QuizCastQuizCast Studio
Legal

Privacy Policy

Last updated: 1 September 2026

← Home

1. Introduction

QUIZCAST LTD ("we", "our", or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services (collectively, the "Service"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

2. Information We Collect

We collect information you provide directly to us and information collected automatically when you use our Service:

2.1 Information You Provide

  • Account Data: name, email address, phone number, and profile photo when you register or sign in.
  • Quiz Content: quiz questions, answers, images, and audio files you create and upload.
  • Voice Data: if you opt in to AI voice cloning, we process audio recordings solely for generating your personalised narrator voice.
  • Workspace & Team Data: information about workspaces you create or join, and team members you invite.

2.2 Information Collected Automatically

  • Usage Data: pages visited, features used, actions taken, timestamps, and session duration.
  • Device Data: IP address, browser type and version, operating system, and device identifiers.
  • Cookies & Local Storage: we use session cookies and browser local storage to maintain your logged-in state and preferences.

3. How We Use Google User Data

When you sign in with Google, we receive your profile information (name, email, and profile picture) via Google OAuth. We use this data only to:

  • Create and maintain your QuizCast Studio account.
  • Display your name and profile photo within the application.
  • Send you transactional emails to the address on your Google account.

We do not use your Google data to serve advertising, and we do not sell or share your Google user data with third parties, except as described in Section 5 or as required by law.

Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

4. Legal Basis for Processing (GDPR)

If you are located in the EEA or United Kingdom, we process your data on the following legal bases:

  • Contract Performance: processing necessary to provide you with the Service.
  • Legitimate Interests: to improve and secure the Service, and to prevent fraud.
  • Consent: for optional features such as voice cloning. You may withdraw consent at any time.
  • Legal Obligation: where processing is required to comply with applicable law.

5. Sharing Your Information

We do not sell your personal data. We may share your information only in the following circumstances:

  • Service Providers. We share data with the following processors, only as far as needed to operate the Service:
    • Google Firebase — accounts, database and file storage
    • Vercel — website and dashboard hosting
    • Resend, running on Amazon Web Services — sending and receiving email
    • Stripe — payment processing
    • RevenueCat — subscription management
    • LiveKit — live video and audio during games
    • ElevenLabs — AI host voice, and voice cloning where you opt in
    • PostHog — product analytics
    • Sentry — error monitoring and diagnostics
  • Legal Requirements: if required by law, court order, or governmental authority.
  • Business Transfers: in connection with a merger or acquisition, with appropriate notice.
  • International Transfers: some of these providers are based outside the UK and EEA. Where data is transferred, it is protected by the safeguards those providers offer, such as Standard Contractual Clauses.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us. We will fulfil deletion requests within 30 days, subject to legal retention obligations.

7. Data Security

We implement appropriate technical and organisational security measures including encrypted data transmission (HTTPS/TLS), Firebase Security Rules governing database access, and role-based access controls. However, no method of electronic transmission is 100% secure.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: request a copy of the personal data we hold about you.
  • Rectification: request correction of inaccurate or incomplete data.
  • Erasure: request deletion of your personal data ("right to be forgotten").
  • Portability: request your data in a portable, machine-readable format.
  • Objection / Restriction: object to or request restriction of certain processing activities.
  • Withdraw Consent: where processing is based on consent, withdraw it at any time.

9. Children's Privacy

The Service is intended for adults aged 18 and over. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will notify you via email or a prominent notice within the Service.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at:

QUIZCAST LTD

Registered in England and Wales, company number 17424899.

Registered office: 13 Hartendale Cottages, West Street, Flamborough, Bridlington, England, YO15 1PH.

📧 support@quizcast.app