Privacy

Privacy Policy

Last updated: October 8, 2026

This Privacy Policy explains how Quizel ("Quizel", "the app", "we", "us", or "our") handles information when you use the Quizel iOS app. Quizel is provided by Vincent Tietze. Full provider and postal contact details are available in the Impressum. You can contact us about privacy at quizel.support@protonmail.com.

Overview

Quizel helps you create practice quizzes from study material that you provide, such as pasted notes, PDFs, text files, and selected images. The app is designed to keep saved quizzes and progress on your device. Study material is sent when you tap Generate or explicitly start a voice-coach session with selected material.

We do not sell personal information. We do not display third-party ads inside Quizel. From version 1.0.9, Quizel tracks you in the sense of Apple's App Tracking Transparency (ATT) framework only if you allow it: if you tap “Allow” in Apple's tracking dialog, the Meta SDK measures which Facebook and Instagram ads lead to installs and subscriptions (see Meta ad measurement). If you do not allow tracking, Quizel does not track you across apps or websites and sends no data to Meta.

Information We Process

Study Material You Provide

When you paste notes, import a PDF or text file, or select an image, the app extracts readable text so it can create a quiz.

• PDF and text file extraction happens on your device.
• Image text recognition uses on-device text recognition.
• The extracted text is sent to the Quizel backend only when you tap Generate, including when you create the free five-question preview during onboarding.
• The backend sends the submitted text to an AI provider through OpenRouter so a quiz can be generated. The backend then checks the returned quiz structure before sending it to the app. While a quiz is being generated, the backend holds the submitted text in a temporary job record for your installation so generation can finish even if the app is suspended, and deletes it as soon as the AI provider has answered. The finished quiz waits in that record for up to 30 minutes so the app can collect it, then it is deleted automatically.

You should avoid submitting highly sensitive information, including passwords, government identifiers, payment card information, private health information, or confidential third-party material.

Free Preview During Onboarding

In versions 1.0.9 and 1.0.10, onboarding let you try one free AI-generated preview of five questions from your own material before any purchase. The preview uses the same processing, providers, and retention as regular quiz generation described above. One preview is available per installation; it is protected by the install identifier and App Attest described below. If you do not want to send material, you can choose the built-in example instead, which stays on your device. Further personal generation requires Pro or an eligible subscription trial. From version 1.0.11 there is no free preview; where Apple offers it, the annual plan’s free trial lets you try Pro instead.

Saved Quizzes and Progress

Generated quizzes, groups, answer history, progress, and daily activity are stored locally on your device. Selected saved learning items are sent only when you start a voice-coach session.

App Install Identifier

The app creates a random install-scoped identifier and an Apple App Attest key. The same random identifier is used as a pseudonymous RevenueCat App User ID. The backend stores the install identifier and App Attest public key/counter, plus hashed subscription-binding values and a pseudonymous starter-redemption status and timestamp. These values authorize requests, reject replay on another installation, enforce initial and eligible returning-download starter access, apply the 30-day cooldown, rate-limit quiz generation, and prevent abuse; backend security records are not used for advertising or tracking. From version 1.0.9, this starter access is the free five-question preview during onboarding. The pseudonymous RevenueCat App User ID is also used for Apple Ads measurement as described below. During the RevenueCat migration period, subscribed requests may also include Apple's signed StoreKit transaction and device-verification information as a compatibility fallback. Apple may process App Attest registration data as part of its device-integrity service.

Subscription and Purchase Status

If you subscribe to Quizel Pro, payments are handled by Apple through StoreKit and subscription entitlements are managed by RevenueCat. The app sends RevenueCat a pseudonymous install-scoped App User ID together with purchase, subscription, app, device, and store metadata needed to process the purchase and determine access. The Quizel backend sends that pseudonymous ID to RevenueCat to check the active pro entitlement, product, store environment, expiration or grace period, refund state, and ownership type before granting access. During migration it may instead verify Apple-signed StoreKit transaction information locally as a compatibility fallback. We and RevenueCat do not receive your payment card details.

Onboarding Question: “How Did You Hear About Quizel?”

