Privacy Policy

Effective [OWNER: effective date] · Last updated [OWNER: date]

QuizAwesome (“the app”, “we”, “us”) is operated by [OWNER: legal company name], [OWNER: registered address]. We are the controller of the personal data described here. This policy explains what we collect, why, who we share it with, how long we keep it and the choices you have. It applies to the iOS and Android apps and to this website.

The short version: we collect what the app needs to turn your notes into questions and run your study, groups and family features. Which apps you block and how you use them stay on your phone. We don’t sell your data, we don’t show ads, and we don’t use your data to train AI models.

1. What we collect
2. Account and sign-in
3. Study material and AI processing
4. Study activity
5. App blocking (stays on your phone)
6. Groups, chat and games
7. Notifications
8. Live updates and presence
9. Family linking (what parents see)
10. AI tutor
11. Managed mode
12. Children under 13 (COPPA)
13. Consent records
14. Payments
15. Safety, reports and moderation
16. Who we share data with
17. How long we keep data
18. Deleting your account
19. Teens
20. Your rights (EU, UK, US states)
21. Security and transfers
22. Changes
23. This website and the waitlist
24. Contact

1. What we collect

We collect only what each feature needs. Features from groups onward are optional: if you don’t use them, we don’t collect their data.

We do not collect your contacts, location, advertising identifier, browsing history, or the content of other apps. The app has no ads and no third-party analytics or tracking SDKs.

2. Account and sign-in

You sign in with your email address and a 6-digit code we email you; there is no password. Before you create an account, the app asks your age. If you are under 13, the app does not create an account (see section 12) and blocks the age question on that phone for 24 hours. We store only the fact that you confirmed you are 13 or older and when, and your age band (13–17 or 18+, worked out on your phone from the same answer); your birth year never leaves your phone. An account that never completes the age step is deleted automatically after 24 hours.

Legal basis (EU/UK): performance of our contract with you.

3. Study material and AI processing

When you create an exam you can paste text, attach PDFs, or take or choose photos (up to 10 photos per exam on Free, 30 on Plus and Pro). The app asks for camera and photo access only when you choose to add a photo.

Before anything is sent for AI processing, the app asks for your consent. You can withdraw it at any time in Me; we then stop sending new material (you won’t be able to generate new exams until you consent again).

To build your exam, our servers send your material and your brief to Anthropic, PBC, our AI provider, which acts as our processor. Anthropic’s models read it once per exam to extract the text, map the topics, write the questions, hints and explanations, and check them. [OWNER: confirm Anthropic’s API terms — currently: API inputs and outputs are not used to train models; state the retention period that applies to your account, e.g. zero data retention if agreed.] Grading, hints, explanations and insights then run on your phone without any further AI processing.

Questions and explanations are generated by AI and may contain mistakes. You can report any question.

What happens to your material:

• Your original material (text and files) is deleted automatically 30 days after the later of the day your questions were ready and your exam date, or 90 days after they were ready if you set no exam date. Your questions keep working: each question carries a short quote from your material so “See it in my notes” still works.
• Working copies of your material made during generation are deleted when the questions are finished. If generation stopped part way, they are deleted after 30 days without activity.
• Uploaded files that are no longer used by any exam are removed within a day.
• Deleting an exam deletes its material immediately.

Sharing an exam: if you share an exam with a group, members can see its title, topics, glossary and questions (including the short quotes from your material). They never see your original files or pasted text. If you delete the exam or your account while others still study it, they keep the questions and the earliest member to join becomes its owner; your material, membership and answers are deleted.

Legal basis (EU/UK): contract (generating your exam) and your consent for sending material to the AI provider.

4. Study activity

As you study, the app records each answer (whether it was right, what you answered, hints used, time taken, and an optional “sure / guessing” tap) and study events (minutes earned and used, streak vault changes, emergency unlocks, the real grade you report after an exam, and snapshots of your predicted grade). These are saved on your phone first so the app works offline, then synced to our servers so they survive a new phone and power family reports and group games.

The read-aloud feature uses your phone’s built-in text-to-speech; nothing is sent to us.

5. App blocking (stays on your phone)

Blocking is done by your own phone.

• iOS: we use Apple’s Screen Time APIs (Family Controls, Managed Settings, Device Activity). Apple gives the app opaque tokens for the apps you choose; we cannot see which apps they are, and the tokens and any Screen Time data never leave your phone.
• Android: with your permission we use Usage Access (to know when a blocked app is open), Display over other apps (to show the block screen) and a foreground service (to keep blocking running). Your app list and usage data are processed only on your phone and are never sent to us.

Calls, texts and emergency services are never blocked. You can remove these permissions in your phone’s settings at any time.

