Privacy Policy
1. Who We Are
Team Quiz is operated by Kadasolutions Hungary Kft., 1139 Budapest, Kartács utca 24-26. 1. em. 15., Hungary ("we", "us"). We are the data controller for the personal data described in this policy, except where we act as a processor on a host's behalf — see the Data Processing Agreement.
Questions or requests: [email protected].
2. What Data We Collect
Account data. Your email address, name, and optionally a username, display name and profile image. If you register with a password, we store a salted hash of it — never the password itself. If you sign in with Google, we store the identifiers and tokens Google returns for your account, plus the email and profile data of the Google account.
Guest players. If you join a game as a guest, we create a temporary anonymous account holding only the display name you type. No email address is collected.
Quiz and game data. Quizzes, questions and answer options you author; games you host or join; the answers you submit during a game, your scores, and timing data. In SMART quizzes, the free-text inputs players give to collection prompts are stored and used as input for question generation within that game.
Billing data. Your plan, credit balance and usage records, plus the customer and subscription identifiers assigned by Stripe. Card numbers are entered directly into Stripe and never reach our servers.
Technical data. For each active session, the IP address and browser user agent, so you can see and revoke your own sessions. Our servers also produce operational logs (request paths, timestamps, error traces) used for debugging and abuse prevention.
3. Why We Process It, and On What Legal Basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating your account, hosting and playing games | Performance of a contract (1)(b) |
| Sending verification, password reset and magic-link emails | Performance of a contract (1)(b) |
| Processing payments and keeping accounting records | Contract (1)(b), legal obligation (1)(c) |
| Keeping the service secure, preventing abuse | Legitimate interests (1)(f) |
| Answering support requests | Legitimate interests (1)(f) |
We do not use your data for advertising, profiling or automated decision-making with legal effect, and we do not sell it.
4. AI Features
When you use AI-assisted generation, the topic, prompt and instructions you provide are sent to our LLM provider (Google Gemini) to produce questions or images. We do not include player names, email addresses or game results in those requests, and under the Gemini API terms your prompts are not used to train Google's models. Details and links are on the Subprocessors page.
AI output can be wrong. You are responsible for reviewing generated content before you publish a quiz.
5. Cookies
We set only the cookies needed to keep you signed in, protect against cross-site request forgery, and remember your language. There are no analytics or advertising cookies. See the Cookie Policy.
6. Who We Share Data With
We share data only with the processors we use to run the service — hosting, AI generation, payments and transactional email. Each is listed, with its purpose and location, on the Subprocessors page, and each is bound by a data processing agreement.
We may also disclose data where we are legally required to do so, or to establish or defend legal claims.
7. International Transfers
Our infrastructure and database run in the EU. Some processors (for example Stripe and, depending on region, the Gemini API) may process data in the United States. Those transfers rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.
8. How Long We Keep Data
- Account data: until you delete your account, then removed from live systems within 30 days.
- Quiz and game data: as long as the owning account exists; deleting a quiz or game deletes its questions, participants and answers.
- Guest accounts: kept with the game they were created for, and removed with it.
- Sessions: until they expire (30 days) or you revoke them.
- Billing and accounting records: 8 years, as required by Hungarian accounting law.
- Operational logs: short-lived, typically no more than 30 days.
9. Your Rights
Under the GDPR you may request access to your data, correction of inaccurate data, erasure, restriction of processing, a portable copy, and you may object to processing based on our legitimate interests. Most of this is available directly in your account settings; for anything else, email [email protected] and we will respond within one month.
If you believe we handle your data unlawfully, you can lodge a complaint with the Hungarian supervisory authority:
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
1055 Budapest, Falk Miksa utca 9-11., Hungary
naih.hu · [email protected]
You may also complain to the supervisory authority of your own country of residence.
10. Security
Traffic is encrypted with TLS. Passwords are stored as salted hashes. Access to production data is limited to the people who need it, and the database and file storage sit in EU regions of Google Cloud Platform with access control and encryption at rest. No system is perfectly secure; if a breach affects your personal data, we will notify you and the supervisory authority as required by Art. 33-34 GDPR.
11. Children
Team Quiz is not intended for children under 16. If you are under 18, you need consent from a parent or guardian to use the service. If you believe a child has given us personal data, contact us and we will delete it.
12. Changes to This Policy
We may update this policy as the service changes. The date at the top reflects the latest revision, and we will notify account holders of material changes by email or in the app before they take effect.