Navigate

Privacy Policy

Your data, your study buddy.

Last updated November 15, 2025

Quizzr is operated by Alex Radu (“we,” “us,” or “our”). This notice explains what information we collect when you use quizzr.app, why we collect it, and the choices you have. We follow the Google API Services User Data Policy, including the Limited Use requirements, for any information received via Google OAuth.

Google OAuth only

We request your name, email, and avatar—never your inbox or docs.

Your notes, your rules

Nothing is shared externally right now—collaboration links are paused while we harden the experience.

No ad tech

We do not sell data, run ads, or embed tracking pixels.

7-day response

Data requests are answered within a week at [email protected].

Information we collect

Grouped by purpose so you can skim quickly.

Account data
Google-provided name, email, and avatar strictly for authentication. We cannot access your password or Gmail.
Study content
Notes you paste or upload, generated quizzes, flashcards, attempts, and feedback entries.
Usage telemetry
IP, browser/OS, timestamps, feature interactions, and crash logs to keep Quizzr healthy. No ad IDs, no cross-site tracking.
Support threads
Emails or forms you send our team for help.

How we use it

Only the essentials.

  • Authenticate you with Google OAuth and guard against suspicious logins.
  • Generate quizzes, flashcards, and study analytics (collaboration is temporarily paused).
  • Maintain reliability—debug issues, enforce rate limits, and comply with legal obligations.
  • Send essential notifications (security, feature updates) or support replies.

Information from Google APIs is only used to provide or improve sign-in, per Google’s Limited Use policy. No ads, no selling, no human review unless you ask for support.

Data lifecycle

  1. Collect

    Notes you import, quiz attempts, and OAuth basics land in our encrypted database.

  2. Process

    OpenRouter receives the relevant note excerpt to craft quiz questions or flashcards. Outputs save back to your workspace.

  3. Review

    You can revisit, regenerate, or delete content directly in your workspace.

  4. Delete

    Email us to purge everything. Production rows disappear within 30 days; backups roll off within 35 days.

Sharing & processors

Only a handful of providers touch your data.

  • Google OAuth

    Sign-in and account protection.

  • Supabase Postgres + Prisma

    Primary database + ORM.

  • OpenRouter

    Generates quizzes and flashcards from your notes.

  • Vercel / PM2

    Application hosting, logs, metrics.

  • Nodemailer / email provider

    Account and support emails.

Your choices & rights

You stay in control.

  • Request a portable copy of your data.
  • Ask us to delete your account and generated content.
  • Export or delete your study data at any time.
  • Report security issues or privacy concerns without penalty.

Email [email protected] and we’ll respond within 7 days.

Security

Boring but important.

  • HTTPS everywhere and managed-at-rest encryption.
  • Access limited to the operations team with least-privilege permissions.
  • Automated monitoring for abuse plus manual review when needed.

Retention & kids

How long we keep things and who the product is for.

Content sticks around while you keep an account so you can revisit study trails. Ask us to delete it and we’ll remove production data within 30 days, backups within 35 days unless law says otherwise.

Quizzr is not for children under 13 and we don’t knowingly collect data from them. Tell us if we should remove something.

Need help?

Privacy questions, audits, deletion requests

Email [email protected].