Privacy policy

Who we are

Quiiz is a digital quiz and assessment platform for teachers and learning organizations. This page explains how we handle personal data for educators, students, and other users who interact with the service via the web or the iOS app.

What teacher data we collect

When you sign in with Apple, Google, or Microsoft, the identity provider typically shares: your display name, email address (or an Apple private relay address if you hide your email), a stable account identifier, and sometimes a profile photo URL depending on your provider settings.

We store this information with your account in our cloud services (such as Firebase) to authenticate you, show your name and email in the dashboard, and operate the product.

You may optionally add professional profile details (for example country, schools, or subjects). We do not use that information for targeted advertising.

Student and exam data (general)

When a student opens an exam link or takes an exam, we may process data needed to provide the service, such as: the student name as recorded by the school/organization, class/group information where applicable, internal identifiers for the student or exam, the student answers, and exam timestamps.

We use this data to deliver the exam, calculate results, show reports to educators/organizations, and prevent misuse (for example repeated attempts when not allowed).

For academic verification and exam integrity, we process institutional identity data (such as educational email and account display name from the identity provider) strictly for these purposes, in line with Saudi Arabia’s Personal Data Protection Law (PDPL) where applicable.

Unified sign-in (SSO)

Sign-in to Quiiz uses trusted identity providers (Microsoft, Google, and Apple where enabled). Student and teacher passwords are never stored by Quiiz — they are fully federated and processed securely on Microsoft, Google, or Apple identity servers.

When you enter your institutional email, we route you to the appropriate provider for your organization (for example Microsoft for certain government education domains, or Google for universities). We use login_hint to pre-fill your email on the provider page without Quiiz ever seeing your password.

Quiiz receives from the provider only what is needed to verify you (such as display name, email, and account identifier) to link you to an exam or dashboard.

Manual access requests (access_requests)

If you do not have a recognized educational email or your institution is not listed, you may submit an access request including: name, unverified email, and institution name.

This data is stored securely in Firebase (Dammam region — Saudi Arabia) in the `access_requests` collection and is used **solely** for manual verification and whitelisting by school administrators — not for advertising or tracking.

Audit logs and abuse prevention

To protect exam integrity, we may log operational events such as: access attempts, verification outcomes (scores/confidence signals), timestamps, and general device/browser indicators and IP address for security and dispute investigation.

We do not use this data for advertising tracking. We use it to prevent fraud, improve reliability, and resolve issues (for example an “identity locked / not matching” dispute).

Why we use name and email

Name and email are used to create and secure your account, sign you in, display your identity in the app and web dashboard as provided by the sign-in provider, and to contact you about account, security, or support matters.

We do not sell your personal data. We do not use your email for marketing mailing lists from Quiiz unless you explicitly opt into a communication channel we offer (for example support via Telegram), as you choose.

Third parties and hosting

We rely on infrastructure and identity providers (such as Google Firebase / Google Cloud, Google Sign-In, and Microsoft sign-in). Some processing is subject to their privacy policies in addition to this policy.

When features such as speech-to-text or SSO verification are enabled, limited data may be processed by the selected service provider to deliver that feature (based on product configuration).

We use these services to run the platform; we do not share your data with other parties for ad tracking.

Retention and deletion

We keep data for as long as your account is active and as needed to operate the service and meet legal obligations.

You can delete your account from the iOS app (Settings) or from the web dashboard where available. When you delete your account, we remove your account-associated data from our services within technical and legal limits.

For student and exam records, we may retain results and audit information as needed for educational reporting, integrity checks, and dispute resolution, and then delete or minimize it in line with our retention practices.

Your privacy choices and rights

Privacy rights vary by jurisdiction and by how your school/organization uses the product. Where applicable, we aim to provide reasonable ways to request access, correction, deletion, and to object to or restrict certain processing.

When a feature requires a device permission (for example microphone/camera), we request access only when you choose that action. You can deny permissions, but some features may not work without them.

iOS app, camera, and photo library

If you use the Quiiz iOS app to attach images to questions or answer choices, the system requests camera or photo library access only when you choose that action. We do not use device GPS for core assessment functionality in the app.

Security

We apply reasonable safeguards to protect data in transit and at rest. No online service can guarantee perfect security; please use a strong password with your identity provider and protect your devices.

Changes

We may update this page from time to time. The version published at this URL when you visit applies; please review it periodically.

Contact

For privacy questions or data requests, use the support channel shown in your dashboard or app (for example Telegram) or the official contact email for the product if listed.

We may reasonably request additional information to verify identity or process your request and protect your account and data.