Privacy policy

We collect only what we need to run the site and your account:

• Account details: your name and email address, and a hashed password if you set one. If you sign in with Google, we receive your name, email address and profile picture from Google.
• Profile details you choose to add in Settings: a bio, website and location. Your sign-in sessions also record the IP address and browser type used to sign in.
• Study and quiz activity: the subject, chapter and difficulty you choose for AI practice drills and a count of the drills you have used; and, for quizzes taken while signed in, your attempts, answers, scores, favourites and comments. Quiz answers you give on study pages stay in your browser and are not stored with your account.
• Things you create or upload: quizzes you write, search queries you run while signed in, and files you upload. If you use AI quiz generation, the text you type is sent to Cloudflare Workers AI to write the quiz.
• Billing records, if you buy Pro: your plan, subscription status, order and payment ids, amounts, dates and any refunds. Payment itself is handled by Waffo; we never receive your full card details.
• Messages you send us, such as feedback, corrections and support or privacy requests.
• Device and usage data: pages visited, browser and device type, approximate location from your IP address, and cookies (see below). To limit abuse we also keep short-lived request counters keyed by IP address; they are purged when their rate-limit window (about a minute) ends.

• To run your account and give you the features of your plan.
• To process purchases, renewals, cancellations and refunds, and to keep the accounting records the law requires.
• To send account and service emails, such as sign-in links, email verification and reminders before an annual renewal.
• To answer your messages and fix mistakes you report.
• To understand how the site is used, keep it secure, prevent abuse and improve it.
• To show advertising, as described below.

Pro purchases are processed by Waffo Pancake (Waffo.com Limited), our online reseller and Merchant of Record. Waffo Pancake is the seller of record: it runs the hosted checkout, takes the payment, issues invoices and receipts, and handles payment-related questions.

When you start a checkout we send Waffo Pancake your email address, our internal user id for your account and the plan you chose. On the hosted checkout you give Waffo Pancake your payment and billing details (such as your card and country) directly; we never see or store your full card details. Waffo Pancake sends us back the status of your order and subscription, the order and payment ids, amounts and any refunds, so we can switch Pro on or off.

Waffo Pancake uses the data you give it at checkout under its own privacy policy, which is shown on the checkout page.

We do not sell your personal data. We share it only with service providers who help us run QuizQuip, when the law requires it, or to protect the rights and safety of our users and the service. Our service providers are:

• Cloudflare — hosts the site and its database, and runs the AI models (Workers AI) that write practice drills. Drill requests contain the topic and difficulty you choose, not your name or email.
• Waffo Pancake — payments, invoices, refunds and the subscription customer portal (see above).
• Resend — sends our emails, such as sign-in links and verification emails, and delivers the messages you send through the contact form.
• Google — Google sign-in (if you use it), Google Analytics for usage statistics and Google AdSense for advertising.
• Microsoft Clarity — records how pages are used (clicks, scrolling and page interactions) so we can find and fix confusing pages.

We use cookies and similar technologies to keep you signed in, remember your choices, and measure how the site is used with Google Analytics and Microsoft Clarity. You can block or delete cookies in your browser settings; parts of the site, such as staying signed in, may then stop working.

Free pages are supported by advertising from Google AdSense, and Google acts as a third-party vendor that uses cookies to serve ads.

• Google uses advertising cookies, including the DoubleClick cookie, to serve ads based on your visits to this and other websites.
• Visitors in the EEA, UK and Switzerland are asked for consent before personalised ads are shown, and can change that choice at any time with the "Privacy & cookie settings" link in the footer.
• You can opt out of personalised advertising in Google Ads Settings (adssettings.google.com) or at www.aboutads.info.
• Other third-party ad partners may also use cookies to serve ads; see Google’s list of ad technology providers for details.

Some of our providers store or process data outside Singapore. In particular, Waffo Pancake (Waffo.com Limited) is based in Hong Kong and processes payments outside Singapore, and Cloudflare, Resend, Google and Microsoft may process data in other countries. When we transfer personal data out of Singapore, we take appropriate steps — such as contractual commitments from our providers — so that it receives a standard of protection comparable to the PDPA.

QuizQuip is made for secondary-school students, so we treat children’s data with extra care and collect as little as we can. Students under 13 should use QuizQuip with a parent or guardian’s permission. We do not check age when you sign up and we do not ask for a date of birth. Paid plans are for adults: by buying one you confirm you are 18 or older, or the student’s parent or guardian.

A parent or guardian can ask us to access, correct or delete their child’s data at support@quizquip.com. If you believe a child has given us personal data without the permission they needed, please tell us and we will delete it.

• Account, profile, study and quiz data: for as long as your account is open. When you delete your account (see "Your rights"), we delete it straight away from our live systems. Copies can remain in database backups for up to 30 days before they expire.
• Quizzes you published: they stay on QuizQuip after you delete your account, but without your name or any link to you, so other people’s results, favourites and comments on them are not lost. Drafts you did not publish are deleted.
• Files you uploaded privately: deleted when you delete your account.
• Search queries: kept for 90 days, then deleted.
• Payment webhook records from Waffo, which can include your email address: purged once they have been processed.
• Billing records (subscription status, order and payment ids, amounts and refund records): kept after your account closes for as long as the law requires for tax and accounting, then deleted. After you delete your account they are kept without your name, email or account link.
• Messages you send us: kept while we deal with them and for as long as needed to keep a record of the request.
• Analytics and advertising data: kept by Google and Microsoft according to their own retention settings.

We protect personal data with reasonable security measures, including encrypted connections (HTTPS), hashed passwords and access controls on our systems. No system is completely secure, so please use a strong, unique password.

You can do two things yourself, any time you are signed in: open Settings, then Account, then "Your data". "Download my data" gives you a JSON file with your profile, quiz attempts, favourites, comments, search history and billing metadata. "Delete account" permanently deletes your account and personal data. If you have an active Pro subscription, cancel it first; deletion is blocked until then so you are not charged for an account that no longer exists.

For anything else, email support@quizquip.com from the address on your account to:

• access the personal data we hold about you and learn how it has been used;
• correct data that is wrong or incomplete (you can also edit your profile in Settings);
• withdraw your consent to us using your data (we will explain what that means for your account, for example that we can no longer provide it);
• ask us to delete your account and data, apart from records we must keep by law, if you cannot sign in to do it yourself.

We may need to confirm your identity first, and we aim to reply within 30 days. If you are not satisfied with our answer, you can contact Singapore’s Personal Data Protection Commission (PDPC).

We may update this policy from time to time. We will post the new version on this page with a new date, and tell account holders by email about significant changes.

Privacy questions and requests: support@quizquip.com. See also our terms of service and refund & cancellation policy.