Privacy

Privacy Policy

Last updated: August 11, 2026

This Privacy Policy explains how Quizel ("Quizel", "the app", "we", "us", or "our") handles information when you use the Quizel iOS app. Quizel is provided by Vincent Tietze. You can contact us about privacy at quizel.support@protonmail.com.

Overview

Quizel helps you create practice quizzes from study material that you provide, such as pasted notes, PDFs, text files, and selected images. The app is designed to keep saved quizzes and progress on your device. Study material is sent to the Quizel backend only when you tap Generate.

We do not sell personal information. We do not use third-party advertising. We do not track you across apps or websites.

Information We Process

Study Material You Provide

When you paste notes, import a PDF or text file, or select an image, the app extracts readable text so it can create a quiz.

• PDF and text file extraction happens on your device.
• Image text recognition uses on-device text recognition.
• The extracted text is sent to the Quizel backend only when you tap Generate.
• The backend sends the submitted text to an AI provider through OpenRouter so a quiz can be generated and checked.

You should avoid submitting highly sensitive information, including passwords, government identifiers, payment card information, private health information, or confidential third-party material.

Saved Quizzes and Progress

Generated quizzes, groups, answer history, progress, and daily activity are stored locally on your device. We do not intentionally upload your saved library or progress to our backend.

App Install Identifier

The app creates a random install-scoped identifier and an Apple App Attest key. The same random identifier is used as a pseudonymous RevenueCat App User ID. The backend stores the install identifier and App Attest public key/counter, plus hashed subscription-binding values. These values authorize requests, reject replay on another installation, rate-limit quiz generation, and prevent abuse; they are not used for advertising or tracking. During the RevenueCat migration period, subscribed requests may also include Apple's signed StoreKit transaction and device-verification information as a compatibility fallback. Apple may process App Attest registration data as part of its device-integrity service.

Subscription and Purchase Status

If you subscribe to Quizel Pro, payments are handled by Apple through StoreKit and subscription entitlements are managed by RevenueCat. The app sends RevenueCat a pseudonymous install-scoped App User ID together with purchase, subscription, app, device, and store metadata needed to process the purchase and determine access. The Quizel backend sends that pseudonymous ID to RevenueCat to check the active pro entitlement, product, store environment, expiration or grace period, refund state, and ownership type before granting access. During migration it may instead verify Apple-signed StoreKit transaction information locally as a compatibility fallback. We and RevenueCat do not receive your payment card details.

Network and Request Information

When the app contacts the backend, normal network information such as IP address, request time, and request metadata may be processed by Cloudflare. Quizel stores time-bucketed quota counters under pseudonymous hashed keys. Application logs contain event types and operational fields but deliberately omit study text, IP addresses, install identifiers, transaction identifiers, App Attest material, and secrets.

How We Use Information

We use information only for app functionality, including:

• generating and validating quizzes from study material you submit;
• returning generated quiz content to the app;
• verifying active subscriptions;
• preventing abuse, excessive automated requests, and backend misuse;
• diagnosing backend errors and maintaining service reliability.

We do not use your study material for advertising or tracking.

Third-Party Services

Quizel uses the following service providers:

• Apple: App Store distribution, StoreKit purchases and subscription management, and App Attest device-integrity checks.
• RevenueCat, Inc.: purchase processing support, subscription entitlement management, restoration and migration of existing StoreKit purchases, and subscription-status verification using a pseudonymous install-scoped App User ID and purchase, app, device, and store metadata.
• Cloudflare: backend hosting, request handling, security, and limited operational logs.
• OpenRouter and selected AI model providers: AI quiz generation and validation from study material you submit.

These providers process data as needed to provide their services. Apple, RevenueCat, and Cloudflare act as processors under their applicable data processing terms (Art. 28 GDPR). For AI quiz generation, only the study text you submit is sent to OpenRouter — never your IP address, install identifier, or subscription data — and the request is configured for zero data retention, so your prompt and the generated quiz are not stored by OpenRouter or the underlying model provider, and are not used to train AI models.

Data Retention

Local quizzes and progress remain on your device until you delete them or uninstall the app, subject to iOS storage behavior.

The Quizel backend is designed not to store your full study material or generated quizzes. Time-bucketed quota counters are replaced when the applicable UTC hour or day changes. App Attest key state and bounded entitlement bindings may remain while needed to secure the service or until a valid deletion request is completed.

RevenueCat retains purchase and customer-entitlement records as needed to provide subscription management and according to its contractual terms, privacy policy, and legal obligations. Cloudflare, OpenRouter, Apple, and downstream AI model providers may keep operational records according to their own policies and legal obligations.

Legal Bases (EEA/UK)

Where the EU or UK General Data Protection Regulation applies, we process information on these legal bases:

• Performance of a contract (Art. 6(1)(b) GDPR): generating quizzes from material you submit, verifying subscriptions, and providing app functionality you request.
• Legitimate interests (Art. 6(1)(f) GDPR): preventing abuse and fraud, securing the backend, and diagnosing service errors.
• Consent (Art. 6(1)(a) GDPR): where required, for example when you choose to grant photo or camera access.

