Privacy Policy

This policy covers account holders and people using a guest account. A guest account still has an identifier and may create records on our servers; using the service without Google or Apple sign-in does not mean the activity is anonymous to us.

A third-party website you open, your sign-in provider, and a payment provider may also process information under their own policies. An institution using SnapQuizX for its own purposes may have separate obligations. We do not offer a school or enterprise data-processing agreement merely through these general terms.

We collect information you provide and technical information needed to deliver and protect the service. Depending on the features you use, this includes:

When you request a quiz, the relevant source text or topic is processed on our servers and submitted to Google Gemini with instructions for generating the quiz. Content can contain personal information if you include it. The resulting questions and answers are returned to SnapQuizX and may become part of your study records.

We use the paid Gemini API through a project with active billing. Under Google's paid-service terms, prompts and responses are not used to improve Google's products, but Google may retain them for a limited period for safety, abuse prevention and legal obligations. This is not a guarantee of zero retention or that no authorized person can ever access the data.

We do not use your submitted content to train our own general-purpose AI models. We do not silently route your submissions to an unpaid AI service with different training practices. If we materially change the provider or handling of your content, we will update the notice and obtain a new permission where required.

The mobile app asks for permission before sending content to the AI provider. You can withdraw that permission in Settings. Withdrawal stops future generation through that flow; it does not undo earlier processing or automatically erase saved quizzes. You can separately request deletion.

Do not submit passwords, payment-card numbers, government ID documents, medical records, children's personal information, trade secrets or material you are not authorized to disclose. Remove names and other personal details when they are not necessary for a study quiz.

• Google Gemini API terms: paid services and data handling

In the current mobile photo/PDF import flow, recognition or text extraction happens on the device. SnapQuizX sends the extracted text for generation, not the original local photo or PDF file. Local caches or files may remain on the device under app and operating-system storage controls. Text copied from a document is still content we process once submitted.

A URL import is different: the app or our servers may request the webpage or a publicly accessible PDF at that URL and extract its text. The destination receives the request and may log network information. Do not submit private access links, signed URLs or links containing secrets.

If you open a source webpage in the app's browser, the website may run its own scripts and use its own cookies. That website's practices are outside this policy. Device permission controls let you limit camera or photo access, although the corresponding import feature may then be unavailable.

Browser extensions process selected text or page content when you invoke a quiz feature. Their permissions and behavior depend on the installed version. This policy does not authorize unrelated browsing-history collection; installation permissions do not give us a license to use data for unrelated purposes.

We use account, content and study data to provide the features you request; credit and transaction information to deliver purchases; technical information to secure and maintain the service; and messages and reports to support users and address misuse. We may use service-level statistics to understand reliability and improve features, without using them to make consequential decisions about an individual.

Where European or UK data-protection law applies, our legal bases are performance of a contract for requested account, quiz and purchase services; legitimate interests for proportionate security, abuse prevention, troubleshooting and service improvement; legal obligations for applicable accounting and lawful requests; and consent where required for optional tracking, permissions or particular disclosures. We weigh our interests against your rights. A contractual description does not make every kind of data collection necessary.

You can decline optional permissions and withdraw consent without affecting the lawfulness of earlier processing. If you decline information necessary for a specific feature, we may be unable to provide that feature. Accepting the Terms does not replace a separate consent required by law.

The mobile builds covered by this revision disable optional Firebase Analytics collection. Our website does not integrate behavioral advertising or marketing analytics. Essential authentication, hosting and payment operations still create technical records. Before introducing optional tracking, we will explain it and provide any consent or objection controls required by law.

We disclose information only as needed for the purposes below. Authorized personnel and contractors may access information to operate, support and secure the service, subject to appropriate restrictions. We do not sell or rent personal information, disclose it for cross-context behavioral advertising, or give advertisers your quiz source material.

• Google/Firebase and cloud infrastructure providers: authentication, databases, server functions, hosting, network delivery and operational logging.
• Google Gemini: submitted study content and generation results, as described in section 3.
• Google or Apple: sign-in information needed for the sign-in method you choose.
• Stripe and, when you buy through a supported store, the relevant app store or payment service: transaction, customer and entitlement information. They may also process information for their own fraud prevention and legal duties.
• Other users or the public: only the material you choose to publish or share through a public-sharing feature, as described below.
• Authorities or other parties: where required by valid legal process, or where necessary and lawful to investigate abuse, protect rights or address a serious security threat.
• A potential successor to the business: where necessary for a merger, sale or reorganization, subject to safeguards, applicable law and notice of material changes. Data remains subject to applicable privacy obligations.

