🔒 Your Privacy Matters: You can use easy-quiz.ai as a guest without registering. If you create an account or pay for a plan, we process the data needed for auth, billing, and support — as described below.

Last updated: 28.03.2026

📋 Summary: Guests need no account. Registered users: we store account data (e.g. email, name) via our auth system and may store subscription role and limited quiz history as described in this policy. Subscriptions are processed by Stripe; we do not store card numbers. Google AdSense may set cookies for ads. AI providers process prompts and uploads only to generate quizzes. Public quiz rooms can be discovered by anyone on the platform; do not put confidential content in quizzes you mark as public (see section 1.3).

1. Guest use, accounts & what we process

1.1 Guests (no account)

No registration required to generate quizzes (within limits) or to join multiplayer rooms
We use strictly necessary technical data (e.g. IP address, cookies/session identifiers where needed) for security, rate limiting, and abuse prevention; retention is limited
We do not operate Google Analytics or Facebook Pixel in the app shell; AdSense may process data as described in section 3
Uploaded documents are processed to generate quizzes and are not kept longer than necessary for that purpose
Multiplayer rooms use codes; display names in a room are functional, not a full profile
We do not use your quiz content to train our own models

1.2 Registered users (optional account)

If you sign up (e.g. email/password or Google OAuth), we process:

Account data: e.g. email, name, profile image (if provided by OAuth), internal user ID, password hash (never stored in plain text)
Country of origin: derived from your IP address during registration (ISO code), used for regional settings and analytics
Subscription tier: role (e.g. Free / Premium / Scholar) after successful Stripe subscription, for feature gating
Optional quiz history: limited records of completed quiz attempts linked to your account when you play while logged in, as described in our product
Session cookies for staying logged in (essential for the service you request)

Legal basis: Art. 6(1)(b) GDPR (contract / steps prior to contract) for account and subscription-related processing; Art. 6(1)(f) GDPR for security and abuse prevention where applicable.

1.3 Public quiz rooms, lobby listing & visibility

When you create a quiz room as public (default for hosts who may use public rooms), the following applies in addition to the information above:

Discoverability: Public rooms may appear on our Join Quiz lobby page and similar listings so that other users can find and join games without a prior direct link.
Visible metadata: Depending on the product UI, information such as room title, status, approximate player count, and timestamps may be shown to visitors browsing the lobby.
Quiz content in the room: After joining, participants typically see the same quiz content (e.g. questions, answer options, images where applicable, explanations if enabled) as part of normal gameplay.
Player display names: The name you choose (or a default) in a room may be visible to other players in that room and can appear on leaderboards during the session.
Retention: Active room and game state is stored temporarily (currently about three days), then removed automatically when the room expires.
Private rooms: If the host creates a private room (feature subject to plan), it is intended not to be listed in the public lobby; access is typically by room code or link only. This reduces casual discovery but anyone who knows the code can still join—treat codes like passwords.

Please avoid uploading or generating quizzes that contain highly sensitive personal data (e.g. health data, internal company secrets) especially when using public rooms or public lobby visibility. We process this data to run the service you request (Art. 6(1)(b) GDPR); for security and abuse prevention, limited technical data may also be processed (Art. 6(1)(f) GDPR) as described elsewhere in this policy.

Contact form: Data you send is used to respond to your request and deleted when no longer needed, unless legal retention applies.

2. Payments via Stripe (subscriptions)

💳 Stripe: Subscriptions (Premium / Scholar) are processed by Stripe. We do not store your full card data. Stripe acts as a separate controller for payment processing — see Stripe's privacy policy. We receive limited metadata (e.g. customer reference, subscription status) to fulfil your plan and for accounting/fraud prevention.

3. Advertising

📺 Google AdSense: We use Google AdSense to display advertisements and help finance our free service:

Purpose: Display of relevant advertisements to finance the platform
Legal Basis: Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. f GDPR (legitimate interests)
Data Processing: Google may use cookies and similar technologies for ad personalization
Control: You can manage ad preferences through your browser settings or Google's ad settings
Third-party Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Privacy Policy: policies.google.com/privacy

4. Data Processing by AI and External Service Providers

4.1 AI Service Providers

We use multiple AI service providers for quiz generation. You can select which AI model to use when creating a quiz. The following providers may process your document content (text and, where you upload them, images or PDFs sent to vision-capable models):

Google (Gemini 3 Flash) – USA

Purpose: AI-powered quiz generation from document content
Legal Basis: Art. 6 para. 1 lit. b GDPR (contract performance)
Data Transfer: USA with EU standard contractual clauses
Privacy Guarantees: SOC 2 Type II certified, no storage/training with your data
Website: policies.google.com/privacy

Anthropic (Claude Haiku 4.5) – USA

Purpose: AI-powered quiz generation from document content
Legal Basis: Art. 6 para. 1 lit. b GDPR (contract performance)
Data Transfer: USA with EU standard contractual clauses
Privacy Guarantees: SOC 2 Type II certified, no storage/training with your data
Website: anthropic.com/privacy

OpenAI (GPT-5.4 Mini) – USA

Purpose: AI-powered quiz generation from document content
Legal Basis: Art. 6 para. 1 lit. b GDPR (contract performance)
Data Transfer: USA with EU standard contractual clauses
Privacy Guarantees: SOC 2 Type II certified, no storage/training with your data
Website: openai.com/privacy

