Quizera – Privacy Policy

1. Introduction

Quizera ("we", "our", "ours") takes the privacy of our users very seriously. This Privacy Policy explains how we collect, use, store, and share your personal information when you use the Quizera mobile application and web platform ("Services").

This policy explains the processing of your personal data. Using the Services does not by itself constitute consent to processing that requires consent; that consent is requested separately where required.

2. Data Controller

Data controller: Özgür Altay

Address: Göksu Mah. Bozhöyük Cad. No:10 Etimesgut/ANKARA/TÜRKİYE

Contact: info@quizera.tr

3. Information We Collect

3.1 Information We Collect Directly From You

• Account Information: Email address, username (displayName), profile photo, background image
• Quiz Content: Quizzes you create, questions, answers, descriptions, images
• User Preferences: Favorite quizzes, users you follow, app settings
• Membership Information: Membership type (Normal, Plus, Pro), subscription status, payment information (through third-party payment processors)
• Invitation Information: Email addresses and user IDs you invite

3.2 Automatically Collected Information

• Device Information: Device model, operating system version, app version, unique device identifiers
• Usage Data: In-app interactions, quiz playing history, game sessions, error reports
• Network Information: IP address, internet service provider, connection type
• Advertising Information: Advertising identifiers (Advertising ID), ad interactions (by AdMob)
• Push Notification Data: Firebase Cloud Messaging (FCM) token, notification permission status, notification interaction data

Firebase Analytics processes usage events and technical identifiers; when signed in, the account ID may be associated with Analytics and Crashlytics records. These data should not be described as fully anonymous. Crashlytics supports error diagnosis and Firebase Performance measures performance.

3.3 Location and Sensitive Content

We do not specifically request sensitive personal data. Do not include it, or third-party data you are not authorized to share, in quizzes, documents, images or support messages. Submitted content may contain personal data and be processed for the feature you choose. We do not request precise GPS location; technical data such as IP addresses and region information may indicate approximate location.

Country information: A two-letter country code derived from your device's region setting (for example US) is stored with your account. No location permission or GPS location is used for this. It is used in our admin panel for support and security purposes and to send announcements targeted by country; it is not shared with other users.

4. How We Use Your Information

4.1 Service Provision

• Account creation and management
• Quiz creation, editing, and sharing
• Playing quizzes and viewing results
• Live presentation mode and game sessions
• AI-powered quiz creation features
• Membership management and payment processing
• Sending push notifications (quiz invitations, notifications, etc.)

4.2 Service Improvement

• Analyzing and improving app performance
• Debugging and resolving technical issues
• Improving user experience
• Developing new features

4.3 Communication

• Account notifications and security alerts
• Service updates and feature announcements
• Customer support responses
• Legal requirements and terms changes
• Push notifications: Quiz invitations, activity notifications, user interactions (when permission is granted)

4.3.1 Push Notifications

We send push notifications through the Firebase Cloud Messaging (FCM) service. Notification permissions can be managed from your device settings or within the app. Notifications are used for the following purposes:

• Quiz invitations and live game notifications
• Account security alerts
• Important service updates
• User interaction notifications (follows, comments, etc.)

If you decline notification permission, these features may not work, but the app's core functions will remain available. Your FCM token is stored securely on Firebase and is used solely for sending notifications.

4.4 Advertising and Marketing

• Displaying personalized ads (through AdMob)
• Measuring and analyzing ad performance

4.5 Legal Bases for Our Processing

We process your personal data only on one of the following legal bases (Turkish DPL Art. 5 / GDPR Art. 6):

• Performance of a contract: Account creation and management, creating and playing quizzes, live game sessions, membership and subscription management (DPL Art. 5/2-c; GDPR Art. 6(1)(b))
• Compliance with a legal obligation: Retention of payment and invoicing records, responding to legal requests (DPL Art. 5/2-ç; GDPR Art. 6(1)(c))
• Legitimate interests: Service security, prevention of abuse and fraud, debugging, performance measurement and service improvement (DPL Art. 5/2-f; GDPR Art. 6(1)(f))
• Consent: Personalized advertising, optional push notifications, and consent-based international transfers (DPL Art. 5/1; GDPR Art. 6(1)(a))

For consent-based processing, you may request withdrawal at info@quizera.tr. Manage notification permissions in device settings and advertising identifiers/personalization through the controls offered by your operating system. Google's advertising consent form is displayed where required. Device settings do not stop every processing activity. Withdrawal does not affect the lawfulness of previous processing.

