1. Introduction

QuizMaster ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully.

By using QuizMaster, you consent to the data practices described in this Privacy Policy. If you do not agree with this policy, please discontinue use of the Service.

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

• Account Information: Email address, name (if provided), password (encrypted)
• Profile Data: Username, subscription tier, preferences
• Payment Information: Processed through Stripe (we do not store credit card details)
• Communication Data: Messages sent through contact forms or support requests

2.2 Usage Data

We automatically collect information about your interaction with the Service:

• Quiz Activity: Questions answered, scores, time spent, completion rates
• Progress Data: Quiz history, performance analytics, learning streaks
• Gamification Data: Points, badges, achievements, levels
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Access times, pages viewed, errors encountered

2.3 Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Maintain your session and authentication
• Remember your preferences and settings
• Analyze usage patterns and improve the Service
• Provide personalized content and recommendations

You can control cookies through your browser settings, but disabling them may affect functionality.

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide the Service: Process registrations, manage accounts, deliver quiz content
• Personalization: Adapt difficulty levels, recommend quizzes, track progress
• Payment Processing: Process subscriptions and handle billing (via Stripe)
• Communication: Send service updates, password resets, support responses
• Analytics: Understand usage patterns, improve features, fix bugs
• Security: Detect fraud, prevent abuse, enforce Terms of Service
• Legal Compliance: Respond to legal requests, protect our rights
• Marketing: Send promotional emails (with your consent, opt-out available)

4. How We Share Your Information

We do NOT sell your personal information. We may share your data in the following circumstances:

4.1 Service Providers

We share data with third-party vendors who assist us:

• Stripe: Payment processing (see Stripe's Privacy Policy)
• Cloud Hosting: Database and server infrastructure
• Email Services: Transactional and marketing emails
• Analytics Tools: Usage tracking and performance monitoring

These providers are contractually obligated to protect your data and use it only for specified purposes.

4.2 Legal Requirements

We may disclose your information if required to:

• Comply with legal obligations (court orders, subpoenas)
• Protect our rights, property, or safety
• Investigate fraud or security issues
• Enforce our Terms of Service

4.3 Business Transfers

If QuizMaster is acquired, merged, or sold, your information may be transferred to the successor entity. We will notify you of any such change and your choices regarding your data.

4.4 Aggregated Data

We may share anonymized, aggregated data (e.g., "70% of users prefer SAT prep") that cannot identify you personally.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted over HTTPS, passwords hashed with bcrypt
• Access Controls: Limited employee access to personal data
• Monitoring: Regular security audits and vulnerability assessments
• Backups: Regular encrypted backups to prevent data loss

Important: No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. Use strong passwords and do not share your account credentials.

6. Your Privacy Rights

Depending on your location, you may have the following rights:

6.1 Access & Portability

• Request a copy of your personal data
• Download your quiz history and progress data

6.2 Correction

• Update inaccurate or incomplete information through your account settings

6.3 Deletion

• Request deletion of your account and associated data
• Note: Some data may be retained for legal/accounting purposes

6.4 Opt-Out

• Unsubscribe from marketing emails (link in every email)
• Disable cookies through browser settings

6.5 Objection & Restriction

• Object to certain data processing activities
• Request restriction of data processing in specific circumstances

To exercise these rights, contact us at [email protected]. We will respond within 30 days (or as required by applicable law).

7. Data Retention

We retain your information for as long as necessary to:

• Provide the Service and maintain your account
• Comply with legal obligations (tax records, dispute resolution)
• Resolve disputes and enforce our Terms

After account deletion, we will anonymize or delete your data within 90 days, except where retention is required by law.

8. International Data Transfers

QuizMaster is based in the United States. If you access the Service from outside the U.S., your information may be transferred to, stored, and processed in the U.S., where data protection laws may differ from your jurisdiction.

By using the Service, you consent to the transfer of your information to the U.S. For users in the European Economic Area (EEA), we comply with GDPR through appropriate safeguards (Standard Contractual Clauses).

9. Children's Privacy

QuizMaster is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it immediately.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected].

10. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

11. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request details about data collected and how it's used
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt out of the "sale" of personal information (we don't sell data)
• Non-Discrimination: We will not discriminate against you for exercising your rights

To submit a CCPA request, email [email protected] with "CCPA Request" in the subject line.

12. European Privacy Rights (GDPR)

Users in the European Economic Area (EEA) have rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process data based on consent, contract performance, or legitimate interests
• Data Protection Officer: Contact [email protected] for GDPR inquiries
• Supervisory Authority: You may lodge a complaint with your local data protection authority

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through a prominent notice on the Service. The "Last Updated" date at the top indicates when this policy was last revised.

Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your data, please contact: