Privacy Policy

1. Scope and who we are

This Privacy Policy applies to Quiz Maker and its related app, cloud, website, public catalog, connected-AI, and support services (the "Service"). Quiz Maker is operated by Still Safe LLC ("Still Safe," "we," "us," or "our").

Quiz Maker helps people create, review, play, and share Study Quizzes and Trivia; practice with Classic, Type Answer, Crossword, Word Scramble, and Match Pairs games; and study Japanese vocabulary and conversation lessons with kana, pronunciation audio, and role-based speaking practice.

2. Information we handle

We do not use a device or installation identifier to own study data, authorize account access, or determine entitlements. We do not receive your payment-card number. Apple or Google processes store payments for its platform.

3. What stays local and what synchronizes

Stored on your device

• source Japanese page images;
• generated MP3 pronunciation files and local paths;
• an account-scoped offline mirror, local-only library content, queued changes, preferences, and temporary drafts; and
• local game construction and scoring state.

Synchronized after sign-in

Reviewed vocabulary and conversation lessons, Study Quizzes, Trivia, attempts, progress, entitlement snapshots, sharing relationships, and the sharing or publication records you create synchronize beneath your authenticated account. App writes go through protected server functions. You can continue supported local study and play without a connection, but cloud sync, AI imports, purchases, connected AIs, reports, and sharing need sign-in and network access.

Audio bytes, source images, local paths, and device-local audio metadata are not stored in Firestore or Cloud Storage. Reviewable connected-AI drafts, private-share snapshots, and public versions are narrow exceptions for content you explicitly ask to move between clients or people.

4. AI and speech processing

When you request Japanese page processing, selected images pass through a protected Google Cloud function to OpenAI and return structured vocabulary or conversation lesson drafts, according to the import type you select. When you import a Study Quiz from a PDF, the backend extracts selectable text locally and sends only that text to OpenAI. It does not send the original PDF, embedded images, page renderings, or an OCR request. PDFs without enough selectable text are rejected. Quiz Maker does not offer an in-app AI importer for Trivia.

AI results are validated and shown as drafts. You must review and save them before they become study content. OpenAI requests use settings that disable provider response storage. We do not use your material to train our own AI models.

Public and privately shared text may be sent to OpenAI's moderation service before delivery or publication. Moderation requests exclude account identifiers, Apple or Google account information, source files, private progress, purchases, friend lists, prompts, and conversation history.

Approved Japanese readings are sent through protected cloud functions to Microsoft Azure Speech to generate reference pronunciation. Vocabulary audio is validated and cached on your device. Conversation reference clips are temporary and may be reused during a practice session.

Conversation practice requires internet access. After you grant microphone permission and choose Speak, the app captures up to 30 seconds in memory. Choosing Done, or reaching the capture limit, submits the recording through a protected Google Cloud function to Azure fast transcription. Cancel, Back, interruptions, and backgrounding discard unsubmitted audio. A cancellation cannot recall audio already accepted by the service.

The app compares the returned text with the reviewed script on your device. This is a text comparison, not a pronunciation score or assessment. We do not persist microphone recordings or recognition transcripts in device files, synchronized lessons, cloud storage, or logs. Microsoft states that fast transcription does not retain customer input. No provider grades quiz or game answers.

5. Connected AIs and MCP

You may connect an MCP-compatible AI from Settings. Auth0 and the platform sign-in method, Sign in with Apple on Apple platforms or Google Sign-In on Android, link the verified connected-client identity to your already authenticated Quiz Maker account. We do not link accounts by matching email addresses.

A connected client receives only the permissions you approve. It may list or read eligible synchronized reviewed content and propose new Study Quiz, Trivia, Japanese vocabulary, or conversation lesson drafts. Connected clients cannot approve, publish, save, edit, or delete reviewed content; read source images, audio, attempts, mastery, purchases, entitlements, account details, friend data, reports, or device-only content; or grade play.

We store bounded draft content, intent, status, timestamps, and opaque identifiers. We do not store the connected conversation, prompts, chat history, model response, access token, refresh token, or AI-provider credentials. Pending drafts have a seven-day review deadline. Claiming a draft extends the review deadline to 30 days. Terminal status metadata is retained briefly for reliable cleanup and replay protection.

Your connected AI provider processes your interactions under its own terms and privacy policy. Quiz Maker sends content to that provider only when its authorized client requests an allowed MCP tool.

