Privacy Policy

Who we are

Quyz is an AI-powered learning platform for high school students, built by Handwired LLC. We're based in the United States.

What data we collect

From teachers

Name and email address (via Google sign-in)
School name
Content you create (lesson notes, IEP goals, class settings)

From students

Name and email address (provided by their teacher — students do not self-register)
Learning activity (lessons completed, quiz scores, hints used)
Learning profile settings (pace, language level, feedback style)

From parents

Name and email address (provided by teacher invitation)
No additional data is collected from parents

We do NOT collect: passwords, payment card details, location data, biometric data, Social Security numbers, photos, or videos.

How we use data

We use student data for one purpose only: to provide the learning service.

To generate AI lessons and quizzes tailored to each student
To track progress and show it to their teacher and parent
To calculate streaks and points
To generate weekly progress summaries

We do not sell student data, use student data to train AI models, show advertising to students, or use student data for any commercial purpose beyond providing Quyz.

Who we share data with

Service	Purpose	What they see
Anthropic (Claude API)	Generate lessons and quizzes	Lesson topic, student learning profile — no names
SendGrid	Send emails	Email address, notification content
Stripe	Process payments	Teacher/parent billing info only — never student data
Microsoft Azure	Host the application	Encrypted data storage

We require all service providers to process data only as instructed and to maintain appropriate security.

Student data — special protections

Students are minors. We take this seriously.

Student accounts are created by teachers only — students cannot self-register
Student data is never used for advertising or commercial profiling
Parents can request to view, correct, or delete their child's data at any time
Schools can request deletion of all their data at any time
We comply with FERPA (Family Educational Rights and Privacy Act)
We do not knowingly collect data from children under 13 without school consent

When a teacher invites a student, the school is authorizing data collection under FERPA's school official exception.

Data retention

Data type	How long we keep it
Active student records	While the school's account is active
Lesson and quiz attempts	2 years from creation
Points and streaks	While account is active
Email notification logs	90 days
Deleted account data	Purged within 30 days of deletion request

Your rights

You can ask us to:

Access your data — we'll send you a copy
Correct inaccurate data
Delete your data (subject to legal retention requirements)
Export your data in a portable format

Email hello@quyz.io with any of these requests. We respond within 5 business days.

Security

Encryption in transit (HTTPS/TLS)
Encryption at rest (Azure SQL encryption)
Role-based access control (teachers only see their own students)
Invite-only access (no public self-registration)
Regular security reviews

If we ever discover a breach affecting student data, we will notify affected schools within 72 hours.

Changes to this policy

We'll notify teachers by email if we make material changes. The date at the top of this page always shows when it was last updated.