Privacy Policy

Who we are

Flip Quizz is a study app for students at https://flipquizz.com. The service is operated by Amir Hasan on behalf of Mario, who built it.

Questions about this policy? Email support@flipquizz.com.

What we collect

When you create an account

• Your email address.
• A password you choose (never seen or stored by us in plain text -- it is hashed by our authentication provider, Supabase).
• A timestamped record that you confirmed you are 13 or older (age_13_attested_at), and the version of these documents you agreed to (terms_version).
• An optional display name you can set in Settings.

When you use the app

• The flashcards, decks, quizzes, notes, and saved quizzes you create.
• The messages you send the AI tutor and the AI's replies.
• Mock exams generated for you.
• Timestamps of each card review, so we can show your daily streak and progress toward daily goals, plus a flag for any day preserved by a streak freeze.
• A count and short preview of your AI feature use with the topic snippet, so we can apply daily limits and avoid repeating the same generated content on re-runs.
• User preferences: current theme, daily study goal, coin and diamond balances, owned and equipped profile pictures, streak-freeze inventory, and subscription plan status.

When you upload materials for the mock-exam feature

• PDFs: text is extracted from them server-side and sent to our AI provider. The PDF file itself is discarded -- we do not store it.
• Images (JPEG, PNG): the image bytes are sent to our AI provider, then discarded. We do not store the image.
• YouTube URLs(only when you have confirmed you are 18 or older): the URL is sent to Google's Gemini API, which fetches the video itself and processes both its audio and visual content to generate exam questions. We do not store any video content or transcripts; Google's handling of the fetched video is governed by their own policies. A record that you confirmed 18+ before this specific request is stored on our side.

When you form or join a group

• Group name, unique join code, and membership list.

When you subscribe to Premium

• We store a Stripe customer ID and a subscription ID linking your account to your billing record with Stripe. Stripe handles all card data; we never see or store your card number.
• Your current plan (free / premium), status, and trial or renewal end date.

We do NOT collect

• Your phone number, real name, physical address, or date of birth.
• Location, device fingerprint, or advertising IDs.
• Third-party analytics or tracking pixels.
• Payment card data -- Stripe handles that entirely on their side.

What we do with it

• Show it back to you. Your decks, streaks, notes, exam history -- the app is a personal tool.
• Send it to AI providersso they can generate flashcards, quizzes, exams, tutor replies, explanations, and video-based content. See “Third parties” below.
• Never sell or share your information with advertisers, data brokers, or unaffiliated third parties. We do not run ads.
• Public decks are the exception.If you mark a deck “public,” its contents (name, description, cards) become visible to anyone with the share link and appear in our public Discover catalog. Marking a deck public is entirely your choice; every deck starts private.

Third parties (subprocessors)

We rely on these services to run the app. Your data passes through them under their own privacy policies:

Age policy

• Flip Quizz is intended for users 13 and older. We do not knowingly collect data from anyone under 13.
• The YouTube video-based mock exam feature is intended for users 18 and older only. That feature uses Google's Gemini API, whose terms of service restrict use where end users may be under 18. Before this feature can be used, the user must explicitly confirm they are 18 or older by checking a labeled box; the confirmation is validated on our servers and permanently recorded.
• All other features remain available to users 13 and older.

If you believe a user under 13 has created an account, please email us at the contact address above and we will delete the account.

How long we keep your data

Your account and study data persist until you or we delete them:

• You can delete individual items (decks, cards, notes, mock exams, tutor conversations, saved quizzes) using their delete buttons in the app.
• You can delete your entire account from Settings → Danger zone → Delete account. That permanently removes your auth record and every table that references it -- decks, cards, notes, study logs, mock exams, tutor conversations and messages, group memberships, settings, AI-generation history, saved quizzes, and rewards balances. There is no soft delete.

Uploaded PDFs and images are discarded as soon as the AI is done with them (usually within seconds).

Backups and infrastructure logs are retained by our providers (Supabase, Render, Resend, Stripe) according to their standard schedules, which are outside our direct control.

Your rights

Regardless of jurisdiction:

• See your data: log in; the app shows all of it.
• Edit or delete individual content: use in-app delete buttons.
• Delete your entire account:Settings → Danger zone → Delete account.
• Ask questions or request specific data: email us at the contact address above.

If you are in California, the EU, the UK, or another jurisdiction that grants additional rights (access, portability, correction, restriction of processing, right to complain to a regulator), you have those rights and we will respect them. Contact us with the request.

Security

• Passwords are hashed by Supabase using industry-standard algorithms.
• Access to your data is enforced at the database level using Row Level Security -- one user cannot read or modify another user's data even if our application code had a bug.
• Application-level code additionally filters every private query by user identity as defense in depth.
• API keys and other credentials are stored server-side only and are never sent to the browser.
• No audit or certification (SOC 2, ISO 27001, etc.) has been performed. We are a small preview-stage service.

Changes

If we change this policy, we will update the version identifier at the top and (for material changes) post an in-app notice.

This document is written in plain English on purpose. If anything is unclear, please email support@flipquizz.com and we will answer directly.