Privacy policy

Last updated: October 23, 2026

Who is responsible

Ziad Alghawi, Germany
Contact: LinkedIn

What Quiz AI stores

• Your account: name, email address, password hash, and your profile picture if you sign in with Google.
• Your study content: courses, the text read from the PDFs you upload, quizzes and your attempts with the answers you chose.
• For each sign-in session: your IP address and browser (user agent).
• Rate limits on sign-in, sign-up and password reset count requests per IP address.

Services that process your data

• Vercel: hosts the website (region Frankfurt, Germany).
• Supabase: hosts the database (region Frankfurt, Germany).
• Google Gemini API: receives the text of the chapters you generate a quiz from.
• Google sign-in: only if you choose to sign in with Google.
• Stripe: handles payments. Card details are entered on Stripe's page and never reach Quiz AI.
• Gmail: sends the codes for password reset and email change.

Legal basis

Art. 6(1)(b) GDPR to provide your account and the quiz service; Art. 6(1)(f) GDPR for security (sign-in sessions, rate limits) and keeping the service running. Google sign-in is only used if you choose it.

Transfers outside the EU

Google, Stripe and Vercel are US companies. Transfers are based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.

Cookies

Quiz AI only sets the cookies needed to keep you signed in. There is no analytics or advertising tracking.

How long data is kept

Deleting your account in Settings deletes your data and cancels your subscription. Copies in the hosting providers' backups and server logs are deleted automatically after a short period.

Your rights

You can ask for access to, correction, deletion or export of your data, restrict or object to its processing, and complain to a data protection authority, for example the Bavarian State Office for Data Protection Supervision (BayLDA).