From version 1.0.9, onboarding can ask how you heard about Quizel. The options are TikTok, Instagram, ChatGPT or another AI, App Store search, friends/school/university, YouTube, and other. Answering is optional, and you can skip the question. Your answer is stored on your device and sent to RevenueCat as a custom attribute (onboarding_source) of the pseudonymous RevenueCat App User ID. A second attribute (onboarding_path) records whether you tried the free preview with your own material (own_material) or used the built-in example (sample). From version 1.0.10, three further attributes record how the free preview and the Pro offer went: preview_result (the preview score, for example 4/5, or whether it was only generated or failed), offer_seen (where you first saw the Pro offer) and offer_exit (whether you closed the offer, chose the free option, cancelled Apple’s purchase sheet or subscribed). They contain no study content and show us at which step learners stop before subscribing. We use these attributes to understand which channels bring learners to Quizel and which onboarding path works better. This processing is independent of your App Tracking Transparency choice, and we do not send these answers to Meta. The attributes remain in the RevenueCat customer record under RevenueCat's data-processing terms until the record is deleted or you ask us to delete them. From version 1.0.11, onboarding_path and preview_result are no longer sent. From version 1.0.11, onboarding can also ask for the date of your next exam. It stays on your device, and the app does not send it to us or to any other service; it is used only for your study plan, texts shown in the app such as the Pro offer, and the countdown in your optional daily reminder.

Network and Request Information

When the app contacts the backend, normal network information such as IP address, request time, and request metadata may be processed by Cloudflare. Quizel stores time-bucketed quota counters under pseudonymous hashed keys. Application logs contain event types and operational fields but deliberately omit study text, IP addresses, install identifiers, transaction identifiers, App Attest material, and secrets.

How We Use Information

We use information for app functionality, the Apple Ads measurement and, only with your permission, the Meta ad measurement described below, including:

• generating quizzes from study material you submit and validating the returned quiz structure;
• returning generated quiz content to the app;
• verifying active subscriptions;
• preventing abuse, excessive automated requests, and backend misuse;
• diagnosing backend errors and maintaining service reliability;
• measuring which Apple Ads campaigns lead to subscriptions and revenue, using Apple's attribution data and the existing pseudonymous RevenueCat customer record;
• understanding which channels bring learners and which onboarding path works, using your optional onboarding answers;
• only if you allow tracking: measuring which Facebook and Instagram ads lead to installs and subscriptions and optimising the delivery of our ads with Meta.

We do not use your study material for advertising or tracking.

Third-Party Services

Quizel uses the following service providers:

• Apple: App Store distribution, StoreKit purchases and subscription management, and App Attest device-integrity checks.
• RevenueCat, Inc.: purchase processing support, subscription entitlement management, restoration and migration of existing StoreKit purchases, and subscription-status verification using a pseudonymous install-scoped App User ID and purchase, app, device, and store metadata; storage of the optional onboarding answers; and, only if you allow tracking, advertising identifiers for forwarding subscription events to Meta when that integration is enabled.
• Meta Platforms Ireland Limited: optional ad measurement, only if you allow tracking; joint controller for the collection and transmission described in Meta ad measurement.
• Cloudflare: backend hosting, request handling, security, and limited operational logs.
• OpenRouter and selected AI model providers: AI quiz generation from study material you submit.

Each provider processes information under its applicable contractual terms and privacy notice. Depending on the service and processing activity, a provider may act as our processor, as an independent controller, or in another role recognised by applicable data-protection law. Apple processes App Store transactions and App Attest integrity data under Apple's terms and privacy notices. We require providers that process personal data on our behalf to protect it to a standard at least equivalent to this Privacy Policy and applicable law. Where we engage a provider as a processor, the processing is governed by the applicable data-processing terms. For AI quiz generation, only the study text you submit is sent to OpenRouter — never your IP address, install identifier, or subscription data — and the request is configured for zero data retention, so your prompt and the generated quiz are not stored by OpenRouter or the underlying model provider, and are not used to train AI models.

Data Retention

Local quizzes and progress remain on your device until you delete them or uninstall the app, subject to iOS storage behavior.

The Quizel backend keeps your study material only for the duration of a generation run: the submitted text is held in a temporary job record until the AI provider has answered, typically well under two minutes, and is then deleted. The generated quiz remains in that record for up to 30 minutes so the app can collect it after an interruption, then it is deleted automatically. Time-bucketed quota counters are replaced when the applicable UTC hour or day changes. The pseudonymous starter-redemption status and timestamp, App Attest key state, and bounded entitlement bindings may remain while needed to enforce starter eligibility, the returning-download cooldown, and service security, or until a valid deletion request is completed.

