active/expired, product purchased). We do not receive or store your full payment card number or bank details.
2.4 Diagnostic data
- We collect technical error and crash logs to keep the Service working reliably. These may include device and app-state information at the time of an error.
We do not knowingly collect special categories of data (such as health, religion, or biometric data), and we ask you not to put such information into your flashcards.
3. How we use your information
We use the information above to:
- Provide, maintain, and sync the Service and your content across your devices;
- Generate flashcards and check your answers using AI (see Section 4);
- Manage your account and your subscription/entitlements;
- Understand usage and improve the Service (analytics);
- Keep the Service secure, prevent abuse, and debug problems;
- Comply with legal obligations.
Legal bases (GDPR)
Where GDPR applies, we rely on:
- Performance of a contract — to provide the App and its features you request;
- Legitimate interests — to secure, maintain, and improve the Service, balanced against your rights;
- Consent — where required (e.g., where local law requires consent for certain analytics); you may withdraw consent at any time;
- Legal obligation — where we must process data to comply with the law.
4. AI processing
Some features use artificial intelligence:
- Deck generation — when you ask the App to generate flashcards, your prompt/topic is sent to our AI provider.
- Answer checking — when you answer a card, your answer and the card's question/answer may be sent to our AI provider to evaluate correctness and give feedback.
Our AI provider is Google (Gemini API). Text you submit for these features is transmitted to Google for processing on our behalf. We instruct our provider to process this data only to return a result to the App. Please avoid entering sensitive personal information into AI features.
5. How we share information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only with service providers that help us run the Service ("processors"), and only as needed:
| Provider | Purpose | Data involved |
|---|---|---|
| Google Firebase | Authentication | Email, display name, user ID |
| Google (Gemini API) | AI generation & answer checking | Text you submit to AI features |
| Supabase | Database / content storage & hosting | Account ID, your decks/cards |
| RevenueCat | Subscription management | User ID, subscription status |
| Apple App Store / Google Play | Payment processing | Purchase/transaction data |
| Self-hosted analytics (OpenPanel) | Usage analytics | Usage events, app version, country |
| Sentry | Backend error monitoring | Technical error/diagnostic data |
We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and security of our users or the public.
6. International data transfers
We and our providers may process your data in countries outside your own, including the United States and the European Union. Where we transfer personal data out of the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
7. Data retention
- Account and content — kept while your account is active. If you delete your account, we delete or anonymize your account and content within a reasonable period, except where we must retain it to comply with legal obligations.
- Analytics — retained in aggregate/limited form for a limited period to analyze trends.
- Purchase records — retained as required for tax, accounting, and legal purposes.
8. Your rights
If you are in the EEA/UK (GDPR)
You have the right to: access your data; correct it; delete it; restrict or object to processing; data portability; and withdraw consent. You also have the right to lodge a complaint with your local data-protection authority.
If you are in California (CCPA/CPRA)
You have the right to: know what personal information we collect and how we use it; access and delete it; correct it; and opt out of "sale" or "sharing." We do not sell or share your personal information. We will not discriminate against you for exercising your rights.
How to exercise your rights
Email us at [SUPPORT EMAIL], or delete your account in the App. We will respond within the time required by applicable law. We may need to verify your identity before acting on a request.
9. Children's privacy
The Service is not directed to children under 13 (or under 16 in the EEA where a higher age applies), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us at [SUPPORT EMAIL] and we will delete it.
10. Security
We use technical and organizational measures to protect your information, including encryption in transit (HTTPS) and access controls. No method of transmission or storage is 100% secure, but we work to protect your data.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, for material changes, provide additional notice within the App or by other appropriate means.
12. Contact us
[LEGAL NAME]
Email: [SUPPORT EMAIL]
Website: https://quizzyai.app