Privacy Policy
Last Updated: October 9, 2026
Introduction
Welcome to QuizGPT. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered flashcard generation platform.
By using QuizGPT, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.
Information We Collect
Personal Information
When you use QuizGPT, we may collect the following types of personal information:
- Account Information: If you choose to sign in with Google, we collect your name, email address, and profile picture from your Google account.
- Usage Data: We automatically collect information about how you interact with our service, including the number of flashcards generated, topics studied, and feature usage patterns.
- Study Content: The text and materials you input to generate flashcards are temporarily processed to provide our service but are not permanently stored unless you choose to save them.
- Device Information: We collect information about the device and browser you use to access QuizGPT, including IP address, browser type, operating system, and device identifiers.
Cookies and Tracking Technologies
We use cookies, local storage, and similar tracking technologies to enhance your experience, analyze usage patterns, and maintain your session. These include:
- Essential Cookies: Required for basic site functionality, authentication, and security.
- Analytics Cookies: Used to understand how users interact with our platform via Google Analytics.
- Preference Cookies: Store your language preferences and interface settings.
How We Use Your Information
We use the collected information for the following purposes:
- Service Delivery: To provide, maintain, and improve our AI flashcard generation service.
- Personalization: To customize your learning experience and provide relevant features.
- Usage Limits: To enforce daily usage limits and prevent abuse of our free service.
- Analytics: To understand usage patterns, track performance, and improve our algorithms.
- Communication: To send service-related notifications and respond to your inquiries.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes.
- Security: To detect, prevent, and address technical issues, fraud, and security vulnerabilities.
Data Sharing and Disclosure
We do not sell your personal information. We may share your information only in the following circumstances:
- Service Providers: We use third-party services such as OpenAI or DeepSeek for AI processing, Firebase Authentication with Google OAuth for sign-in, Cloudflare for data storage and hosting, Creem for subscription billing and payment processing, and Google Analytics for usage analysis. These providers process data on our behalf under strict confidentiality agreements.
- Legal Requirements: We may disclose information if required by law, court order, or government request.
- Business Transfers: Your information may be transferred if ownership of the service changes.
- Protection of Rights: To protect our rights, property, safety, or that of our users or the public.
Data Security
We implement industry-standard security measures to protect your personal information, including:
- Encryption of data in transit using HTTPS and TLS protocols
- Secure authentication through Firebase and Google OAuth
- Regular security audits and vulnerability assessments
- Access controls limiting access to personal data
- Automatic logout and session management
Data Retention
We retain your personal information only as long as necessary for the purposes outlined in this Privacy Policy:
- Account Data: Retained while your account is active and for a reasonable period afterward to comply with legal obligations.
- Usage Data: Aggregated and anonymized usage statistics may be retained indefinitely for analytics purposes.
- Study Content: Input text is processed in real time and not permanently stored on our servers. Generated flashcards are stored only if you choose to save them.
- Logs: Server logs and security data are retained for up to 90 days.
Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information, subject to legal retention requirements.
- Portability: Request transfer of your data to another service provider.
- Objection: Object to certain processing of your personal information.
- Withdraw Consent: Withdraw consent for data processing where we rely on consent as the legal basis.
- Cookie Control: Manage cookie preferences through your browser settings.
Children's Privacy
QuizGPT is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.
Users between 13 and 18 years old should use QuizGPT only with parental or guardian consent and supervision.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your jurisdiction. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable law.
Third-Party Links
Our service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party sites you visit.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:
- Posting the updated policy on our website with a new last updated date
- Sending an email notification to registered users for significant changes
- Displaying a prominent notice on our platform
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
GDPR Compliance for European Users
For users in the European Economic Area, we process your personal data based on the following legal grounds:
- Consent: You have given clear consent for us to process your personal data for specific purposes.
- Contract: Processing is necessary to fulfill our service agreement with you.
- Legal Obligation: Processing is necessary to comply with applicable laws.
- Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our service and preventing fraud.
CCPA Compliance for California Users
California residents have specific rights under the California Consumer Privacy Act:
To exercise these rights, please contact us at [email protected].
- Right to know what personal information is collected, used, shared, or sold
- Right to delete personal information
- Right to opt out of the sale of personal information. We do not sell personal information.
- Right to non-discrimination for exercising CCPA rights