RevenueCat retains purchase and customer-entitlement records, the optional onboarding attributes and, if you allowed tracking, the advertising identifiers as needed to provide subscription management and according to its contractual terms, privacy policy, and legal obligations. Cloudflare, OpenRouter, Apple, and downstream AI model providers may keep operational records according to their own policies and legal obligations. Meta retains data it receives under its own policies; we do not control Meta's retention periods.

Legal Bases (EEA/UK)

Where the EU or UK General Data Protection Regulation applies, we process information on these legal bases:

• Performance of a contract (Art. 6(1)(b) GDPR): generating quizzes from material you submit, verifying subscriptions, and providing app functionality you request.
• Legitimate interests (Art. 6(1)(f) GDPR): preventing abuse and fraud, securing the backend, diagnosing service errors, and understanding which channels and onboarding paths work, using your optional onboarding answers.
• Consent (Art. 6(1)(a) GDPR and, for access to information on your device, § 25(1) TDDDG): the optional Meta ad measurement, given in Apple's tracking dialog; and, where required, for example when you choose to grant photo or camera access.

Your Rights (EEA/UK)

Where the GDPR applies, you have the right to request access to, rectification of, or erasure of your personal data, to request restriction of processing, to object to processing based on legitimate interests, and to data portability. You also have the right to lodge a complaint with a data protection supervisory authority, including the authority in your country or place of work.

Because Quizel does not use accounts and keeps your library on your device, most of these rights can be exercised directly by deleting content in the app or deleting the app. For backend abuse-prevention records, contact us using the details below. You can withdraw your consent to Meta ad measurement at any time in iOS Settings › Privacy & Security › Tracking, and you can object to the processing of your onboarding answers by contacting us.

UK Privacy Complaints

If you are in the United Kingdom, you can make a privacy complaint by emailing quizel.support@protonmail.com with the subject “Privacy complaint”. Please describe what happened and the outcome you want. We will acknowledge the complaint within 30 days, investigate it without undue delay, and tell you the outcome and any action taken. You may also complain to the UK Information Commissioner’s Office.

India Privacy Rights

If India’s Digital Personal Data Protection Act applies to you, you may ask for a summary of personal data being processed, request correction, completion, updating, or erasure, and raise a grievance using the contact below. You may also nominate another person to exercise your rights where the law allows. We will respond in accordance with applicable Indian law.

Quizel does not show targeted advertising in the app. The optional Meta ad measurement takes place only if tracking is allowed in Apple's dialog; it is not directed at children, and a parent or lawful guardian can keep “Allow Apps to Request to Track” turned off in iOS Settings. A parent or lawful guardian should authorise a child’s use where Indian law requires verifiable parental consent. Do not submit another child’s personal data unless you have lawful authority to do so.

South Korea Privacy Information

If South Korea’s Personal Information Protection Act applies to you, you may request access, correction, deletion, suspension of processing, or withdrawal where applicable by emailing quizel.support@protonmail.com. Quizel has no accounts, so most locally stored data can also be removed directly by deleting the relevant quiz or the app.

Quizel is not directed specifically to children under 14. A child under 14 should use Quizel only with consent from a legal representative and should not submit personal information in study material without that representative’s approval.

When you choose an online feature, information may be processed outside South Korea as follows:

• Cloudflare, Inc.: United States and global infrastructure locations; IP address and request metadata; transmitted when the app contacts the backend; used for hosting, routing, security, and limited operational logging; retained according to Cloudflare’s operational and legal requirements.
• OpenRouter, Inc. and the selected AI model provider: primarily the United States or the provider location shown by OpenRouter; submitted study text; transmitted when you tap Generate; used only to generate the quiz; the generated quiz is returned to the Quizel backend, and requests are configured for zero data retention.
• Apple: locations used by Apple; App Store transaction and subscription information; transmitted when you purchase, restore, or verify a subscription; used for purchase processing and entitlement verification; retained under Apple’s policies and legal obligations.
• RevenueCat, Inc.: United States and global infrastructure locations; pseudonymous App User ID plus purchase, subscription, app, device, and store metadata; transmitted when the app configures subscription services and when you view, purchase, restore, migrate, or verify a subscription; used for entitlement management and subscription-status verification; also the optional onboarding answers and, only if you allow tracking, IDFA, IDFV, IP address, and Meta's anonymous ID for forwarding subscription events to Meta when that integration is enabled; retained under RevenueCat's contractual terms, privacy policy, and legal obligations.
• Meta Platforms Ireland Limited and Meta Platforms, Inc.: Ireland, the United States, and other locations used by Meta; only if you allow tracking: app install/open event, IDFA, IDFV, Meta's anonymous app ID, device model, iOS and app version, IP address, and, if enabled, subscription events with product, price, currency, and time; transmitted at app start after you allow tracking and when subscription events occur; used for ad measurement and ad delivery optimisation; retained under Meta's policies.

