Privacy Policy

Effective Date: September 12, 2026

This Privacy Policy describes how Version Zero Limited trading as Quizgecko("Quizgecko", "we", "us" or "our") collects, uses, shares, and protects personal information when you use our online Software-as-a-Service (SaaS) platform and mobile application ("Service"). By accessing or using our Service, you agree to the collection and use of your information in accordance with this Privacy Policy. For information about how we process data on behalf of business customers, please see our Data Processing Addendum.

1. Our Company Information

Legal Business Name: Version Zero Limited trading as Quizgecko
Registered Address:
86-90 Paul Street
London, United Kingdom
EC2A 4NE, United Kingdom
Company Number: 13849704
VAT Number: GB449728741

Contact for Privacy Inquiries:
Email: legal@quizgecko.com

2. Scope and Purpose

Quizgecko is an online SaaS tool and mobile app designed primarily for students, teachers, and businesses to study, create, and share learning content. This Privacy Policy explains how we process personal data in accordance with applicable data protection laws including the GDPR, CCPA, and other local privacy regulations.

3. Information We Collect

3.1 Personal Data

When you use our Service, we collect standard personal data that is typical for a web application, including:

• Name
• Email Address

Note: We do not collect physical addresses unless you opt for a paid service; such address data is collected and processed by our third-party payment provider, Stripe, and is not retained by Quizgecko.

3.2 How Data Is Collected

• User Input: Information provided through registration forms, contact forms, surveys, and other interactive elements.
• Social Login: We offer sign-in options through Google and Apple. When you use these services, we receive basic profile information from your social account as permitted by their privacy settings.
• Cookies: We use first-party cookies to enable core functionality (e.g., logging into your account) and for analytics. Tools like Google Analytics help us improve our Service. You can opt out of non-essential cookies via our cookie banner.
• Customer Support: We use our own support system to receive and respond to customer requests.

3.3 Additional Collection Channels

We may also collect personal information when you interact with us in person, online, or by phone or mail in connection with:

• Receiving help through our customer support channels;
• Participating in customer surveys or contests; and
• Facilitating the delivery of our Services or responding to your inquiries.

3.4 ChatGPT App and Other Connected Assistants

When you connect Quizgecko to ChatGPT, we receive the information sent with your requests. This includes instructions, relevant conversation text, topics, search terms, public HTTPS URLs, selected files and their names, and the learning content you ask us to create or change. Requests can also include course and activity identifiers, language, difficulty, visibility choices, and confirmation of edits or deletions. We associate requests with your connected Quizgecko account.

Quizgecko sends results back to ChatGPT so it can answer your request. Account checks can return your Quizgecko name, email address, account identifier, subscription or trial status, and course allowance and usage. Course tools can return existing or generated course titles, descriptions, visibility, source URLs, file names and metadata, modules, quiz questions and correct answers, flashcards, study notes, mind maps, and generation status or error messages. Resource identifiers and modification times support follow-up edits and prevent conflicting changes. This can include private course content that you authorize the app to access.

We use these inputs and outputs to authenticate your account, check access and usage limits, retrieve learning content, import sources, generate content with AI, and perform requested edits or deletions. We also record account-linked tool usage, success and failure events, and technical diagnostics to prevent abuse, troubleshoot errors, measure performance, and improve the service. We store results of changes to prevent duplicate actions when a request is retried.

The connection uses OAuth access and refresh tokens to authorize access to your Quizgecko account. Quizgecko does not receive your ChatGPT password and does not return passwords or OAuth tokens in learning-content tool results. OpenAI processes the information it receives under its own terms, privacy policy, and your ChatGPT data settings. Deleting content in Quizgecko does not delete copies already present in ChatGPT.

New courses created through the app are private by default. If you ask to publish a course, its learning content becomes publicly accessible. Changes to an existing public course can also become public. Public content may be copied or indexed by others. Keep a course private when you do not want to share it publicly.

You can disconnect Quizgecko using the connected-app controls in ChatGPT, choose what material to send, change course visibility, and delete courses in Quizgecko. Disconnecting stops the connection; it does not erase previously stored courses, source files, or ChatGPT conversations. Course deletion removes content from normal use but is not immediate erasure of every stored copy. For erasure of retained content, account deletion, access, or correction, contact legal@quizgecko.com. See Section 7 for retention and Section 8 for your rights.

Only send material you have permission to use. Do not include payment-card details, patient health records, government identifiers, passwords, API keys, or other authentication secrets in source material or learning-content requests.

4. How We Use Your Information

We process your personal data only for purposes that are necessary and lawful, including to:

• Provide and maintain our Service;
• Personalize and improve your experience;
• Deliver customer support;
• Analyze usage and performance (via tools such as Google Analytics).
• Identify customer organizations in marketing materials, case studies, and proposals, unless they opt out (see Section 4.1).

Our legal basis for processing includes the performance of our contract with you, your consent where applicable, and our legitimate interests under applicable laws (including GDPR and CCPA).

4.1 Customer Name and Logo

If you use Quizgecko on behalf of an organization, we may use that organization name and logo to identify it as a customer in marketing materials, case studies on our website, and proposals or bids to other prospective customers, as described in our Terms of Service. This does not include the personal names of individual users, student information, or private learning content.

Our legal basis for this use is our legitimate interests in promoting our Service. You may object at any time.

If you wish to opt out, that is completely fine. Contact us at legal@quizgecko.com and we will stop using your organization name and logo in this way. Opting out does not affect your use of the Service.

