Privacy Policy

Last updated: February 17, 2026

1. Data Controller

The data controller responsible for your personal data is:

Julius Schröder
Eppendorfer Baum 34, 20249 Hamburg, Germany
Email: hello@quizcamapp.com

2. Overview

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the Quizcam mobile application ("App") and the website at quizcamapp.com ("Website"), collectively the "Service." We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other applicable data protection laws.

3. What Data We Collect

3.1 Account Data (optional)

If you choose to sign in, we collect:

• Apple Sign-In: Your Apple-provided user identifier and, if you choose to share it, your name and email address.
• Google Sign-In: Your Google-provided user identifier, name, and email address.

You may also use the App anonymously without providing any personal information.

3.2 User-Provided Content

When you create quizzes, we process:

• Photos captured via the camera for OCR text extraction.
• PDF documents you upload for text extraction.

These files are uploaded to our backend for processing and are stored in Google Cloud Storage. The extracted text and generated quiz data are stored in Google Cloud Firestore.

3.3 App Usage Data

We collect usage analytics through:

• Firebase Analytics: App usage patterns, session data, device type, operating system version, app version, crash data. Data is processed by Google LLC.
• Mixpanel: In-app events and interactions for product improvement. Data is processed by Mixpanel, Inc.

This data may include device identifiers, interaction events, and aggregated usage statistics.

3.4 On-Device Data

Certain preferences and local app state are stored on your device using UserDefaults (iOS). This data does not leave your device and is not accessible to us.

3.5 Payment Data

All payments are processed by Apple through In-App Purchase. We do not collect, process, or store any payment information such as credit card numbers. Apple's privacy policy governs the processing of your payment data.

3.6 Website Access Data

When you visit the website, our hosting provider may log your IP address and access data for technical and security purposes.

3.7 Contact Inquiries

When you contact us by email, we process your email address and the content of your message to respond to your inquiry. The legal basis is your legitimate interest in having your inquiry processed (Art. 6(1)(f) GDPR) or the performance of pre-contractual measures (Art. 6(1)(b) GDPR).

4. How We Use Your Data

We use your data for the following purposes:

• Service delivery: Processing your uploaded content via OCR and AI (Google Vertex AI) to generate quiz questions. Legal basis: Contract performance (Art. 6(1)(b) GDPR).
• Account management: Managing your user account and syncing quiz data across sessions. Legal basis: Contract performance (Art. 6(1)(b) GDPR).
• Analytics and improvement: Understanding how the App is used to improve features and user experience. Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).
• Technical operation: Maintaining, securing, and debugging the Service. Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).
• Contact inquiries: Responding to your emails. Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) or pre-contractual measures (Art. 6(1)(b) GDPR).

5. AI and Automated Processing

We use Google Vertex AI (a service provided by Google Cloud) to generate quiz questions from your uploaded content. Your text content is sent to the Google Vertex AI API on our backend servers for processing. Google processes this data as a data processor on our behalf. We do not use your content to train AI models. The AI processing is solely for generating your quiz questions.

6. Data Sharing and Third-Party Services

We share data with the following service providers, who act as data processors:

• Google Cloud Platform (Google LLC): Backend infrastructure, Cloud Firestore (database), Cloud Storage (file storage), and Vertex AI (quiz generation). Google may process data in the EU/EEA or in the US under EU Standard Contractual Clauses.
• Firebase (Google LLC): Authentication, analytics, and crash reporting.
• Mixpanel, Inc.: Product analytics. Mixpanel processes data in the US under EU Standard Contractual Clauses.
• Apple Inc.: Authentication (Sign in with Apple) and payment processing (In-App Purchase).

We do not sell your personal data. We do not share your data with advertisers.

7. International Data Transfers

Some of our service providers are based in the United States. Where personal data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs) and, where applicable, additional technical and organizational measures in accordance with GDPR requirements.

8. Data Retention

• Account data and quiz data are retained as long as you maintain an active account.
• Uploaded files (photos, PDFs) are retained only as long as necessary for processing and quiz generation, and may be deleted from cloud storage after processing is complete.
• Analytics data is retained according to the retention policies of Firebase Analytics and Mixpanel (typically up to 14 months for Firebase, configurable for Mixpanel).
• Upon account deletion, your personal data and quiz data are permanently deleted from our servers, subject to any legal retention obligations.

9. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of access (Art. 15 GDPR): You may request confirmation of whether we process your data and obtain a copy.
• Right to rectification (Art. 16 GDPR): You may request correction of inaccurate personal data.
• Right to erasure (Art. 17 GDPR): You may request deletion of your personal data. You can delete your account directly in the App's Settings.
• Right to restriction (Art. 18 GDPR): You may request restriction of processing in certain circumstances.
• Right to data portability (Art. 20 GDPR): You may request your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): You may object to processing based on legitimate interests, including analytics.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at hello@quizcamapp.com. We will respond within one month as required by law.

10. Additional Rights for California and Other US Residents

If you are a resident of California, Virginia, Colorado, Connecticut, or other US states with comprehensive privacy laws, you may have additional rights:

• Right to know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to delete: You may request deletion of your personal information. You can delete your account directly in the App's Settings, or contact us to request deletion.
• Right to correct: You may request correction of inaccurate personal information.
• Right to opt-out of sale/sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. If this changes in the future, we will provide an opt-out mechanism.
• Non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at hello@quizcamapp.com. We will verify your identity before processing requests. You may also designate an authorized agent to submit requests on your behalf.

11. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. The competent authority for our business is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany
Website: https://datenschutz-hamburg.de

12. Children's Privacy

The App is suitable for users of all ages. We do not knowingly collect personal data from children under 16 without parental consent. If you believe we have inadvertently collected data from a child without proper consent, please contact us immediately and we will take steps to delete such data.

13. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (TLS/SSL), secure cloud infrastructure, and access controls. However, no method of electronic storage or transmission is 100% secure.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by other reasonable means. The "Last updated" date at the top indicates the most recent revision. Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

15. Contact

For any questions or concerns about this Privacy Policy or our data practices, please contact:

Julius Schröder
Email: hello@quizcamapp.com