5. Who We Share Your Information With

5.1 Our Service Providers

• Google Firebase: Data storage, authentication, analytics, error reporting, push notification services (Firebase Cloud Messaging) (located in the USA)
• OpenAI: AI quiz creation services (located in the USA). Data sent to OpenAI is used for quiz content creation and is subject to OpenAI's privacy policy.
• Google AdMob: Ad display and ad performance analysis (located in the USA)
• Google Play / Apple App Store: App distribution and in-app purchase transactions

For AI features, your topic, content extracted from a URL, text extracted from an uploaded document and text recognized locally by OCR from scanned images may be sent to OpenAI for quiz generation/validation. Existing question content may also be processed depending on the feature. Sending content through an API does not mean OpenAI places cookies on your device.

Unsplash, Pexels and Giphy: Image/GIF search terms may be sent to the relevant media provider; loading images from content providers may involve connection data such as your IP address.

5.2 Legal Requirements

We may share your information to fulfill our legal obligations, protect our rights, or comply with legal processes.

5.3 Business Transfers

In case of a merger, acquisition, or asset sale, your information may be transferred to the new owner.

5.4 Public Content

Quizzes and profile information you share publicly can be viewed by all users on the platform.

6. Data Retention

6.1 Active Accounts

We retain your information as long as your account is active for service provision purposes.

6.2 Account Deletion

When an account deletion request completes, the authentication account is deleted and the profile is marked as deleted. After a 90-day retention period, periodic cleanup clears specified identity/contact fields and user uploads; this does not mean all records are erased within 90 days. Quizzes and game/activity records are not collectively deleted by this process. The username is retained with the account ID in a separate reservation record to prevent reuse. Clearing profile fields does not anonymize all linked records. To request erasure of content and other personal data, contact info@quizera.tr. Legally required retention and applicable exceptions remain subject to law.

6.3 Legal Retention

We may retain your information longer when necessary for our legal obligations, dispute resolution, or legal processes.

7. Data Security

7.1 Security Measures

• All data transmission is protected with SSL/TLS encryption
• Firebase's secure infrastructure is used
• Sensitive information (passwords, payment information) is encrypted securely
• Application integrity is protected with Firebase App Check
• Regular security audits are performed

7.2 Data Encryption

• During transmission: All data is transmitted encrypted over HTTPS
• During storage: Firebase automatically encrypts data
• Payment information: Payment transactions are processed by Google Play and Apple App Store, we cannot access payment card information

7.3 Security Breaches

If a security breach is detected, we will inform you within the framework of legal requirements.

8. Children's Privacy

The minimum age for the Services is 13, or 16 for EU/EEA users. These are Quizera's service limits; stricter local age or additional consent requirements still apply. We do not offer participation below these limits through parental consent. If we identify data belonging to a user below the age limit, we initiate account closure and erasure of the relevant data. Contact: info@quizera.tr.

9. International Data Transfer

9.1 Data Transfer

Your information may be transferred to the following third-party service providers:

• Google Firebase (USA)
• OpenAI (USA)
• Google AdMob (USA)

9.2 Transfer Security

Depending on the provider and service, data may be processed outside Türkiye or the EU/EEA, including in the USA. Transfers must satisfy applicable legal transfer conditions and safeguards. Under GDPR, mechanisms such as an adequacy decision or applicable standard contractual clauses are considered. This notice does not itself establish a transfer agreement or prove that a safeguard is in place. You can request details of recipients, processing countries and safeguards at info@quizera.tr.