You can avoid transferring study text by not starting generation or Voice Mode and can continue studying saved local material. Apart from the one-time free five-question preview during onboarding, creating new personal content requires Pro or an eligible subscription trial. You can avoid any transfer to Meta by not allowing tracking. You can avoid purchase-related processing by not buying a subscription or minute pack. Some network processing by Cloudflare is necessary for online features.

Deletion and Access Requests

Because Quizel does not require an account, most app data is stored only on your device. You can remove quizzes individually, use Delete All Local Data in Quizel Settings, or delete the app.

To request deletion of backend quota data associated with your app install, or to ask privacy questions, contact us at quizel.support@protonmail.com. We may need information from you to locate the relevant app install record.

Permissions

Quizel may ask for access to selected photos so you can choose study images for local text extraction. The app does not need full access to your photo library. Quizel may also ask for camera access so you can photograph study material; captured photos are processed for text on your device and are not uploaded as images. From version 1.0.9, Quizel also asks for App Tracking Transparency permission during onboarding for the optional Meta ad measurement; declining has no effect on app features. You can manage photo, camera, and tracking permissions in iOS Settings.

Children

Quizel is an education tool but is not directed specifically to children under 13 (or the higher minimum age that applies in your country, including under 14 in South Korea and the age defined as a child by Indian law). If you believe a child has provided personal information through the app, contact us at quizel.support@protonmail.com.

International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA), including in the United States. When you submit study material for quiz generation, or when network information is processed for security and abuse prevention, personal data may be transferred to and processed in those countries, which may have different data protection laws.

Where we transfer personal data outside the EEA, we rely on an appropriate safeguard under Chapter V of the GDPR — in particular the European Commission's Standard Contractual Clauses (Art. 46 GDPR) and, where the recipient is certified, the EU-U.S. Data Privacy Framework. If you allow tracking, Meta Platforms Ireland Limited may transfer the data it receives to Meta Platforms, Inc. in the United States; according to Meta, such transfers rely on the EU-U.S. Data Privacy Framework, under which Meta Platforms, Inc. is certified, or on the other safeguards described in Meta's Privacy Policy. You can request more information about the safeguards we use by contacting us at quizel.support@protonmail.com.

Changes

We may update this Privacy Policy when the app, backend, providers, or legal requirements change. The updated date above shows when this policy was last revised.

Contact

Vincent Tietze
quizel.support@protonmail.com
https://quizel.app
Full postal contact details in the Impressum

Privacy-preserving install measurement

Starting with version 1.0.7, Quizel uses Apple’s SKAdNetwork to measure installations resulting from advertising, including Meta ads. When the app becomes active, it asks Apple to register eligible attribution. From version 1.0.10, the conversion value it registers names the furthest of these steps reached in the app: first opened (0), onboarding completed (10), free five-question preview created (20), weekly subscription purchased (42) or annual subscription purchased (63), each with a coarse value (“low”, “medium” or “high”). Apple determines whether an eligible ad led to the installation and sends delayed, privacy-limited reports to the responsible advertising network, which thereby learns whether an ad led to one of these steps. These reports do not include user or device identifiers. This measurement does not use the advertising identifier (IDFA), study material, quiz content, account or transaction identifiers or prices, and it works independently of App Tracking Transparency. Detailed information may be withheld by Apple when privacy thresholds are not met. Separately, from version 1.0.9, the optional Meta ad measurement uses the Meta SDK only if you allow tracking.

Apple: Ad Attribution

Apple Ads measurement

Quizel uses Apple AdServices to measure the subscriptions and revenue associated with our Apple Ads campaigns. After subscription services are configured, the app sends an Apple attribution token to RevenueCat. RevenueCat asks Apple for available campaign, ad group and keyword attribution and associates that context with the existing pseudonymous install-scoped App User ID and purchase history. RevenueCat retains this context in the customer record under its data-processing terms and privacy policy. This integration does not send subscription events back to Apple Ads. It does not use IDFA or depend on App Tracking Transparency permission, and it does not use study material, audio or learning activity for advertising measurement. Attribution may be unavailable for some installations.