• Firebase privacy and security information
• Google Privacy Policy
• Stripe Privacy Policy
• Apple Privacy Policy

Saving a quiz to your account is different from publishing it. Account study records are not made public merely because you save them. When a sharing or publishing feature is available and you use it, the quiz title, questions, answers, source text or URL, and a creator label associated with your account may become available to people who receive the link or browse a public listing. In some versions the creator label can fall back to your account email if no display name is available.

Review the content and source before publishing. A share link is not a confidentiality control. Other people can copy or redistribute published material. Deleting a private saved copy or deleting an account does not necessarily remove a separately published quiz. Contact mail@fiveupclub.com to request removal of public content associated with your account; we will assess and act on applicable deletion rights. We cannot recall independent copies other people lawfully obtained.

We retain account information and account study records while needed to provide your account and saved-history features, generally until you delete the relevant record or account, unless a shorter period applies or a lawful reason requires limited retention. Local study history and preferences may remain until you clear app/browser storage or use available deletion controls. Uninstalling an app or signing out does not itself request deletion of cloud records.

Technical and security records are retained according to the relevant logging configuration and the time needed to diagnose incidents, prevent abuse and meet legal obligations. We assess retention using the record's purpose, sensitivity, whether a dispute or incident is unresolved, and any mandatory period. We do not promise immediate deletion from every provider, log or backup.

Transaction and accounting records may be kept for legally required periods and to address legitimate payment disputes. When an exception requires retention, we limit the retained information and its use to that purpose. Provider safety logs and independently controlled payment records are subject to the provider's obligations as well.

The mobile app and website offer account-deletion controls for signed-in users. You can also email us for account, guest-record or public-content deletion. We may need enough information to identify and verify the request. Deletion may take additional time for backups or processor systems; we will explain relevant exceptions and respond within applicable legal deadlines.

FiveUpClub is based in the United States and our principal server-function region is in the United States. Our providers may process or store information in the United States and other countries where they operate. Data may therefore be processed outside your country, under different privacy laws. We do not promise that all data remains in a particular country.

Where applicable law requires transfer safeguards, we must use an appropriate transfer mechanism, such as applicable adequacy decisions or standard contractual clauses with required supplementary protections. You can request information about the safeguards relevant to your data by email. A provider's certification does not automatically resolve every transfer obligation for FiveUpClub.

We use measures appropriate to the service, including authenticated access and access restrictions, and work to protect information during transmission and storage. No network or storage system is completely secure. Keep your device and sign-in credentials secure and tell us about suspected unauthorized access. This explanation does not waive our legal security or breach-notification duties.

Depending on your location and the law that applies, you may request access to your information, correction, deletion, a portable copy, restriction of processing, or an explanation of processing. You may object to processing based on legitimate interests and withdraw consent. You may also have the right to appeal a refused request or complain to your local privacy regulator.

Email mail@fiveupclub.com with the subject 'SnapQuizX Privacy Request' and describe what you need. Use your account email where possible. Do not send a password, payment-card number or identity document in the initial request. We may ask for proportionate verification, and may require evidence of authority if an agent acts for you. We respond within the deadlines applicable to the request and explain lawful limitations or any extension.

For California and other US residents, identifiers, user-provided content, commercial/transaction information and internet or app activity described above may be relevant personal-information categories. We do not sell personal information or share it for cross-context behavioral advertising and have no such sale/share activity to opt out of. Where an applicable law requires us to honor a recognized opt-out signal, we will do so. We do not discriminate against you for exercising a protected privacy right.

We do not use quiz scores for solely automated decisions that produce legal or similarly significant effects on you. A practice score is a learning feature, not an admission, employment, credit or eligibility decision.

SnapQuizX is intended for adults aged 18 or over and must not be used by anyone under 18. Do not create an account for a child or upload a child's personal information. A parent or teacher's permission does not override this service restriction.

If you believe a minor has used the service or a child's information was submitted, contact us. We will investigate, restrict access as appropriate and delete information where required. An age statement alone does not remove obligations that apply when we learn about children's data.

We will identify the effective date and version of a published policy. Material changes will receive appropriate notice, and we will seek consent before a new use where required. A new notice does not retroactively authorize incompatible processing of previously collected data.

For privacy questions, requests or complaints, contact FiveUpClub at mail@fiveupclub.com. Our Terms of Service address use of the service; our Cookies and Local Storage Policy explains device storage.

• Contact FiveUpClub
• Terms of Service
• Cookies and Local Storage Policy
• Telephone: +12138293360