Privacy Policy

1. What we collect

• Account details from Google sign-in: your name, email address and profile picture.
• Content you give us to generate quizzes: text you paste, topics, web page links, and the PDFs, Word files, slides or images you upload.
• What you create: quizzes, questions, workspaces, and the people you invite to a workspace.
• Student attempts on a shared quiz link: the name the student types (if the teacher asks for one), their answers, score and time taken. Students do not need an account.
• On written-answer questions: the text the student writes, any mark and comment suggested by AI, and the mark and comment the teacher saves.
• How many times the student switched to another tab or app during the attempt, counted by their browser. Students are told about this before they start. Nothing else about their device or screen is recorded.
• A random identifier for the student's browser, stored in a cookie. We keep only a one-way hash of it, next to that browser's attempts, so a teacher's attempt limit works and an attempt can only be finished on the device that started it. It contains no name or contact details.
• If a teacher protects a quiz link with a password, we store only a one-way hash of that password.
• Reports sent with "Report this quiz": the reason and any comment typed, and a one-way hash of the reporter's IP address to spot repeated reports.
• Usage data: pages viewed, device and browser type, and performance measurements, collected by our analytics tools.
• For the free tools without an account: a one-way hash of your IP address, used only to apply the daily usage limit, and the two-letter country code your request came from, so we can see which tools are used where. We do not store the address itself, and both are deleted after 30 days.

2. How we use it

We do not sell your data and we do not use your uploaded material or your students' answers for advertising.

• To sign you in and keep your quizzes in your workspace.
• To generate quiz questions, lesson plans and other content from the material you provide.
• To show teachers the results of attempts on their quiz links, including which answers the class chose most often.
• To build a follow-up ("reteach") quiz when a teacher asks for one, from the teacher's own material and the class's overall results.
• To suggest a mark and a short comment for a student's written answer, which the teacher then confirms or changes. A suggestion never counts until the teacher saves a mark.
• To group a quiz's questions into topics, from the questions themselves, so a teacher can see which topics the class has mastered.
• To review quizzes that are reported, and to switch off public links that break our terms.
• To enforce plan limits, handle billing and answer support requests.
• To understand which features are used so we can improve them.

3. Services that process your data

We rely on these providers to run the product. Each receives only what it needs for its job:

• Supabase — authentication and database hosting.
• Google — sign-in (OAuth) and Google Analytics.
• OpenAI — generates questions from the content you submit, checks answer keys and groups questions into topics. Content is sent through the API to produce your result. For a reteach quiz we send the teacher's material, the missed questions and class-wide percentages — never student names, individual answers or device identifiers. To suggest a mark for a written answer we send the question, the teacher's marking points and model answer, and the text the student wrote — never the student's name, any other answer or a device identifier.
• Vercel — application hosting.
• PostHog — product analytics for signed-in teachers and our public pages. It is not loaded on the page where students take a quiz.
• Microsoft Clarity — heatmaps and anonymised session recordings on our public pages and the dashboard, used to find confusing screens. It is not loaded on the page where students take a quiz, and names typed into our free classroom tools are masked.
• Crisp — the support chat inside the dashboard.
• Dodo Payments — payments and subscriptions. We never see or store your full card details.

4. Uploaded files

Files you upload to generate a quiz are read to extract their text and are not kept as files after the quiz is generated. The questions produced from them are saved in your workspace until you delete them.

Most free tools (timers, printables, games) run entirely in your browser; what you type into them is not sent to us.

5. Cookies

We use cookies to keep you signed in and remember your language. Analytics tools set their own cookies to measure usage on our public pages and in the teacher dashboard. You can block or clear cookies in your browser; signing in requires them.

On a shared quiz link we set only what the quiz needs: a random browser identifier (kept for up to a year, used for attempt limits and to tie an attempt to its device) and, if the quiz has a password, a cookie that remembers for 12 hours that it was entered. No analytics or advertising cookies are set on that page.

6. Students and children

AI Quiz Maker accounts are for teachers, trainers and other adults. Students taking a shared quiz do not create an account and only enter a name if their teacher asks for one. Teachers are responsible for having any consent their school requires before sharing a quiz link with students. We do not knowingly collect personal information from children beyond what a teacher's quiz link records.

The page where students take a quiz loads no analytics, advertising or chat scripts. Teachers can delete any student attempt from their results at any time.

7. Retention and deletion

A plain-English walkthrough of what is stored when a class takes a quiz, and how to delete any of it, is in the help guide: https://aiquizmaker.co/en/help/your-data

We keep your account data while your account is active. You can delete individual quizzes at any time. To delete your account and everything in it, email support@aiquizmaker.co from the address you sign in with and we will remove it within 30 days, except records we must keep for tax or legal reasons (such as invoices).

8. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, or to object to how we use it. Email us and we will respond within 30 days.

9. Changes to this policy

If we change how we handle personal data we will update this page and the date at the top. Significant changes will also be announced by email to account holders.