Your Rights (EEA/UK)

Where the GDPR applies, you have the right to request access to, rectification of, or erasure of your personal data, to request restriction of processing, to object to processing based on legitimate interests, and to data portability. You also have the right to lodge a complaint with a data protection supervisory authority, including the authority in your country or place of work.

Because Quizel does not use accounts and keeps your library on your device, most of these rights can be exercised directly by deleting content in the app or deleting the app. For backend abuse-prevention records, contact us using the details below.

UK Privacy Complaints

If you are in the United Kingdom, you can make a privacy complaint by emailing quizel.support@protonmail.com with the subject “Privacy complaint”. Please describe what happened and the outcome you want. We will acknowledge the complaint within 30 days, investigate it without undue delay, and tell you the outcome and any action taken. You may also complain to the UK Information Commissioner’s Office.

India Privacy Rights

If India’s Digital Personal Data Protection Act applies to you, you may ask for a summary of personal data being processed, request correction, completion, updating, or erasure, and raise a grievance using the contact below. You may also nominate another person to exercise your rights where the law allows. We will respond in accordance with applicable Indian law.

Quizel does not use behavioural monitoring or targeted advertising. A parent or lawful guardian should authorise a child’s use where Indian law requires verifiable parental consent. Do not submit another child’s personal data unless you have lawful authority to do so.

South Korea Privacy Information

If South Korea’s Personal Information Protection Act applies to you, you may request access, correction, deletion, suspension of processing, or withdrawal where applicable by emailing quizel.support@protonmail.com. Quizel has no accounts, so most locally stored data can also be removed directly by deleting the relevant quiz or the app.

Quizel is not directed specifically to children under 14. A child under 14 should use Quizel only with consent from a legal representative and should not submit personal information in study material without that representative’s approval.

When you choose an online feature, information may be processed outside South Korea as follows:

• Cloudflare, Inc.: United States and global infrastructure locations; IP address and request metadata; transmitted when the app contacts the backend; used for hosting, routing, security, and limited operational logging; retained according to Cloudflare’s operational and legal requirements.
• OpenRouter, Inc. and the selected AI model provider: primarily the United States or the provider location shown by OpenRouter; submitted study text and generated quiz content; transmitted when you tap Generate; used only to generate and validate the quiz; requests are configured for zero data retention.
• Apple: locations used by Apple; App Store transaction and subscription information; transmitted when you purchase, restore, or verify a subscription; used for purchase processing and entitlement verification; retained under Apple’s policies and legal obligations.
• RevenueCat, Inc.: United States and global infrastructure locations; pseudonymous App User ID plus purchase, subscription, app, device, and store metadata; transmitted when the app configures subscription services and when you view, purchase, restore, migrate, or verify a subscription; used for entitlement management and subscription-status verification; retained under RevenueCat's contractual terms, privacy policy, and legal obligations.

You can avoid the transfer of study text by not tapping Generate and can continue to use the bundled sample quiz. You can avoid purchase-related processing by not starting a subscription. Some network processing by Cloudflare is necessary for any online feature to work.

Deletion and Access Requests

Because Quizel does not require an account, most app data is stored only on your device. You can remove quizzes individually, use Delete All Local Data in Quizel Settings, or delete the app.

To request deletion of backend quota data associated with your app install, or to ask privacy questions, contact us at quizel.support@protonmail.com. We may need information from you to locate the relevant app install record.

Permissions

Quizel may ask for access to selected photos so you can choose study images for local text extraction. The app does not need full access to your photo library. Quizel may also ask for camera access so you can photograph study material; captured photos are processed for text on your device and are not uploaded as images. You can manage photo and camera permissions in iOS Settings.

Children

Quizel is an education tool but is not directed specifically to children under 13 (or the higher minimum age that applies in your country, including under 14 in South Korea and the age defined as a child by Indian law). If you believe a child has provided personal information through the app, contact us at quizel.support@protonmail.com.

International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA), including in the United States. When you submit study material for quiz generation, or when network information is processed for security and abuse prevention, personal data may be transferred to and processed in those countries, which may have different data protection laws.

Where we transfer personal data outside the EEA, we rely on an appropriate safeguard under Chapter V of the GDPR — in particular the European Commission's Standard Contractual Clauses (Art. 46 GDPR) and, where the recipient is certified, the EU-U.S. Data Privacy Framework. You can request more information about the safeguards we use by contacting us at quizel.support@protonmail.com.

Changes

We may update this Privacy Policy when the app, backend, providers, or legal requirements change. The updated date above shows when this policy was last revised.

Contact

Vincent Tietze
quizel.support@protonmail.com
https://quizel-legal.pages.dev