Privacy Policy

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address — used for authentication and account identification
• Display name — shown on leaderboards and your profile
• Avatar URL — provided by your Google account if you sign in with Google

1.2 Quiz Data

When you generate and play quizzes, we store:

• Quiz titles, questions, and answer options
• Your quiz session results (scores, answers, duration)
• Group quiz participation data (leaderboard entries)

1.3 Usage Logs

We log certain actions for quota enforcement and analytics:

• Quiz generation events (to track monthly quota usage)
• Question regeneration events
• Timestamps of these actions

1.4 Device Information

We collect a device fingerprint (device identifier) to enforce a limit of 2 accounts per device for email sign-ups. This helps prevent abuse of our service.

2. Authentication

We use Supabase Auth to manage user authentication. You can sign in using:

• Email and password
• Google Sign-In (OAuth via Supabase)
• Apple Sign-In (native sign-in with Apple)

We do not store your password directly — authentication is handled securely by Supabase.

3. Third-Party Services

We use the following third-party services to operate the App:

• Supabase — Backend infrastructure, database hosting, and user authentication.
• Google Gemini (AI) — Processes uploaded document content to generate quiz questions. Document content is sent to Gemini's API for processing but is not stored by us after quiz generation is complete.
• RevenueCat — Manages in-app subscriptions and payment processing through Apple App Store and Google Play Store.
• Sentry — Error tracking and performance monitoring. Collects crash reports and anonymized performance data to help us improve app stability.
• Firebase Cloud Messaging (FCM) — Delivers push notifications to your device.

4. How We Process Your Documents

When you upload a PDF or DOCX file, or paste text to generate a quiz:

• The text content is extracted on your device (client-side)
• The extracted text (up to 12,000 characters) is sent to our server, which forwards it to Google Gemini to generate quiz questions
• The original document file is not uploaded to our servers — only the extracted text is transmitted
• The generated quiz (questions and answers) is stored in our database
• The raw text content is not permanently stored after quiz generation

5. Data Retention & Deletion

You can delete your account at any time through the App settings. When you delete your account:

• Your profile information is permanently removed
• Your quizzes become inaccessible
• Your subscription data is retained for billing reconciliation purposes
• Usage logs are retained in anonymized form for aggregate analytics

For detailed instructions and more information, see our Account Deletion page.

6. Push Notifications

We may send you push notifications for promotions, announcements, or personal messages. You can opt out of notifications at any time through your device settings. Your FCM token is deleted from our servers when you sign out.

7. Children's Privacy

QuizlyGo is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at quizlygo@gmail.com so we can take appropriate action.

8. Data Security

We implement industry-standard security measures including:

• Row Level Security (RLS) on all database tables
• Server-side validation and quota enforcement
• Rate limiting on API endpoints
• Encrypted connections (HTTPS/TLS)

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

quizlygo@gmail.com