Privacy

Privacy Policy

Last updated: September 24, 2026

This Privacy Policy explains how Quizel ("Quizel", "the app", "we", "us", or "our") handles information when you use the Quizel iOS app. Quizel is provided by Vincent Tietze. Full provider and postal contact details are available in the Impressum. You can contact us about privacy at quizel.support@protonmail.com.

Overview

Quizel helps you create practice quizzes from study material that you provide, such as pasted notes, PDFs, text files, and selected images. The app is designed to keep saved quizzes and progress on your device. Study material is sent when you tap Generate or explicitly start a voice-coach session with selected material.

We do not sell personal information. We do not display third-party ads inside Quizel. We do not track you across apps or websites.

Information We Process

Study Material You Provide

When you paste notes, import a PDF or text file, or select an image, the app extracts readable text so it can create a quiz.

• PDF and text file extraction happens on your device.
• Image text recognition uses on-device text recognition.
• The extracted text is sent to the Quizel backend only when you tap Generate.
• The backend sends the submitted text to an AI provider through OpenRouter so a quiz can be generated. The backend then checks the returned quiz structure before sending it to the app. While a quiz is being generated, the backend holds the submitted text in a temporary job record for your installation so generation can finish even if the app is suspended, and deletes it as soon as the AI provider has answered. The finished quiz waits in that record for up to 30 minutes so the app can collect it, then it is deleted automatically.

You should avoid submitting highly sensitive information, including passwords, government identifiers, payment card information, private health information, or confidential third-party material.

Saved Quizzes and Progress

Generated quizzes, groups, answer history, progress, and daily activity are stored locally on your device. Selected saved learning items are sent only when you start a voice-coach session.

App Install Identifier

The app creates a random install-scoped identifier and an Apple App Attest key. The same random identifier is used as a pseudonymous RevenueCat App User ID. The backend stores the install identifier and App Attest public key/counter, plus hashed subscription-binding values and a pseudonymous starter-redemption status and timestamp. These values authorize requests, reject replay on another installation, enforce initial and eligible returning-download starter access, apply the 30-day cooldown, rate-limit quiz generation, and prevent abuse; backend security records are not used for advertising or tracking. The pseudonymous RevenueCat App User ID is also used for Apple Ads measurement as described below. During the RevenueCat migration period, subscribed requests may also include Apple's signed StoreKit transaction and device-verification information as a compatibility fallback. Apple may process App Attest registration data as part of its device-integrity service.

Subscription and Purchase Status

If you subscribe to Quizel Pro, payments are handled by Apple through StoreKit and subscription entitlements are managed by RevenueCat. The app sends RevenueCat a pseudonymous install-scoped App User ID together with purchase, subscription, app, device, and store metadata needed to process the purchase and determine access. The Quizel backend sends that pseudonymous ID to RevenueCat to check the active pro entitlement, product, store environment, expiration or grace period, refund state, and ownership type before granting access. During migration it may instead verify Apple-signed StoreKit transaction information locally as a compatibility fallback. We and RevenueCat do not receive your payment card details.

Network and Request Information

When the app contacts the backend, normal network information such as IP address, request time, and request metadata may be processed by Cloudflare. Quizel stores time-bucketed quota counters under pseudonymous hashed keys. Application logs contain event types and operational fields but deliberately omit study text, IP addresses, install identifiers, transaction identifiers, App Attest material, and secrets.

How We Use Information

We use information for app functionality and the Apple Ads measurement described below, including:

• generating quizzes from study material you submit and validating the returned quiz structure;
• returning generated quiz content to the app;
• verifying active subscriptions;
• preventing abuse, excessive automated requests, and backend misuse;
• diagnosing backend errors and maintaining service reliability.

We do not use your study material for advertising or tracking.

Third-Party Services

Quizel uses the following service providers:

• Apple: App Store distribution, StoreKit purchases and subscription management, and App Attest device-integrity checks.
• RevenueCat, Inc.: purchase processing support, subscription entitlement management, restoration and migration of existing StoreKit purchases, and subscription-status verification using a pseudonymous install-scoped App User ID and purchase, app, device, and store metadata.
• Cloudflare: backend hosting, request handling, security, and limited operational logs.
• OpenRouter and selected AI model providers: AI quiz generation from study material you submit.