6. Groups, chat and games

Groups are private by default: people join by invite link or code. There are no public profiles and no way to search for people.

• Public groups (optional): a group owner aged 13 or older can make their group public. It is then listed in Discover with its title, short description, level, exam date and member count — never the owner’s name or the invite code — and only to students in the same age band (13–17 or 18+). Children under 13 never see Discover, their groups are never public, and they join only groups their parent approves. Managed teens do not see Discover. Anyone who can see a public group can report it; it is hidden from Discover after several reports until our team reviews it.
• Member limit: the owner chooses how many people a group can hold (5 to 100); a full group can’t be joined.
• Avatars: students 13 and older can choose a profile photo; everyone can instead pick one of our preset pictures. Children can use only the preset pictures; we never store photos of children. Photos are stored privately, resized on your phone to a small square, and shown only to people who share a private (invite-only) group with you, through links that expire after 10 minutes — never in public groups, where everyone (you included, to others) appears as a preset picture or initial, and never to anyone you blocked or who blocked you. You always see your own photo. Group members can report a photo; it is hidden after reports until our team reviews it. Changing or removing your photo deletes the old one — except a photo someone has reported, which we hold for up to 30 days so the report can be reviewed.
• What group members see: your display name, your avatar (photo only in private groups), your chat messages, game results and leaderboard rank (you can hide your rank), and short system lines such as “Sam passed today’s quiz”.
• Chat: each group has one chat for its exam. It becomes read-only 2 days after the exam date and is deleted 30 days after the exam date. If the group has no exam date, it is deleted 90 days after the group’s last activity. Moving the exam date moves these dates. Messages are checked by an automatic word filter and rate limits.
• Games (Leave No Man Standing, Lock Wars, Battle Royale) are opt-in. We store who played, their answers in the game, hints, lifelines and locks sent or received, so the server can grade fairly. Game data follows the chat’s schedule and is deleted with it.
• Locks from friends arrive as data your own phone applies on its next check. No Screen Time data leaves your phone.
• Blocks: we store whom you blocked until you unblock them or delete your account.

Before your first chat message or game, you agree to our community rules (see the Terms).

Legal basis (EU/UK): contract; legitimate interests in keeping the community safe.

7. Notifications

If you turn on notifications, we store your phone’s push token, its platform (iOS or Android), your quiet hours and your time zone (used only so we don’t notify you during quiet hours). Notifications are sent through Expo (push delivery service), which passes them to Apple Push Notification service or Google Firebase Cloud Messaging. These services receive the push token and the notification text (for example “New message in Biology”). Family notifications on a lock screen never contain grades. Your token is deleted when you sign out or delete your account.

8. Live updates and presence

Chat, games and exam updates arrive live through Supabase Realtime over an authenticated connection. In a Battle Royale lobby, the other players in that lobby can see that you have it open (your account id is shared with them while the lobby screen is open). Nothing about presence is stored after you leave.

9. Family linking (what parents see)

A student aged 13 or older can link up to two parents. The student creates a code (valid 10 minutes, single use), the parent enters it, and the student must approve the link on their phone. A parent confirms they are 18 or older (we store only that yes and when). Either side can unlink at any time. The student always sees every link and its level.

The student chooses what each parent sees:

Reports are computed when the parent opens them and are not stored. Parents receive a weekly summary and an early warning when a predicted grade drops close to an exam (quiet hours respected). A student can ask a linked parent for extra minutes; a parent can suggest a daily study goal, which the student can accept or decline. Extra-time requests are kept 30 days, suggestions 90 days, the family notification log 30 days, and grade-prediction snapshots 90 days.

Legal basis (EU/UK): the student’s consent (given by approving the link and choosing the level), withdrawable by unlinking. [OWNER/LAWYER: confirm validity of a 13–15-year-old’s consent per EU country.]

10. AI tutor

Pro members can ask the AI tutor about one question at a time. What you type, together with that question, its explanation, your answer and the short source quote, is sent to Anthropic to generate the reply. Tutor conversations are kept 30 days from when they started, then deleted. They are never shown to parents, and our team does not read them; our logs record only ids, token counts and cost, never the message text. We also keep a count of tutor messages for 30 days to apply daily limits.

The tutor is an AI study helper. It is not a person, a counsellor or a therapist. If you are in danger or thinking about hurting yourself, contact a trusted adult, call or text 988 (US), or your local emergency number or helpline.

