Privacy Policy

Effective date: 2026-09-01 · Version 1

QuizNeu ("QuizNeu", "we", "us") helps people practise and master what they are learning. When you give us information, we use it to match you with the right content and to make your studying faster and more effective. This Privacy Policy explains what personal information we collect about you when you use our website and our mobile apps (together, the "Services"), how we use it and who we share it with. It also sets out the rights you have over that information. It applies when you use the Services as a user, not as a job applicant, contractor or employee.

Using the Services means this Policy applies to you. Where the law requires your consent for a particular use — engagement email, for example, or storing anything non-essential on your device — we ask for it separately and you can withdraw it at any time.

Contents

1. Personal information we collect and where it comes from
2. How we use your personal information
3. How we disclose your personal information
4. Your choices about how we use your personal information
5. Do Not Track statement
6. How long we keep your personal information
7. How we protect your personal information
8. Third-party websites and platforms
9. Children's privacy
10. Jurisdictions and your rights — Türkiye; the EEA, Switzerland and the UK; the United States
11. Changes to this Policy
12. Contact us

1. Personal information we collect and where it comes from

We collect the categories of personal information described below in the course of providing the Services to you. The examples given in this section are illustrative and not exhaustive: as the Services develop, the information within each category may change.

Personal information you give us

When you create an account we collect your email address, your password — stored only as a hash, never in readable form — your full name and your username. In your profile you can add a biography, your native language, your interface language and your time zone, and you can put together an avatar.

Avatars are currently assembled inside the app from a set of illustrated parts and stored as that selection, so no photograph of you is held in your profile. We do not currently ask for your date of birth, your phone number or your postal address; if a feature later needs one of them, we will ask you for it and update this Policy.

Signing in with Google or Apple

If you sign in to the Services with Google or Apple, that service verifies who you are and gives us your email address and an identifier for your account there, which we store so we can recognise you next time. We never receive your password for those accounts, and we get no other access to them.

Purchases

QuizNeu subscriptions and credit packs are sold through the Apple App Store and Google Play. No card details reach us. The store is the seller, takes the payment and holds your billing information. Our subscription provider tells us which plan you are entitled to, which store the purchase came from, which product was bought and when the entitlement renews or expires; we store that alongside your quota and credit balance. We do not currently run prize draws or similar competitions; if we do so in future, we will collect what your entry requires in order to administer the related payments, prizes and tax paperwork.

Information you create or send us

If you create, upload, transmit or otherwise post information to the Services, or communicate with us, we collect that information — including text, images, audio files, search queries, survey answers, support correspondence and other types or formats of information. This may include study material such as flashcard sets, exams, readings and folders and the content inside them, together with the study activity attached to it: what you studied and when, how long you spent, your answers and results, your streaks, goals and points. If you write to support, report content or another user, or answer a survey, we keep that correspondence and any file you attach. Terms you type into search are logged with your account. Where the Services offer a place for it, we may also collect other information you choose to give us, such as your school or the subjects you study.

Information we collect automatically when you use the Services, including cookies and similar technologies

When you interact with the Services we collect certain information from and about you. This may include usage activity such as signing in, opening a screen or a feature, creating or editing study material, studying a set or taking an exam, searching, and viewing or interacting with content we show you — including what you open and what you skip in Discover. It also covers the IP address you connect from, your device model and brand, your operating system and app version, a device identifier, your locale and time zone, and how often, when and how long you use the Services. Your sign-in events — including failed sign-in attempts — are kept as a security record.

Some of this is collected automatically through cookies and similar technologies: small pieces of code and stored identifiers that run when a page, an app screen or an email is loaded. The website uses cookies to keep you signed in and to remember your theme, and browser local storage to remember interface choices such as your last study settings, your recent searches, your chosen voice and unfinished drafts; the apps keep the same kind of settings on your device. As the Services develop we may use further cookies, pixels, tags, beacons or similar tools, and the vendors that provide them to us may collect the information at the same moment we do. Where the law requires consent for them, we ask before they are set.

