← Back to home

Privacy Policy

Last updated May 18, 2026

Short version

  • We collect what we need to run your account: email, the lessons you upload, the quizzes you generate, and basic usage counters.
  • We never use your uploaded materials or your generated quizzes to train any AI model — ours or anyone else's. Our model provider (Anthropic, via their commercial terms) is contractually bound to the same.
  • We don't sell your data. We don't share it with ad networks. We don't run third-party ad trackers on this site.
  • You can delete your account and source files at any time by emailing yaoyanweb@gmail.com. If you downgrade to Free, your source files are removed after 7 days; your generated quizzes stay exportable forever.

What we collect

From you, by signing up

  • Your email address (so we can send you the magic-link sign-in and transactional notifications).
  • Your display name and profile image, if you sign in with Google.

When you use the product

  • The lesson text you paste, or the source files you upload (PDF, DOCX, TXT). On the Free plan, source files are auto-deleted from our object storage 7 days after upload. On Pro, they're kept for as long as your subscription is active so you can “regenerate from same source”.
  • The quizzes we generate from those sources, and any edits you make in the editor.
  • Usage counters: how many quizzes you generated this month, when you last reset, and a per-event audit log we use to debug payment / webhook problems.

Automatically, when you visit the site

  • Standard server logs (IP, user agent, timestamp). We use these to keep the service up and to throttle abusive clients; we don't join them with your account beyond what error monitoring needs.
  • One first-party session cookie issued by Auth.js — required for you to stay signed in.
  • We do not use third-party analytics, ad trackers, or cross-site cookies on the marketing site or in the app.

How we use it

  • To generate your quizzes.Source text is sent to our AI provider with a prompt asking for source-backed questions. We do not store the source text on the AI provider's side past the request itself, and we do not opt into any training data programs.
  • To run your account. Email reminders when you hit your monthly cap, when your subscription renews, when payment fails, etc.
  • To handle payments. Credit-card data is processed by creem.io — it never touches our servers. We only store a customer ID and subscription ID so we can manage your plan.
  • To investigate bugs and abuse. Error reports go to Sentry. Usage logs let us see when something failed for a specific user so we can help.

Who else sees your data

A short, exhaustive list of sub-processors. We don't add to it casually.

  • Vercel — application hosting (US).
  • Neon — managed PostgreSQL (US-East-1).
  • Cloudflare R2 — object storage for uploaded source files (auto-deleted on Free after 7 days).
  • Anthropic — AI provider (Claude). Source text is sent per request only.
  • Google— optional “Sign in with Google”, and (if you opt in) Google Forms export, which requests scoped access to create Forms in your Drive.
  • creem.io — payment processing.
  • Resend — transactional email delivery.
  • Sentry — error monitoring (no PII payloads).

Your rights

  • Export. Every quiz can be exported to PDF, Word, Canvas QTI, or Google Forms — at any time, with no quota limit.
  • Delete. Email yaoyanweb@gmail.com and we'll erase your account, source files, quizzes, and payment ID within 7 days. GDPR/CCPA “right to be forgotten” requests are honored the same way.
  • Cancel without losing your work. Your library stays editable and exportable forever even after a downgrade.

Children

QuizCraft is built for educators, not for use by children under 13. We don't knowingly collect data from anyone under 13. If you're a teacher generating quizzes aboutmaterial for younger students, that's fine — your account is what we're binding the data to.

Changes

We'll edit this page when something material changes — and email account holders if the change affects how their data is used. The “Last updated” date above always reflects the most recent edit.

Contact

Privacy questions, deletion requests, data-export requests: yaoyanweb@gmail.com. A real human (the founder) reads every message and replies within two business days.