Privacy Policy

NoteQuiz turns photos of study notes and PDFs into practice quizzes. This page explains what we store, where it goes, and how to get rid of it. It is written to be readable — if anything is unclear, ask us.

1. What we collect

• Account details. Your email address, display name and sign-in provider (email/password or Google). Passwords are handled by Supabase Auth and are never visible to us.
• Your notes. The photos and PDFs you upload, plus their file name, type and size.
• Quiz content. The questions, options, explanations and topic tags generated from your notes, and any edits you make.
• Practice data. Attempts, scores, per-question answers, and daily generation counts.
• Operational logs. AI token counts, latency, model name, and success/failure status for each generation, plus basic rate-limit counters. These logs do not contain the text of your notes.

2. How your notes are processed

Uploads go directly from your browser to a private Supabase Storage bucket. When you press Generate quiz, our server downloads the files, checks them, compresses images, and sends them to Google's Gemini API to produce the quiz. Gemini is a third-party AI service; your file contents are processed by Google under its API terms. We do not use your notes to train any model.

Only upload material you have the right to share. Do not upload other people's private documents, medical records, or anything you would not be comfortable sending to an AI provider.

3. How long we keep things

• Uploaded files: deleted immediately after the quiz is generated, unless you tick “Keep my uploads”. Kept files stay in private storage until you delete the quiz or the files.
• Quizzes and practice data: kept until you delete the quiz. Deleting a quiz removes its questions, attempts, answers and stored files.
• Operational logs: retained for as long as needed for debugging and abuse prevention, typically no more than 90 days.
• Account: kept until you ask us to delete it. Email ashrafsayyad071@gmail.com and we will remove your account and associated content.

4. Sharing

Quizzes are private by default. If you switch on a share link, anyone with that link can read the quiz, practise it, and see the correct answers and explanations. Shared pages never reveal your email, scores or dashboard, and are marked noindex so search engines should not list them. Turn sharing off at any time to close the link.

5. Cookies and tracking

We use cookies only to keep you signed in (Supabase session cookies) and to remember your light/dark theme choice. For aggregate usage statistics we use Vercel Web Analytics, which is cookie-less and does not build cross-site profiles. There are no advertising trackers or third-party profiling pixels.

6. Security

Data is protected with Postgres row-level security, a private storage bucket, and server-only API keys. Uploads are downloaded by our server with a service key that never reaches the browser. No system is perfect; if you spot a problem, please report it to ashrafsayyad071@gmail.com.

7. Your choices

• Delete any quiz, including its questions and uploads, from the quiz page.
• Turn off a public share link at any time.
• Request a copy or deletion of your account data by email.
• Stop using the service and ask us to erase your account.

8. Children

NoteQuiz is intended for learners aged 13 and over. If you are younger, please use it with a parent or guardian. Contact us if you believe a child has created an account without consent.

9. Changes

We may update this policy as the beta evolves. Material changes will be announced in the app, and the date at the top will change.

10. Contact

Questions about privacy: ashrafsayyad071@gmail.com.