If we add social media features or widgets to the Services, they are provided by the platform concerned; that platform may use pixels to collect your IP address, a device identifier or the page you were on, and may set its own cookie so the feature works.

We do not currently use advertising networks, third-party analytics trackers, or session-replay tools that record your screen, your keystrokes or your mouse movements. If that changes, we will update this Policy.

You can also choose to give us more information while using the Services for a better experience.

Personal information we collect from third parties

We collect information about you from the categories of third party set out below.

Partners, service providers and other companies. We may receive information about you from other sources, including our partners, our service providers and other third parties. For example, a support, messaging or authentication feature may be provided by a third party that receives, or has access to, the content of the communications made through it. We may combine the information we collect from you over time and through the Services with information we receive from other sources and third parties — including personal information they have collected from or about you in other contexts. This helps us improve the overall accuracy and completeness of the information and tailor our interaction with you.

Advertising companies. We do not currently allow third-party companies to show advertising in the Services. If we do so in future, those companies may use cookies, pixels and other technologies to collect personal information about you from your browser or device while you use the Services or third-party services; we will update this Policy before that begins.

Other users. We may receive information about you from our users. For example, another user may report your account or something you posted, or contact support about a matter involving you; and where we offer an invitation or referral feature, a user may give us your name and email address so that we can invite you to QuizNeu.

Third-party platforms and publicly available sources. In accordance with applicable law, we may collect information from third-party discussion forums, public posts on social media platforms and other publicly available sources of information.

2. How we use your personal information

We use your personal information to provide, maintain, improve and promote the Services and to communicate with you. Our main purposes for collecting your personal information are:

Providing, maintaining and personalising the Services. The information you share with us helps you sign in, hosts your content, lets you use our study tools, lets you manage your subscription and credit balance, and lets us send you transactional notices about your use of the Services. To run features such as text-to-speech, translation and search, we process the text you submit to them. We also use your information to personalise your experience and offer you relevant recommendations.

Recommendation and personalisation profiles. From usage signals — what you studied, what you opened and what you skipped — we automatically derive an interest profile and rank the content shown to you in Discover accordingly. This produces content recommendations only; it makes no automated decision that has legal effects concerning you or similarly significantly affects you.

Measuring, analysing and improving the Services. To develop our Services and deliver a continuously improved experience, we use certain information to analyse how the Services are used and how they perform, to run surveys and user research, and to gather feedback.

Providing support, resolving problems and responding to requests. We send you the information and support you ask for, along with important administrative notices about your account.

Marketing communications. We may send you email and in-app notifications about the Services, new features, promotions, competitions and special offers; you can turn these off in your account settings. Transactional notices your account needs to work — email verification, password reset, purchase and security alerts — are separate and cannot be turned off.

We do not currently show third-party advertising in the Services, do not convert your personal information into advertising identifiers and do not build audience segments for advertising. If we show advertising or market on third-party platforms in future, we will update this Policy and, where the law requires consent, obtain yours first.

Preventing fraud, crime and abuse; the security and integrity of the Services. This includes investigating, detecting, preventing or reporting fraud, misrepresentation, security breaches or incidents and other potentially prohibited or unlawful activity, and helping to protect your account.

Protecting our rights and those of third parties, and enforcing our rules. We may use your personal information to enforce our Terms of Use, our Community Guidelines, our Academic Integrity Policy, our Copyright and Takedown Policy and our other applicable agreements and policies.

Verifying your identity. In some cases we may need to verify your identity to protect the security and integrity of the Services and of your account; for example, we may ask you to verify your email address or to confirm that an unusual sign-in attempt is yours.

Complying with all applicable law. This includes responding appropriately to lawful requests for information made by public authorities or third parties through legal process.

Other uses. We may process data for other purposes disclosed to you from time to time in connection with the Services. If we plan to process your personal information for a purpose beyond those set out above and incompatible with the original purpose, we will share the relevant information with you before doing so and obtain your explicit consent where required.

