Privacy policy
Last updated: October 2026
Who we are
Quiiz is a digital quiz and assessment platform for teachers and learning organizations. This policy explains how we handle personal data when you use the service via the web or the mobile app, in line with applicable laws including Saudi Arabia’s Personal Data Protection Law (PDPL) where it applies.
What teacher data we collect
When you create an account or sign in through an external identity provider, we may receive: your display name, email address (or an alternate relay address if you hide your email), a stable account identifier, and sometimes a profile photo depending on the provider’s settings.
We keep this information with your account to operate the service, show your identity in the dashboard, and contact you about account, security, or support matters.
You may optionally add professional profile details to improve your experience. We do not use that information for targeted advertising.
Student and exam data
When a student opens or takes an exam, we may process data needed to provide the service, such as: the student name as recorded by the learning organization, class or group where applicable, internal identifiers related to the student or exam, answers, and start/submit times.
We use this data to deliver the exam, calculate results, show reports to the learning organization, and prevent misuse consistent with the exam settings.
For academic verification and exam integrity, we may process institutional identity data (such as educational email and account display name from the identity provider) solely for these purposes and in line with applicable law.
Sign-in and identity verification
Teacher sign-in uses external identity providers; we do not store teacher passwords.
Student exam entry may use the institution’s unified sign-in when the teacher enables it.
We receive from the identity provider only what is needed to operate the account or link the student to the exam (such as display name, email, and account identifier).
Manual access requests
If institutional sign-in is not available in the usual way, you may submit an access request that typically includes: name, a contact method, and institution name.
This data is used solely to review the request and enable legitimate access — not for advertising or unrelated tracking.
Security logs and abuse prevention
To protect the integrity of the service and exams, we may log limited operational events such as access attempts, verification outcomes when enabled, timestamps, and general device or network indicators for security and dispute resolution.
We do not use these logs for advertising tracking. We use them to prevent fraud, improve reliability, and handle reports or disputes about access or identity.
Why we use name and email
Name and email are used to create and secure your account, sign you in, display your identity in the service as provided by the identity provider, and to contact you about account, security, or support matters.
We do not sell your personal data. We do not use your email for Quiiz marketing lists without your explicit consent.
Third parties processing on our behalf
We may use external service providers to operate the platform (such as cloud hosting, identity providers, and internal support or notification services when needed). These processors handle data on our behalf under our instructions and in line with this policy and their applicable terms.
When you use features that process content you upload or enter (such as files or text), that content may be processed by contracted processors solely to deliver the feature.
We do not use your question content or files for targeted advertising, and we do not sell your personal data.
Features that process content you provide
If you choose features that process files or text you enter, the content is processed only as needed to produce the requested result.
Outputs are assistive and are not a substitute for teacher review; you are responsible for reviewing results before using them with students.
You can avoid sending content for such processing by not using those features.
Retention and deletion
We keep data for as long as your account is active and as needed to operate the service and meet legal obligations.
You can request account deletion from the app or the web dashboard where available. When you delete your account, we remove account-associated data within technical and legal limits.
For student and exam records, we may retain results and related records as needed for educational reporting, integrity checks, and dispute resolution, then delete or minimize them under our retention practices.
Your rights and choices
Privacy rights vary by jurisdiction and by how your learning organization uses the product. Where applicable, we aim to provide reasonable ways to request access, correction, deletion, and to object to or restrict certain processing.
When a feature requires a device permission (for example camera or microphone), access is requested only when needed. You can deny permissions, but some features may not work without them.
Mobile app, camera, and photos
If you use the app to attach images to questions or choices, the system requests camera or photo library access only when you choose that action. Precise device location is not a core requirement for assessment.
Web sign-in
The teacher web dashboard requires a verified teacher account via an identity provider.
Students join exams through dedicated links and the entry method set by the teacher for their institution — not as guests on the teacher dashboard.
Data stored on your device
The app may store some content locally on your device before sign-in or to continue work offline.
When you sign in, local content may be uploaded to your cloud account with your consent or as shown in the app interface; after that, the cloud account policies above apply.
Website contact form
When you send a message via the Contact page, we collect your name, contact details, optional subject, and message text to handle your request and reply.
Messages are kept to provide support and may notify our team internally; we do not use message content for targeted advertising.
Security
We apply reasonable safeguards to protect data in transit and at rest. No online service can guarantee perfect security; please protect your account with your identity provider and secure your devices.
Paid subscription, billing, and refunds
Quiiz offers teachers a recurring monthly subscription for cloud features (such as cloud question banks, file-based generation, and analytics) after the free seat or trial year ends, as shown in the app and on the website. Payment is processed through a secure gateway (StreamPay & Moyasar): Mada, Visa, Mastercard, and Apple Pay where available.
The free year for the first 500 teachers does not charge a card — no monetary refund applies because no payment is taken.
Turn off auto-renewal: you may request cancellation of the next billing cycle at any time. Access stays active until the end of the current paid period, and no new cycle is charged once cancellation is processed. Send the request via Contact using the email on your account and mention “cancel auto-renewal”.
Refund for the current paid cycle (24-hour window): if you are not satisfied, you may request a full refund for the current cycle within 24 hours of payment confirmation, provided you have not exceeded these trial-usage limits: (1) 10 PDF pages or fewer counted toward question generation since payment, (2) cloud storage increase of 100 MB or less since payment, (3) no live Quiiz session launched with students (active exam link) since payment. We verify against account records; if limits are exceeded, we may decline a refund or offer auto-renewal cancellation only through period end.
After the 24-hour window, or after exceeding the usage limits above, the current cycle is non-refundable; you may continue until it ends or request cancellation for future cycles only.
With auto-renewal enabled, the next cycle is charged when StreamPay issues the invoice. Cancelling renewal does not reverse a cycle already paid.
Promotions and discounts: any approved refund is based on the amount you actually paid after the discount, not the pre-discount list price.
Digital service: cloud access begins after payment confirmation. Refund requests after heavy use of features (beyond the trial limits) are treated as service delivery — refunds apply only where the sections above allow.
To cancel renewal or request a refund: use Contact and choose a billing/subscription topic. We aim to process approved requests within 14 business days, refunded via the original payment method where the processor allows.
Changes
We may update this page from time to time. The version published at this URL when you visit applies; please review it periodically.
Contact
For privacy questions or data requests, use the Contact form.
We may reasonably request additional information to verify identity or process your request and protect your account and data.