11. Managed mode

A parent and a student aged 13–15 can both agree to “managed mode”, and children under 13 are always managed (see section 12). A managed student always sees that they are managed and by whom. While managed, we store:

• The settings the parent chose (blocking required, unlock rule, countdown preset, bedtime lock, homework gate, daily goal, emergency unlocks per day).
• A settings PIN, stored only as a hash.
• For managed teens, birth year and month (so management can end automatically at 16).
• Device status (“heartbeat”): whether blocking is on, whether the needed permissions are granted, platform, app version and when the phone last checked in. It never includes app usage. If the phone hasn’t checked in for 24 hours or a permission was removed, the parent is notified. If an emergency unlock is used during bedtime, the parent is notified.

All of this is deleted when management ends. A teen can ask to end it; it ends automatically at 16. A managed proposal that isn’t answered expires after 7 days.

12. Children under 13 (COPPA)

[OWNER: Kids mode is currently switched off. Publish this section only when it is enabled, after lawyer sign-off on the consent method.]

Children under 13 can use the app only if a parent sets up a child profile from their own account and gives verifiable parental consent through [OWNER: consent method and provider, e.g. card micro-transaction / ID check / signed form]. We collect no data from the child until consent is verified.

• What we collect about the child: first name and birth year (from the parent), and the consent record (method, status, provider reference, dates). The child’s phone gets an account with no email, no password, no phone number; we never collect the child’s contacts or location.
• While the child uses the app: the same study data as any student (exams, answers, study events), and chat and games only in groups the parent approved. The parent sees the Detail level.
• Limits: no stranger can find or message a child; children never see public groups and their groups are never public; children pick a preset avatar (no photos); the parent approves every group; the parent can turn chat off; Lock Wars is off; the tutor is off unless the parent turns it on and gives AI consent; children cannot make purchases; children receive only study reminders and replies to their requests.
• How we use it: only to provide the app to the child. We do not show ads, sell data, or share it except with the processors in section 16.
• Parent rights: a parent can review the child’s information, refuse further collection, revoke consent or delete the child at any time (Family → child → Delete). Revoking consent deletes the child’s data. Consent that is never verified, or is revoked, leads to deletion of the child’s name and birth year after 30 days.
• Inactivity: if a child’s account is inactive for 11 months we notify the parent; it is deleted at 12 months.
• New phone: pairing a new phone deletes the old phone’s account and its study data.

If we learn that we collected data from a child under 13 without verified parental consent, we delete it. Contact us at [OWNER: support email].

13. Consent records

We record when you gave each consent or confirmation, so we can show we have it and honour withdrawals: age confirmation (13+), adult confirmation (18+, parents), AI processing consent (and its withdrawal), acceptance of the community rules, family link approvals, managed-mode approvals and, for children, parental consent records. These are kept as long as the account (or child profile) exists.

14. Payments

All purchases (exam credits, Plus and Pro subscriptions) go through the Apple App Store or Google Play. They process your payment; we never see your card or billing details. We receive and keep the store’s transaction ids, the product, purchase and renewal dates, and status (renewed, refunded, expired), plus a ledger of your credits. When you delete your account, purchase records are kept without your account id for refunds, chargebacks, accounting and to stop the same purchase being claimed twice. [OWNER/LAWYER: state the accounting retention period required in your jurisdiction.]

Legal basis (EU/UK): contract; legal obligations (accounting).

15. Safety, reports and moderation

You can report messages, people, profile photos, exams, questions and public groups, and block anyone. Reports are reviewed by our team within 24 hours. A report stores who reported, what was reported (including a snapshot of the message or question) and why. Moderation actions (message removed, account suspended, a public group hidden from Discover, a profile photo removed) are logged. A profile photo our team removes for breaking the rules is moved to a locked quarantine that only our team can reach, and kept there for up to 1 year where the law requires it (for example to report illegal content), then deleted. Alerts to our team contain only a report id, reason and time.

To stop a suspended person from simply signing up again, we keep a salted one-way hash of their email address and the suspension end date. It survives account deletion and is deleted 1 year after the suspension ends, or at once if it is lifted. If someone is removed from a group, the ban is kept until the group owner lifts it or the exam is deleted. We keep a record of who has been a member of each group (so people can report someone who left) until the exam or account is deleted.

Legal basis (EU/UK): legitimate interests in keeping users, many of them teens, safe; legal obligations.

16. Who we share data with

We do not sell or rent personal data, and we do not share it for advertising. We share it only with service providers that process it for us under contract, and when the law requires.

We may disclose data if required by law, to protect someone’s safety, or as part of a merger or acquisition (with notice to you).

17. How long we keep data

Automatic deletions run daily or hourly. Backups held by our hosting provider are overwritten on their own schedule [OWNER: confirm Supabase backup retention for your plan].

18. Deleting your account

You can delete your account at any time in the app (Me → Delete account) or on our account deletion page, or by emailing us. Deletion is immediate and permanent. It deletes your profile, your profile photo (immediately, from storage too, unless it is under review — see below), your age band and its change log, email, exams you own and their material, your answers, study events, credits, chat messages and system lines about you, group memberships, game data, blocks, family links and requests, tutor conversations, push tokens and consent records.

