Privacy Policy

Last updated: 20 February 2026

In short: QuizCards is an educational app designed for students and teachers. We only collect the data we need to run the service. We never sell your data. Voice recordings are processed on your device and are never stored on our servers. If you're under 18, your school or parent/guardian should be aware you're using QuizCards.

1. Who we are

QuizCards ("we", "us", "our") is a UK-based educational platform that helps students develop oracy skills through voice-powered quizzes. Our website is www.quizcards.co.uk and our app is available at app.quizcards.co.uk.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, QuizCards is the data controller.

If you have any questions about this policy, contact us at: info@quizcards.co.uk

2. What data we collect

We collect different data depending on how you use QuizCards:

Data	Why we collect it	Lawful basis
Full name	To personalise your account and let teachers identify students	Legitimate interest / Contract
Email address	Account creation, login, and important service communications	Contract
Password	Account security (stored securely hashed by Firebase Authentication — we never see your password)	Contract
Role (Student / Teacher / Other)	To provide the right experience and features for your role	Contract
Quiz results and scores	To track progress and provide feedback to students and teachers	Legitimate interest
Voice / speech input	To check spoken answers against quiz questions (processed on-device, not stored)	Consent
Contact form messages	To respond to enquiries sent through our website	Legitimate interest

3. Children and young people

    Important for students, parents, and teachers: QuizCards is designed for use in educational settings. We take the privacy of children and young people very seriously.
  

QuizCards is intended to be used by students in schools, typically aged 11 and above. We are committed to complying with the ICO's Age Appropriate Design Code (Children's Code).

If you are under 13

You should only use QuizCards with the knowledge and permission of your parent, guardian, or teacher. We recommend that schools obtain parental consent before providing access to students under 13.

If you are 13–17

You can create an account, but we recommend your school or parent/guardian is aware you are using QuizCards.

What we do to protect young users

We collect the minimum data needed to provide the service
We do not use personal data for marketing to students
We do not show advertising
We do not sell or share student data with third parties for commercial purposes
Voice data is processed on-device and is never recorded or stored on our servers
Privacy settings are set to high by default
We use clear, plain language in this policy

4. Voice and speech data

QuizCards uses speech recognition so students can answer quiz questions by speaking. Here's what you need to know:

On-device processing: Speech recognition uses your device's built-in capabilities (such as the Web Speech API in your browser or on-device speech services on mobile). Your voice is processed locally.
Not recorded: We do not record, store, or transmit audio recordings of your voice to our servers.
Text-to-speech: QuizCards reads questions aloud using your device's text-to-speech engine. This is entirely on-device.
Permission required: Your browser or device will ask for microphone permission before speech recognition is used. You can deny this and still use QuizCards by typing answers instead.

Note: Some browsers (such as Google Chrome) may send audio to cloud servers for processing as part of the Web Speech API. This is controlled by your browser, not by QuizCards. You can check your browser's privacy settings for more information.

5. How we use your data

We use your personal data to:

Create and manage your account
Provide the quiz and learning experience
Allow teachers to view student progress and results
Send you important service emails (e.g. welcome email, password reset)
Respond to contact form enquiries
Improve and develop the QuizCards platform

We never use your data to:

Show you adverts
Sell to third parties
Build advertising profiles
Send marketing emails to students

6. Who we share your data with

We use a small number of trusted third-party services to run QuizCards. These are all established providers with their own GDPR-compliant privacy policies:

Service	What it does	Data shared	Location
Google Firebase	Authentication, database, and hosting	Name, email, role, quiz data	EU/UK servers
Brevo (Sendinblue)	Transactional emails (welcome email, contact form)	Name, email	EU
HubSpot	Customer relationship management	Name, email, role, signup date	EU/US (with adequate safeguards)

We do not share data with any other third parties. Teachers can see the results and progress of students who take their quizzes — this is a core feature of the educational platform.

7. International data transfers

Some of our service providers (such as Google and HubSpot) may process data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as:

UK adequacy decisions
Standard Contractual Clauses (SCCs)
The provider's own GDPR and data protection commitments

8. How long we keep your data

Account data: Kept for as long as your account is active. If you delete your account, we will delete your personal data within 30 days.
Quiz results: Kept for as long as your account is active, so you and your teachers can review progress.
Contact form messages: Kept for up to 12 months, then deleted.
Voice data: Not stored — processed in real-time on your device only.

9. Your rights

    Under UK GDPR, you have the following rights. These apply to all users, including students.
  

Right of access — You can ask us for a copy of the personal data we hold about you.
Right to rectification — You can ask us to correct any inaccurate data.
Right to erasure — You can ask us to delete your data ("right to be forgotten").
Right to restrict processing — You can ask us to limit how we use your data.
Right to data portability — You can ask for your data in a machine-readable format.
Right to object — You can object to our processing of your data where we rely on legitimate interest.
Right to withdraw consent — Where we rely on your consent (e.g. microphone access), you can withdraw it at any time.

To exercise any of these rights, email us at info@quizcards.co.uk. We will respond within 30 days.

If you are a student under 18, your parent, guardian, or school can make these requests on your behalf.

10. Data security

We take the security of your data seriously. We use the following measures to protect it:

All data is transmitted over HTTPS (encrypted in transit)
Passwords are securely hashed — we never store or see your password in plain text
Access to our database and systems is restricted to authorised personnel only
We use Firebase Authentication, which is built and maintained by Google with industry-standard security
We regularly review our security practices

11. Cookies

QuizCards uses only essential cookies required for the service to function (e.g. authentication tokens to keep you logged in). We do not use:

Advertising or tracking cookies
Third-party analytics cookies
Social media tracking pixels

Because we only use strictly necessary cookies, we do not require a cookie consent banner under UK GDPR.

12. Changes to this policy

We may update this privacy policy from time to time. If we make significant changes, we will notify users through the app or by email. The "last updated" date at the top of this page will always show when the policy was last revised.

13. How to complain

If you are unhappy with how we handle your data, please contact us first at info@quizcards.co.uk and we will do our best to resolve your concern.

You also have the right to lodge a complaint with the UK's data protection regulator:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113