3. How we disclose your personal information

Personal information you choose to share through the Services

Certain information about you, or activity you carry out on QuizNeu, may be displayed publicly in the Services. For example, the information in your user profile — your username, your name, your biography, your avatar and your follower count — and the flashcard sets, exams, readings and folders you publish publicly can be seen by other users of the Services and may appear in search results.

You choose the visibility of everything you create: private, password-protected link, or public. Anything you share by link or password is accessible to everyone who holds it.

Once content has been public, we cannot take back the copies other users have saved to their libraries — even if you later make it private or delete it. For that reason, do not put personal data into your study material, whether yours or anyone else's.

Third parties QuizNeu shares personal information with

QuizNeu may share your information with third parties in the following circumstances:

For operations carried out on our behalf. We share personal information with our service providers and partners so they can process it on our behalf. Those providers process the data only in accordance with our instructions, this Privacy Policy and the confidentiality and security obligations we consider appropriate. The provider categories we currently use are: hosting, database, search and infrastructure services; email delivery; push notification delivery; storage of image and audio files; text-to-speech and translation services; subscription entitlement management; app stores. When you use the text-to-speech or translation feature, the text you submit for processing is passed to the relevant provider. This list may change over time; you can request the current provider list at privacy@quizneu.com.

To respond to legal and other requests and to prevent harm. We may give personal information to third parties where we believe in good faith that access, use, preservation or disclosure is reasonably necessary to:

• Respond to or comply with applicable law, regulation, legal process or enforceable governmental requests.
• Enforce our Terms of Use and our other policies, including investigating potential violations.
• Detect, prevent or otherwise address fraud, security or technical issues.
• Protect against harm to the rights, property or safety of QuizNeu, our users or the public, as required or permitted by law.

With a successor that acquires all or part of our business. If QuizNeu is involved in a merger, acquisition or sale of all or part of its assets, your personal information may be transferred to the acquiring party. You will be notified of any such change in the ownership or use of your personal information and of the choices you have in that regard.

With your consent. With your consent, we may also share your personal information with companies, organisations or individuals outside QuizNeu.

4. Your choices about how we use your personal information

Email and other notifications. You can choose not to receive certain communications from QuizNeu — such as email and push notifications — by changing the notification settings in your account or by following the unsubscribe instructions in the messages. We will continue to send transactional notices related to your account activity.

Special categories of personal data. QuizNeu does not currently process special categories of personal data relating to health, race or ethnic origin, political opinion, philosophical belief, religion, sect, dress, membership of an association, foundation or trade union, sex life, criminal convictions and security measures, or biometric and genetic data; the Services have no field for them. We recommend that you do not put such information into your study material. Should we begin to collect such data, we will not use it beyond the purpose for which it was first collected without your explicit consent.

Cookies and similar technologies. You can manage your cookie preferences in your browser settings. The cookies that keep you signed in are essential to the operation of the Services; if you block them you may not be able to sign in. The choices you make are specific to both the browser and the device.

Online advertising. We do not show advertising in the Services and do not share your personal information with third-party advertising networks for interest-based advertising, so there is no separate advertising preference for you to manage. If that changes, we will update this Policy.

Managing your account. You can choose whether the content you create can be seen by other users, and you can review, edit or delete your content at any time with the tools we provide. You can delete your account at any time after signing in, from Settings via "Delete account".

When you delete your account, your profile closes; your account record is anonymised; your sign-in credentials, your sessions and your follow connections are deleted. The content you created and your study history are not automatically deleted by that action. If you want your content removed as well, delete it yourself with the deletion tools before you delete your account. Deleted content is permanently removed once our retention periods expire.

5. Do Not Track statement

Browsers and some extensions can send "Do Not Track" and global privacy control signals that automatically communicate a user's wish to opt out of certain data processing. We do not currently respond to those signals, except where applicable law requires it. Because we do not track across sites in the Services and do not share data with advertising networks, there is at present no processing activity for those signals to correspond to.