9.3 Transfers Abroad from Türkiye (DPL Art. 9)

Article 9 of the Turkish Personal Data Protection Law applies to transfers from Türkiye. Regular transfers require an applicable basis such as an adequacy decision or appropriate safeguards. The exception based on explicit consent after information about possible risks is limited to occasional transfers under the statutory conditions; it is not a general basis for ongoing Firebase or AI services. You may withdraw consent for consent-based processing at info@quizera.tr.

10. Your Rights

10.1 General Rights

• Access: You can request access to your personal information
• Correction: You can request correction of incorrect or incomplete information
• Deletion: You can request deletion of your information under certain conditions
• Objection: You can object to data processing
• Restriction: You can request restriction of data processing

10.2 GDPR Rights (EU/EEA Users)

If you are located in the European Union or European Economic Area, you have additional rights under GDPR:

• Data Portability: Provision of your data in a structured format
• Automated Decision-Making: Right not to be subject to automated decision-making processes
• Complaint: Right to file a complaint with your local data protection authority

10.3 CCPA Rights (California Users)

If you reside in California:

• Right to Know: You can request information about collected personal information
• Right to Delete: You can request deletion of your personal information
• Right to Opt-Out of Sale: We do not sell your personal information, but this right is reserved
• Non-Discrimination: You will not be discriminated against for exercising your rights

10.4 Exercising Your Rights

To exercise your rights, you can send an email to info@quizera.tr. We will respond to your request within 30 days.

10.5 Rights Under the Turkish Personal Data Protection Law (Users in Türkiye)

The rights of users in Türkiye under Law No. 6698 on the Protection of Personal Data (KVKK) are described below. The controller is Özgür Altay; contact details are in section 2.

Your rights under Article 11 of the KVKK:

• To learn whether your personal data is processed
• To request information if your personal data has been processed
• To learn the purpose of processing and whether the data is used in accordance with that purpose
• To know the third parties in Türkiye or abroad to whom your data is transferred
• To request correction of incomplete or inaccurate data
• To request erasure or destruction of your data within the conditions of Article 7
• To request that correction, erasure and destruction be notified to the third parties to whom the data was transferred
• To object to a result against you arising from analysis of the processed data exclusively by automated systems
• To claim compensation for damage arising from unlawful processing

How to apply: In line with the Communiqué on the Procedures and Principles of Application to the Data Controller, send your request — including your full name, Turkish ID number (nationality and passport number for foreign nationals), address for notification, e-mail and telephone if any, and the subject of your request — from the e-mail address registered to your account to info@quizera.tr. Your request will be concluded as soon as possible and within 30 days at the latest; a fee from the tariff set by the Personal Data Protection Board may apply where the request entails an additional cost. If your request is rejected or left unanswered, you may lodge a complaint with the Personal Data Protection Board.

11. Cookies and Similar Technologies

11.1 Cookie Usage

Depending on enabled features, web services may include accounts, quiz creation and a library alongside guest participation by PIN. Browser storage supports sessions, preferences and service data. Firebase Authentication and App Check/reCAPTCHA may process technical data for security and abuse prevention. Features may also process analytics events; web processing should not be assumed to be limited to session storage.

11.2 Similar Technologies

• Firebase Analytics: Used to analyze app usage
• AdMob: Used for ad display and performance measurement
• Firebase Cloud Messaging (FCM): FCM token and notification permissions are used to send push notifications
• Device Identifiers: Device identifiers may be used for app functionality

12. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. When you click on third-party links, we recommend reviewing that site's privacy policy.

13. Privacy Policy Changes

We may update this policy. Significant changes are announced by email or in-app notification. If new processing requires consent, it is obtained separately; continued use does not replace consent.

14. Contact

If you have questions about privacy or wish to exercise your rights, please contact us:

Email: info@quizera.tr

15. Last Updated

Last updated: October 15, 2026.