6. Private sharing and public content

Private friend sharing

Friend invites are one-use links. A sender chooses a sharing name and an eligible deck. The recipient sees a reviewable snapshot and may accept or decline. Accepted copies belong independently to the recipient. The sender cannot see the recipient's progress or later edits.

Public catalog

Eligible reviewed Study Quizzes and Trivia become public only after you choose Publish and confirm the public metadata. Public listings and downloads include the published content and aggregate ratings or saves, but not creator identity, platform account information, private progress, friends, or source files. Public title queries are used transiently to return results and are not stored in logs, analytics, crash metadata, or support reports.

People may browse, report, and save public content subject to account requirements. Signed-in users can privately block a publisher. Three distinct eligible safety reports on the same version within seven days may temporarily remove it from browse while support reviews it. Copyright and accuracy reports always require human review.

When another person saves your shared or public content, their copy is independent and contains no creator identity. Unpublishing, ending a friendship, deleting your source, or deleting your account does not delete copies already accepted or saved by others.

7. Service providers and disclosure

We disclose information only as needed to operate the feature you request:

• Apple: Sign in with Apple and App Store purchases on Apple platforms;
• Google Firebase, Google Cloud, and Google Play: Google Sign-In on Android, authentication, App Check, synchronized data, protected functions, operations, and Google Play purchases;
• Microsoft Azure Speech: Japanese reference speech and fast transcription of conversation recordings you submit;
• OpenAI: requested AI extraction and public or private-share text moderation;
• Auth0: optional MCP authorization and account linking;
• RevenueCat: subscription, entitlement, and purchase-event processing;
• email and support providers: reports and support messages you send; and
• authorities or advisers: when reasonably necessary to comply with law, protect rights or safety, or complete a business transaction subject to appropriate safeguards.

We do not sell personal information, share it for cross-context behavioral advertising, or use third-party advertising SDKs.

8. Retention and deletion

We retain reviewed synchronized content while your account needs it. Local-only content remains on your device until you delete it or the app's data. Specific operational records use bounded periods:

• Conversation recordings and recognized text: temporary processing only; not retained in your library, device files, or backend storage;
• MCP pending drafts: seven days; claimed drafts: up to 30 days, plus bounded cleanup metadata;
• friend invites: seven days; pending share payloads: up to 30 days and earlier when resolved;
• friend-sharing operation receipts and quota buckets: eight days;
• public superseded or unpublished version payloads: 30 days, or 90 days under a report hold;
• public report records and delivery attempts: 90 days;
• public operation receipts: eight days; public quota buckets: up to 31 days;
• removed-publication tombstones and sanctions: up to 180 days after final action; and
• purchase and credit ledger records: as needed to verify transactions, restore entitlements, prevent duplicate grants, satisfy accounting obligations, and resolve disputes.

Delete Account removes your account links and synchronized owner content subject to legal, transaction, security, report-hold, and backup limitations. Retained reports are pseudonymized by clearing raw account identifiers. Independent copies accepted or saved by other users remain in those users' libraries.

9. Your choices

• Use supported local creation and play without signing in.
• Choose whether to use speaking practice. Cancel an unsubmitted recording or revoke microphone permission in your device settings.
• Review, edit, accept, reject, or delete AI and MCP drafts.
• Disconnect a connected AI and revoke its future access.
• Choose whether to connect friends, send a private copy, or publish content.
• Unpublish your public content, clear a rating, report content, or block and unblock a publisher.
• Manage subscription settings through Apple or Google Play for the platform where you purchased.
• Delete individual content, reset progress, or use Delete Account in Settings.
• Contact us to request access, correction, or deletion where applicable law provides those rights.

10. Security

We use authentication, App Check, server-side ownership checks, least-privilege access, request validation, quotas, replay protection, encryption in transit, protected secrets, and redacted logs. No service can guarantee absolute security. Protect the Apple Account or Google Account you use with Quiz Maker, and do not share access tokens or invite links publicly.

11. Children

Quiz Maker is not directed to children under 13. If you are under the age of legal majority where you live, a parent or legal guardian should review your use. Contact us if you believe a child provided personal information in violation of applicable law.

12. Changes

We may update this Policy as the Service or law changes. We will post the revised date here and provide additional notice when required.

13. Contact us

Still Safe LLC
Attn: Quiz Maker Privacy
10420 S Ridgeview Rd, Unit #2060
Olathe, KS 66061
wparras@stillsafecheckin.com

For public-content rules, read our Community Standards. For copyright concerns, use our Copyright Process.