5. Data Sharing and Third-Party Transfers

We share your personal data only with trusted third parties, including:

• Google Analytics: For analyzing user interactions and improving our Service.
• OpenAI / ChatGPT: For the connected ChatGPT app, OpenAI receives the tool results described in Section 3.4, including requested account information and learning content. This is separate from our use of AI providers to generate learning content.

AI and content-processing providers receive source text, files or extracted content, generation instructions, and relevant existing learning content when needed to generate, transcribe, analyze, or edit materials. These providers include Google Gemini, OpenAI, and OpenRouter and the model providers used through its routing service. The provider used depends on the activity, model, and fallback needed for the request.

Infrastructure, storage, delivery, and security providers, including Hetzner, Google Cloud, and Cloudflare, process data needed to host, store, and deliver the service. Monitoring providers, including Sentry and Grafana, process technical diagnostics and usage information. Payment and subscription providers include Stripe and RevenueCat. Mailgun processes email delivery data. These recipients receive the data needed for their respective services; using the ChatGPT app does not itself send your course content to payment providers.

See our Data Processing Addendum for further information about service providers. Provider retention and data-use terms depend on the service and applicable agreement. ChatGPT settings apply to information processed by OpenAI in ChatGPT; they do not control copies held in Quizgecko or by other providers.

These third parties are contractually obligated to protect your data in compliance with applicable data protection laws. Data transfers occur only to countries that provide an adequate level of protection as required by applicable regulations.

6. Cookies and Tracking Technologies

• Essential Cookies: Used to provide core functionality (e.g., authentication, session management).
• Analytics Cookies: Help us understand how our Service is used so we can improve it. You may opt out of these cookies by adjusting your cookie preferences via our cookie banner.

For further information on managing your cookie settings, please refer to our Cookie Notice.

7. Data Retention and Security

7.1 Data Retention

We retain your personal data for as long as your account remains active and for the duration necessary to provide you with our Service. This includes saved learning content and source material. Disconnecting an assistant or becoming inactive does not automatically erase that data.

Account deletion removes access and anonymizes account details; some learning content is initially marked as deleted rather than physically erased. Source files and stored tool results can remain in our systems. To request erasure of these retained copies, contact legal@quizgecko.com. We review and act on verified erasure requests, normally within 30 days, and explain any applicable exception or extension. We may retain records needed for legal obligations, billing, fraud prevention, or resolving disputes for the period needed for those purposes.

Database backups follow a 30-day retention cycle. Removal from active systems does not immediately remove backup copies. Information already shared with ChatGPT, other providers, or the public is subject to their separate retention and deletion processes.

Results stored to prevent duplicate app actions are used for a 24-hour retry window. Expiry of that window does not automatically erase the stored result. These records remain until removed through a data-erasure process. Operational logs and audit trails are retained for up to 90 days for security and debugging. Account-linked service analytics are retained while needed to measure use of the service and are included when we review a verified erasure request. Temporary files used to transfer an upload are removed after transfer; the saved source file remains with the service.

7.2 Security Measures

We implement strict security measures to protect your data, including:

• Access Controls: Only authorized developers and personnel have access to user data.
• Encryption: Sensitive information (e.g., passwords) is encrypted at rest.
• Regular Security Reviews: We continually assess and update our security practices to ensure ongoing protection.

8. Your Rights and Choices

Under applicable data protection laws, you have the following rights regarding your personal data:

• Access: Request a copy of your personal data.
• Correction: Request correction of any inaccurate or incomplete information.
• Deletion: Request deletion of your personal data, subject to legal obligations.
• Data Portability: Request your data in a structured, commonly used, machine-readable format.
• Objection and Restriction: Object to or request restrictions on our processing of your data.
• Withdrawal of Consent: Withdraw consent for processing, where applicable, without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at legal@quizgecko.com or use the designated channels in your account settings.

9. International Data Transfers

Your personal data may be transferred to and processed in third countries. In all such cases, we ensure that appropriate safeguards are in place to maintain a level of protection equivalent to that under the GDPR.

10. CCPA Privacy Notice for California Residents

The California Code of Regulations defines a "resident" as:
1. Every individual who is in the State of California for other than a temporary or transitory purpose; and
2. Every individual who is domiciled in the State of California who is outside the State of California for a temporary or transitory purpose.

If you meet this definition, you are considered a California resident, and we must adhere to certain rights and obligations regarding your personal information.

What categories of personal information do we collect?

In the past twelve (12) months, we have collected the following categories of personal information:

Verification Process

Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have information in our system. These verification efforts require us to ask you to provide information so that we can match it with information you have previously provided us.

Response Timing and Format

We will respond to a verified consumer request within fifteen (15) days of its receipt. If we require more time, we will inform you of the reason and extension period in writing.

Non-Discrimination

We will not discriminate against you if you exercise your privacy rights.

11. Policy Updates

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the updated policy will be effective immediately upon posting. Please check this page periodically for updates. Your continued use of our Service after any changes constitutes your acceptance of the revised Privacy Policy.

12. Children's Privacy

Our Service is intended for users who are at least 13 years old. The minimum age of consent varies by jurisdiction:

• 13 years old in the United States (under COPPA)
• 16 years old in most European Union countries (under GDPR), unless local law sets a different age
• 13 years old in the United Kingdom (under UK GDPR)

We do not knowingly collect personal data from individuals under these age thresholds. If we become aware that we have collected personal information from a child below the applicable age of consent, we will take steps to delete that information. If you believe we might have any information from or about a child under the applicable age of consent, please contact us at legal@quizgecko.com.

13. Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: legal@quizgecko.com
Address:
86-90 Paul Street
London, United Kingdom
EC2A 4NE, United Kingdom