Mistral AI (Mistral Medium) – EU

Purpose: AI-powered quiz generation from document content
Legal Basis: Art. 6 para. 1 lit. b GDPR (contract performance)
Data Transfer: EU (France) - no third-country transfer required
Privacy Guarantees: GDPR compliant, no storage/training with your data
Website: mistral.ai/legal/privacy-policy

Premium / Scholar models: If your subscription includes them, the following models may process your content under the same purpose and legal basis (Art. 6 para. 1 lit. b GDPR) as the free-tier models above, subject to each provider's privacy policy and, for US providers, EU standard contractual clauses where applicable:

Google (Gemini 3.1 Pro) – USA

Purpose: AI-powered quiz generation (higher-capability model for subscribers)
Legal Basis: Art. 6 para. 1 lit. b GDPR (contract performance)
Data Transfer: USA with EU standard contractual clauses
Website: policies.google.com/privacy

Anthropic (Claude Sonnet 4.6) – USA

Purpose: AI-powered quiz generation (higher-capability model for subscribers)
Legal Basis: Art. 6 para. 1 lit. b GDPR (contract performance)
Data Transfer: USA with EU standard contractual clauses
Website: anthropic.com/privacy

OpenAI (ChatGPT 5.4) – USA

Purpose: AI-powered quiz generation (higher-capability model for subscribers)
Legal Basis: Art. 6 para. 1 lit. b GDPR (contract performance)
Data Transfer: USA with EU standard contractual clauses
Website: openai.com/privacy

Mistral AI (Mistral Large) – EU

Purpose: AI-powered quiz generation (higher-capability model for subscribers)
Legal Basis: Art. 6 para. 1 lit. b GDPR (contract performance)
Data Transfer: EU (France) - no third-country transfer required
Website: mistral.ai/legal/privacy-policy

Image Quiz (Scholar): For illustrated multiple-choice questions, the service fetches matching images from free external image sources based on quiz context.

4.2 Hosting and Infrastructure

EU-Cloud Hosting:

Purpose: Cloud hosting of our application
Legal Basis: Art. 6 para. 1 lit. f GDPR (legitimate interests)
Server Location: EU West (Amsterdam, Netherlands)
Security: SOC 2 Type II, ISO 27001, automatic encryption
Data Processing Agreement: DPA concluded
GDPR Advantage: No third-country transfer required

4.3 Privacy Guarantees for All Third-Party Providers

Conclusion of data processing agreements (Art. 28 GDPR) where applicable
EU standard contractual clauses for third-country transfers
Regular security audits and certifications
Encrypted data transmission (TLS 1.3)
Purpose limitation of data processing
No use of your data for training AI models without explicit consent
Right to deletion is passed on to all data processors

5. Legal Basis

Website operation, security, and rate limiting: Art. 6(1)(f) GDPR (legitimate interests). AI quiz generation (including uploads you initiate): Art. 6(1)(b) GDPR. Multiplayer features including public rooms and lobby listing: Art. 6(1)(b) GDPR (performance of the service you use). Optional account and subscription: Art. 6(1)(b) GDPR. Subscriptions via Stripe: Art. 6(1)(b) GDPR. Advertising (AdSense): Art. 6(1)(a) GDPR (consent where required) and Art. 6(1)(f) GDPR (legitimate interests) where applicable.

6. Your Rights

Where GDPR applies, you have rights of access, rectification, erasure, restriction, portability, and objection as appropriate. If you have an account, contact us at the address below to exercise these rights against us; we will respond within statutory timeframes. Some requests may require verification of identity. You may also contact Stripe or Google (ads) directly where they act as controllers.

7. Your Rights as a Data Subject

7.1 Right of Access (Art. 15 GDPR)

You have the right to request confirmation as to whether we process personal data concerning you and information about the processing.

7.2 Right to Rectification (Art. 16 GDPR)

You have the right to request the immediate rectification of inaccurate or the completion of incomplete personal data.

7.3 Right to Erasure (Art. 17 GDPR)

You have the right to request the erasure of your personal data if the data is no longer necessary, you have withdrawn consent, or processing is unlawful.

7.4 Right to Restriction (Art. 18 GDPR)

You have the right to request the restriction of processing in certain circumstances.

7.5 Right to Object (Art. 21 GDPR)

You have the right to object at any time to the processing of your personal data based on legitimate interests.

7.6 Right to Withdraw Consent

If processing is based on your consent, you can withdraw it at any time. The lawfulness of processing before withdrawal remains unaffected.

8. Contact and Exercise of Your Rights

📧 Contact Us: For all questions about data protection and to exercise your rights, contact us:

Email: team@easy-job.ai
Phone: +4915560907868
Address: Westliche Zwingergasse 8, 94469 Deggendorf, Germany

Account deletion: If you have an account, you can start permanent deletion (including cancellation of an active subscription in Stripe) from your Account page. We email you a confirmation link before any data is removed.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.

10. Changes to This Privacy Policy

We reserve the right to adapt this privacy policy to changed legal situations or changes in our services. The current version is available on our website.

Last updated: 28.03.2026