Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address, full name (via Google Sign-In, Sign in with Apple, or email sign-in)
• Study Materials: Text content and images you upload for exam generation
• AI Tutor Conversations: Messages and photos you send to AI Tutor
• User Preferences: Language preferences, app settings

1.2 Automatically Collected Information

• Usage Data: Number of exams generated, practice sessions, subscription status
• Device Information: Device type, operating system version
• Performance Data: App crashes, errors, and performance metrics

2. How We Use Your Information

We use your information for the following purposes:

• AI Processing: Create exam questions, study material and AI Tutor replies using OpenAI models (see section 3.1)
• Account Management: Create and manage your user account
• Service Delivery: Provide core app features (material storage, exam generation, practice mode)
• Subscription Management: Process payments and manage subscription status
• App Improvement: Analyze usage patterns to improve features and user experience
• Communication: Send important updates about your account or service changes

3. Third-Party Services

QuickExamAI integrates with the following third-party services:

3.1 OpenAI (AI Processing)

QuickExamAI's AI features are powered by OpenAI, L.L.C. (the company behind ChatGPT).

• What is sent: the topic, title and outline you type to generate an exam or study material; the text of the study material you generate an exam from; photos of study material you add (to read their text); and the messages and photos you send to AI Tutor.
• Your permission: in the iOS and Android apps, an AI data sharing screen shows what will be shared and with whom, and asks for your permission before anything is sent. Nothing is sent to OpenAI unless you agree. On the QuickExamAI website, content is sent only when you start an AI feature yourself.
• How it is collected: only when you enter or upload it and start an AI feature.
• How it is used: only to create your exam questions, study material and tutor replies. It is never sold or used for advertising.
• Who receives it: OpenAI, through QuickExamAI's server (Supabase). Your name, email address and account ID are not sent to OpenAI.
• How it is protected: under OpenAI's API data policy, content sent through the API is not used to train OpenAI's models and is kept for at most 30 days for abuse monitoring before it is deleted. OpenAI is bound by its API terms to protect this data at a level equal to this policy.
• Your choice: you can withdraw your permission at any time in the app under Profile > AI Data Sharing. AI features then stop until you agree again.
• Privacy Policy: https://openai.com/policies/privacy-policy

3.2 Supabase (Backend & Database)

• Purpose: User authentication, data storage, real-time updates
• Data Shared: Account info, study materials, generated exams, subscription data
• Privacy Policy: https://supabase.com/privacy

3.3 Google Sign-In

• Purpose: User authentication
• Data Shared: Email address, full name, profile picture
• Privacy Policy: https://policies.google.com/privacy

3.4 Apple

• Purpose: Sign in with Apple and App Store subscriptions (iOS)
• Data Shared: Email address (or Apple's private relay address), name, subscription status
• Privacy Policy: https://www.apple.com/legal/privacy/

3.5 Google Firebase, AdMob and Google Play

• Purpose: App analytics and push notifications (Firebase), ads for free users (AdMob), and Google Play subscriptions (Android)
• Data Shared: Device identifiers, app usage and diagnostics data, subscription status
• Ads and your consent: ads are shown only to free users of the apps; the website shows no ads. If you are in the EEA, the UK or Switzerland, the apps ask for your consent with Google's consent form before personalised ads are shown. If you do not consent, you see only non-personalised ads.
• Privacy Policy: https://policies.google.com/privacy

3.6 Paddle

• Purpose: Payments for subscriptions bought on the QuickExamAI website. Paddle is the merchant of record: it sells the subscription to you and handles payment, tax and invoices.
• Data Shared: Email address and subscription details (card details are handled by Paddle, not stored by us)
• Privacy Policy: https://www.paddle.com/legal/privacy

3.7 Vercel (Website Hosting)

• Purpose: Hosting and delivering the quickexamai.com website
• Data Shared: Technical request data such as IP address, browser type and the pages requested, kept in short-lived server logs
• Privacy Policy: https://vercel.com/legal/privacy-policy

4. Data Storage and Security

4.1 Data Storage

• All user data is stored securely in Supabase's cloud infrastructure
• Data is encrypted in transit (HTTPS/TLS) and at rest
• Images uploaded for Vision AI are processed but not permanently stored

4.2 Security Measures

• Industry-standard encryption protocols
• Secure authentication via OAuth 2.0 (Google Sign-In)
• Regular security audits and updates
• Access controls and monitoring

4.3 Data Retention

• Active Accounts: Data retained while account is active
• Deleted Accounts: Most data deleted immediately upon account deletion
• Email Blacklist: Email addresses from deleted accounts are retained to prevent abuse

5. Cookies on the Website

The quickexamai.com website uses only the cookies it needs to work. It does not use analytics, advertising or social media cookies.

• Sign-in cookies (names starting with sb-, set by Supabase): keep you signed in. They are removed when you sign out.
• preferred_language: remembers the language you choose. Kept for 1 year.
• geo_locale: remembers the language suggested for your country. Only the language is stored, not your location. Kept for 1 year.
• Paddle: on the pricing and subscription pages, Paddle's checkout script (including Paddle Retain, which helps with failed payments and cancellations) may set its own cookies or browser storage to run the checkout and prevent fraud.

You can delete cookies in your browser settings at any time. Without the sign-in cookies you cannot stay signed in.

6. Your Rights and Choices

You have the following rights regarding your personal information:

6.1 Access and Correction

• View your account information in the Profile screen
• Update your preferences and settings at any time

6.2 Data Deletion

• Delete your account and all associated data via Profile > Delete Account
• Once deleted, most data is removed immediately and permanently
• Your email address is blacklisted to prevent abuse (required for service integrity)

6.3 Data Export

• Request a copy of your data by contacting support
• We will provide your data in a readable format within 30 days

6.4 Your Rights in the EEA, the UK and Switzerland

If you are in the EEA, the UK or Switzerland, you also have the right to:

• Access, correct or delete your personal data, and receive it in a portable format
• Restrict our processing of your data, or object to processing based on our legitimate interests
• Withdraw your consent at any time (for AI data sharing: Profile > AI Data Sharing in the app). This does not affect processing that took place before you withdrew it
• Lodge a complaint with the data protection authority in the country where you live or work, or where you believe your rights were infringed

To use any of these rights, email support@quickexamai.com. We answer within one month.

7. Children's Privacy

QuickExamAI is designed for users aged 13 and above. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by:

• Updating the "Last Updated" date at the top of this policy
• Sending an in-app notification or email (for material changes)

Your continued use of QuickExamAI after any changes indicates your acceptance of the updated policy.

10. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), the UK and Switzerland, we process your personal data based on:

• Contract: Processing necessary to provide our services, such as your account, your materials and exams, and your subscription
• Consent: When you agree to AI data sharing (section 3.1) and to personalised ads (section 3.5). You can withdraw it at any time
• Legitimate Interests: Keeping the service secure, preventing abuse, and improving our services

11. Compliance

QuickExamAI complies with:

• Apple App Store and Google Play Store policies and requirements
• General Data Protection Regulation (GDPR) for EU users
• California Consumer Privacy Act (CCPA) for California residents
• Indonesian data protection laws and regulations