Privacy Policy

Who we are

QuizStride is a quiz app for families and teachers, open to parents and guardians in Canada and the United States. Questions about privacy, or a request to see, correct or delete your data: hello@quizstride.com. Our privacy contact answers messages sent to that address.

What we collect, and why

We keep as little as we can. Each item has one purpose: to run the quizzes and show parents how it is going.

• Parent account: email address and a password (stored only as a one-way hash). Purpose: sign in, verify the account, reset the password, and contact you about the account, including the reminders before quiz history is deleted (see "How long we keep it").
• Adults the owner adds: the name the owner types and the email address of the adult. The address is used once to send the invitation and is not kept; we keep only a one-way fingerprint of it so that only the account with that email address can accept. After they accept, their own account email is used like any parent account. Purpose: let more than one adult manage the family space.
• Teacher profile (only if you turn it on): the display name you choose for families and an optional school label, and which classes and class quizzes you create. Purpose: let families in your class see who the class belongs to.
• Child profile: a first name or nickname chosen by the parent. No school, photo, birthday or location. Purpose: show whose progress it is.
• Quiz history: grade, which quiz, the time, the score and whether each question was right or wrong. Purpose: scores, progress charts, weak topics, and "taken" status.
• Quizzes you upload (user-generated content): the title, questions, answers and explanations you add, and whether you chose to share them. Purpose: so your family can use them and, only if you choose, so others can too. See "Quizzes you upload and share" below.
• Reports and takedown notices: if someone reports a quiz, we keep the report (what, why, when, and the reporter's account or contact details) and what we decided. Purpose: keep QuizStride safe, handle copyright complaints and keep the records the law requires.
• Security data: to slow down password guessing, the service briefly remembers wrong tries per network address in temporary memory. It is not part of quiz history.
• Hosting data: our hosting provider (Cloudflare) processes ordinary technical request data, such as the network address, to deliver and protect the service.

What we do NOT collect

• What a child typed as an answer (only right or wrong is saved).
• Any real name of a child beyond the nickname a parent chooses; no photos, school, birthday or location.
• Advertising profiles or device fingerprints. There are no ads and no ad trackers.
• An email, account or login from a child. Children do not have accounts.

Website visit counts

On our public pages (the home page and these legal pages) we use Cloudflare Web Analytics, a privacy-friendly, cookie-free tool, to count page visits. It does not use cookies, does not build a profile of you and is not used for ads. It records basic visit information such as the page, the referring site, the browser and device type and the country. It is not used inside the QuizStride app or in children's play.

Where it is stored (outside Canada)

Data is stored and processed on Cloudflare's infrastructure (Workers and the D1 database). Cloudflare runs servers in many countries, so your data is stored outside Canada, including in the United States, and may be subject to the laws of those places. Cloudflare acts as our service provider.

Who can see it

• The parent who owns the family space, and the adults that parent adds. Adults can manage quizzes, children and saved attempts and can see each other's names; only the owner can add or remove adults or delete the family space.
• Another family: never, for private content. Every request is limited to one family. A quiz becomes visible to other people only if its uploader chooses to share it.
• Us, only as needed to run, secure and fix the service.
• Nobody else. We do not sell or share personal information, and we do not use it for advertising.

How long we keep it

Each saved quiz attempt (quiz history) is deleted automatically 12 months after it was taken. Quizzes, child profiles and accounts are not deleted automatically; they are kept until a parent deletes them. Reminders: about 1 month and again about 1 week before a batch of quiz history is deleted, we email the owner and every adult member of the family space and show a notice on the dashboard, so you can download your data first. We record that a reminder was sent so that it is not repeated. Reminders are a courtesy: if an email cannot be delivered, the history is still deleted on schedule. Sign-ups that are never confirmed by email are removed after 30 days. When a parent deletes a child or the account, the data is hard-deleted from the live database, and from backups on a stated schedule: when those backups are replaced (ask us at hello@quizstride.com if you need a date).

Your rights as a parent

• See and export: download all data kept about your family.
• Correct: change a profile name or fix wrong information.
• Delete: delete a child, or delete the whole account.
• Withdraw consent: at any time, by deleting or by contacting us.
• Ask or complain: write to the privacy officer. You can also complain to the Office of the Privacy Commissioner of Canada or your provincial regulator.

Children's data

QuizStride is for parents to use with their children. Anyone who is a parent or guardian in Canada or the United States can sign up. Sign-up from other countries is not offered. Only a parent or guardian can sign up and give consent (see Parent consent). We never ask a child for an email address or let a child create an account. Children cannot upload, share or report anything themselves; the parent does.

Quizzes you upload and share

• Private by default. A quiz you upload is visible only to your own family. It is shared with others only if you turn sharing on for that quiz, and you can turn it off again.
• Shared quizzes are public to other QuizStride users (others do not see your email or your children). Do not put personal information about any child, or about anyone, in a quiz.
• Moderation. We may review shared quizzes, and every shared quiz will have a report button. Reports are kept as described above.
• Removal. You can delete your quizzes at any time. We may remove content or close accounts that break the rules in the Terms.
• Child safety. If a report suggests a child is at risk, we will act on it and, where the law requires, tell the authorities.
• No payments. Payments and paid listings are not supported, so no payment or card details are collected.

If something goes wrong (breach)

If personal information is exposed, we will assess the risk of harm. Where there is a real risk of significant harm, we will tell the affected parents and the Privacy Commissioner as the law requires, and we keep a record of every breach.

Emails

We send only what the account needs, from hello@quizstride.com through Cloudflare Email: a one-time welcome email when an account is created, verification and password-reset emails (a reset link works once and only for 30 minutes), invitations to adults a parent adds, and the reminders before quiz history is deleted. We do no marketing emails unless a parent clearly agrees first.

Laws we follow (plain-language notes)

These are plain-language notes, not legal advice.

• Canada, PIPEDA and BC PIPA: consent, a clear purpose, safeguards, access and correction, and breach reporting. Because QuizStride is open to the public, we treat these laws as fully applying.
• Quebec, Law 25: Quebec families are part of Canada, so this applies. Consent for a child under 14 comes from the parent, a privacy impact assessment is needed, and the privacy officer is named publicly.
• United States, COPPA: for children under 13 a parent must give verifiable consent. Our approach: children never have accounts, only parents do.
• Europe, GDPR and UK GDPR: need a lawful basis and a right to erasure. Our approach: sign-up is limited to Canada and the United States, and QuizStride is not offered in Europe or the UK. If that ever changes, this policy must be redone first.
• Canada, CASL (anti-spam): verification, password-reset, invitation and deletion-reminder emails are transactional; no marketing email without consent.

Changes to this policy

If this policy changes in a way that matters, we will tell parents before it applies.