Each provider processes information under its applicable contractual terms and privacy notice. Depending on the service and processing activity, a provider may act as our processor, as an independent controller, or in another role recognised by applicable data-protection law. Apple processes App Store transactions and App Attest integrity data under Apple's terms and privacy notices. We require providers that process personal data on our behalf to protect it to a standard at least equivalent to this Privacy Policy and applicable law. Where we engage a provider as a processor, the processing is governed by the applicable data-processing terms. For AI quiz generation, only the study text you submit is sent to OpenRouter — never your IP address, install identifier, or subscription data — and the request is configured for zero data retention, so your prompt and the generated quiz are not stored by OpenRouter or the underlying model provider, and are not used to train AI models.

Data Retention

Local quizzes and progress remain on your device until you delete them or uninstall the app, subject to iOS storage behavior.

The Quizel backend keeps your study material only for the duration of a generation run: the submitted text is held in a temporary job record until the AI provider has answered, typically well under two minutes, and is then deleted. The generated quiz remains in that record for up to 30 minutes so the app can collect it after an interruption, then it is deleted automatically. Time-bucketed quota counters are replaced when the applicable UTC hour or day changes. The pseudonymous starter-redemption status and timestamp, App Attest key state, and bounded entitlement bindings may remain while needed to enforce starter eligibility, the returning-download cooldown, and service security, or until a valid deletion request is completed.

RevenueCat retains purchase and customer-entitlement records as needed to provide subscription management and according to its contractual terms, privacy policy, and legal obligations. Cloudflare, OpenRouter, Apple, and downstream AI model providers may keep operational records according to their own policies and legal obligations.

Legal Bases (EEA/UK)

Where the EU or UK General Data Protection Regulation applies, we process information on these legal bases:

• Performance of a contract (Art. 6(1)(b) GDPR): generating quizzes from material you submit, verifying subscriptions, and providing app functionality you request.
• Legitimate interests (Art. 6(1)(f) GDPR): preventing abuse and fraud, securing the backend, and diagnosing service errors.
• Consent (Art. 6(1)(a) GDPR): where required, for example when you choose to grant photo or camera access.

Your Rights (EEA/UK)

Where the GDPR applies, you have the right to request access to, rectification of, or erasure of your personal data, to request restriction of processing, to object to processing based on legitimate interests, and to data portability. You also have the right to lodge a complaint with a data protection supervisory authority, including the authority in your country or place of work.

Because Quizel does not use accounts and keeps your library on your device, most of these rights can be exercised directly by deleting content in the app or deleting the app. For backend abuse-prevention records, contact us using the details below.

UK Privacy Complaints

If you are in the United Kingdom, you can make a privacy complaint by emailing quizel.support@protonmail.com with the subject “Privacy complaint”. Please describe what happened and the outcome you want. We will acknowledge the complaint within 30 days, investigate it without undue delay, and tell you the outcome and any action taken. You may also complain to the UK Information Commissioner’s Office.

India Privacy Rights

If India’s Digital Personal Data Protection Act applies to you, you may ask for a summary of personal data being processed, request correction, completion, updating, or erasure, and raise a grievance using the contact below. You may also nominate another person to exercise your rights where the law allows. We will respond in accordance with applicable Indian law.

Quizel does not use behavioural monitoring or targeted advertising. A parent or lawful guardian should authorise a child’s use where Indian law requires verifiable parental consent. Do not submit another child’s personal data unless you have lawful authority to do so.

South Korea Privacy Information

If South Korea’s Personal Information Protection Act applies to you, you may request access, correction, deletion, suspension of processing, or withdrawal where applicable by emailing quizel.support@protonmail.com. Quizel has no accounts, so most locally stored data can also be removed directly by deleting the relevant quiz or the app.

Quizel is not directed specifically to children under 14. A child under 14 should use Quizel only with consent from a legal representative and should not submit personal information in study material without that representative’s approval.