What we keep after deletion:

• Exams other members still study: they keep the questions; your material, membership and answers are deleted.
• Chat and person reports you filed: kept without your name until they expire (1 year). Reports about you: kept 1 year.
• A suspended-email hash, if your account was suspended (see section 15).
• A profile photo someone reported: held up to 30 days for review; one our team removed: kept in quarantine as described in section 15.
• Purchase records, without your account id (see section 14).

A subscription keeps renewing until you cancel it in the App Store or Google Play. A child’s account is deleted by their parent from Family in the app.

19. Teens

The app is for ages 13 and up (younger children only through a parent-managed child profile). For students under 18 we apply privacy-protective defaults: no public profiles, private (invite-only) groups unless an owner makes one public, public groups shown only to other 13–17-year-olds, no way to search for people and no direct messages (all chat is in a group), the lowest family-sharing level by default, quiet hours on by default, and no grades on lock-screen notifications. Parent monitoring is always visible to the teen. In a public group, the other members — all in your own age band — see your display name, your preset picture or initial (never your photo) and your messages in that group’s chat.

20. Your rights

Everyone

You can see and correct most of your data in the app, download a copy by asking us, withdraw AI consent in Me, unlink family, turn off notifications, and delete your account. We respond within 30 days (or sooner where the law requires).

EU, EEA and UK

You have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent at any time (without affecting earlier processing). You can complain to your local data protection authority (in the UK, the ICO). Our EU/UK representative: [OWNER: EU/UK representative under Art. 27, if required].

US states (including California, Virginia, Colorado, Connecticut, Utah, Texas)

You may have the right to know what personal information we collect, to access, correct and delete it, and to opt out of its sale, sharing for targeted advertising, or profiling. We do not sell personal information, share it for cross-context behavioural advertising, or use it for profiling with legal or similarly significant effects. We do not knowingly sell or share the data of anyone under 16. We will not discriminate against you for using your rights. You may use an authorised agent; we may need to verify your identity (usually by a code sent to your account email). If we deny a request you may appeal by replying to our decision.

21. Security and international transfers

Data is encrypted in transit (HTTPS/TLS). Access to data on our servers is restricted by row-level security, so each person can read only their own data and what others chose to share with them. Server secrets are never stored in the app. Our servers are located in [OWNER: Supabase project region]. Where data is transferred outside the EU/UK (for example to the US), we rely on Standard Contractual Clauses or the UK addendum, or the EU–US Data Privacy Framework where the provider is certified. [OWNER: sign DPAs with Supabase, Anthropic and Expo before EU/UK launch.]

22. Changes

If we change this policy in a meaningful way, we will tell you in the app before the change takes effect and, where the law requires, ask for your consent again.

23. This website and the waitlist

The waitlist. If you join the waitlist on quizawesome.com, we store your email address, that you are 13 or older, the page you signed up on, and when. The form asks the year you were born; your browser uses it to check that you are 13 or older and never sends it to us. If you are under 13, nothing is sent, not even your email. We'll email you once when QuizAwesome launches, then delete your address. It isn’t linked to an app account, and we don’t sell it or share it for marketing.

How long we keep it: until we send the launch email, then it is deleted. If you ask us to remove it first, we do. If the launch email never goes out, it is deleted 2 years after you signed up.

Removing your email: email support@quizawesome.com (or reply to any email we send you) and ask to be removed. We remove it within 10 business days. We don’t verify that an address belongs to the person who entered it, so anyone can ask us to remove an address.

Stopping automated sign-ups: we count sign-up attempts per connection using a pseudonymised hash of your IP address (made with a secret key). We never store the IP address itself, and the hash is deleted within about a day (at most 25 hours). Like any website, our hosting and network providers (Vercel, Supabase and Cloudflare) briefly keep IP addresses in their request logs for security and to run the service.

Page-view counts: the website uses Vercel Web Analytics to count visits. It sets no cookies and is not used for advertising. [OWNER: confirm Vercel Web Analytics data handling for your plan before publishing.] The app doesn’t use it.

No cookies: the website sets none. If you switch between light and dark, your browser remembers the choice in its own storage; it isn’t sent to us. If the age question says we can't add you, your browser remembers that for the rest of the visit, also only on your device.

Legal basis (EU/UK): your consent for the waitlist, which you can withdraw at any time by asking us to remove you; legitimate interests for stopping abuse and counting page views.

24. Contact

[OWNER: legal company name]
[OWNER: postal address]
Email: [OWNER: support email]
Data protection contact: [OWNER: privacy email / DPO, if any]