When you choose an online feature, information may be processed outside South Korea as follows:

• Cloudflare, Inc.: United States and global infrastructure locations; IP address and request metadata; transmitted when the app contacts the backend; used for hosting, routing, security, and limited operational logging; retained according to Cloudflare’s operational and legal requirements.
• OpenRouter, Inc. and the selected AI model provider: primarily the United States or the provider location shown by OpenRouter; submitted study text; transmitted when you tap Generate; used only to generate the quiz; the generated quiz is returned to the Quizel backend, and requests are configured for zero data retention.
• Apple: locations used by Apple; App Store transaction and subscription information; transmitted when you purchase, restore, or verify a subscription; used for purchase processing and entitlement verification; retained under Apple’s policies and legal obligations.
• RevenueCat, Inc.: United States and global infrastructure locations; pseudonymous App User ID plus purchase, subscription, app, device, and store metadata; transmitted when the app configures subscription services and when you view, purchase, restore, migrate, or verify a subscription; used for entitlement management and subscription-status verification; retained under RevenueCat's contractual terms, privacy policy, and legal obligations.

You can avoid transferring study text by not starting generation or Voice Mode and can continue studying saved local material. Creating new personal content requires Pro in current versions. You can avoid purchase-related processing by not buying a subscription or minute pack. Some network processing by Cloudflare is necessary for online features.

Deletion and Access Requests

Because Quizel does not require an account, most app data is stored only on your device. You can remove quizzes individually, use Delete All Local Data in Quizel Settings, or delete the app.

To request deletion of backend quota data associated with your app install, or to ask privacy questions, contact us at quizel.support@protonmail.com. We may need information from you to locate the relevant app install record.

Permissions

Quizel may ask for access to selected photos so you can choose study images for local text extraction. The app does not need full access to your photo library. Quizel may also ask for camera access so you can photograph study material; captured photos are processed for text on your device and are not uploaded as images. You can manage photo and camera permissions in iOS Settings.

Children

Quizel is an education tool but is not directed specifically to children under 13 (or the higher minimum age that applies in your country, including under 14 in South Korea and the age defined as a child by Indian law). If you believe a child has provided personal information through the app, contact us at quizel.support@protonmail.com.

International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA), including in the United States. When you submit study material for quiz generation, or when network information is processed for security and abuse prevention, personal data may be transferred to and processed in those countries, which may have different data protection laws.

Where we transfer personal data outside the EEA, we rely on an appropriate safeguard under Chapter V of the GDPR — in particular the European Commission's Standard Contractual Clauses (Art. 46 GDPR) and, where the recipient is certified, the EU-U.S. Data Privacy Framework. You can request more information about the safeguards we use by contacting us at quizel.support@protonmail.com.

Changes

We may update this Privacy Policy when the app, backend, providers, or legal requirements change. The updated date above shows when this policy was last revised.

Contact

Vincent Tietze
quizel.support@protonmail.com
https://quizel.app
Full postal contact details in the Impressum

Privacy-preserving install measurement

Starting with version 1.0.7, Quizel uses Apple’s SKAdNetwork to measure installations resulting from advertising, including Meta ads. When the app becomes active, it asks Apple to register eligible attribution using only a fixed conversion value (0, coarse value “low”). Apple determines whether an eligible ad led to the installation and sends delayed, privacy-limited reports to the responsible advertising network. These reports do not include user or device identifiers. Quizel does not access the advertising identifier (IDFA), include a Meta SDK, or send study material, account identifiers, purchases or learning activity for this measurement. No App Tracking Transparency permission is requested. Detailed information may be withheld by Apple when privacy thresholds are not met.

Apple: Ad Attribution

Apple Ads measurement

Quizel uses Apple AdServices to measure the subscriptions and revenue associated with our Apple Ads campaigns. After subscription services are configured, the app sends an Apple attribution token to RevenueCat. RevenueCat asks Apple for available campaign, ad group and keyword attribution and associates that context with the existing pseudonymous install-scoped App User ID and purchase history. RevenueCat retains this context in the customer record under its data-processing terms and privacy policy. This integration does not send subscription events back to Apple Ads. It does not collect IDFA, request App Tracking Transparency permission, or use study material, audio or learning activity for advertising measurement. Attribution may be unavailable for some installations.