6. How long we keep your personal information

QuizNeu keeps your personal information for as long as your account is open, for as long as we need it to fulfil our legitimate business purposes, or for as long as we need it to comply with our legal obligations and retention policies. When those conditions no longer apply, the information is deleted in accordance with our deletion processes. We may keep and use de-identified, aggregated or anonymised information — information that no longer identifies you — indefinitely.

Three points are worth stating separately:

• Content you delete does not disappear immediately. When you delete a flashcard set, an exam or a reading, the content is first withdrawn from use and permanently deleted 90 days later. That window lets us reverse accidental deletions and complete abuse investigations.
• A small record remains when you delete your account. To prevent the same account being reopened immediately and bans being evaded, your email address and username are kept in a separate record for 90 days and then deleted. Your account record itself is anonymised as part of the deletion.
• Security records are kept longer. Sign-in and device records are kept longer than other usage records, for account-takeover and abuse investigations.

We keep support requests and your correspondence with us — including support emails, survey answers and feedback — in our records in order to manage our support processes, keep accurate business records and identify recurring problems. We may use that correspondence to clarify or answer your request and to help other users experiencing a similar problem. Once information identifying you has been removed, we may draw on it to produce and publish help-centre content, examples and training material. If we want to publish a correspondence in a form that identifies you, we will ask your permission first. Content you share in the public areas of the Services is already public.

7. How we protect your personal information

The security of your personal information matters to us. QuizNeu takes appropriate administrative and technical measures to protect personal information against unauthorised access, use, alteration or destruction. We make reasonable efforts, in line with generally accepted industry standards, to protect the personal information you send us both in transit and once it reaches us.

However, the internet is not 100% secure. We cannot guarantee that your use of the Services will be completely secure. We recommend that you never share your password and that you use a different password for every account. If you have a question about the security of the Services, or if you notice a vulnerability, contact us at security@quizneu.com.

8. Third-party websites and platforms

We may direct you to third-party websites or platforms, or give you the option of visiting them; user-generated content may also contain such links. Third-party platforms operate independently of us, and we are not responsible for the personal information you choose to send them. We recommend that you review the privacy policies and settings of the third-party platforms you interact with; those policies govern your interactions with them.

9. Children's privacy

QuizNeu is designed for users aged 13 and over. In the European Economic Area, the United Kingdom and countries where the digital age of consent is higher, if you are under 16 you need the consent of a parent or guardian to use the Services and for your personal information to be processed as described in this Policy.

We do not offer a separate "child account" or restricted experience for children under 13. We do not ask for a date of birth at registration, so we do not verify your age — you represent that you meet the age requirement.

We do not knowingly collect personal information from children under 13. If we learn that an account belongs to a child under 13, we close it and delete the related personal information. If you believe your child has given us personal information, write to us at privacy@quizneu.com; once we have verified that you are the parent or guardian, you can review the information, have it corrected, or have it deleted.

We do not condition a user's participation in any feature on providing more information than is reasonably necessary for that feature. If we materially change how we collect or use data from users below the age of consent, we will inform parents and, where the law requires it, obtain consent again.

Because we do not show advertising in the Services, no interest-based advertising is served to children. We do not hold a COPPA safe harbor certification or membership of a similar programme for children.

10. Jurisdictions and your rights

The law where you are may give you some of the rights described below in relation to your personal information. These rights apply only where both you and we are subject to that law.

• If you are in Türkiye, see the "Türkiye" section below.
• If you are in the European Economic Area, Switzerland or the United Kingdom, see the "EEA, Switzerland and the UK" section below.
• If you are in the United States, see the "United States" section below.

Türkiye

QuizNeu is operated by an individual established in Türkiye; it is not a company. That person is the data controller (veri sorumlusu) of your personal data within the meaning of Personal Data Protection Law No. 6698 (KVKK): we determine the purposes and means of processing.

Our contact address for all privacy matters is privacy@quizneu.com; a postal address for formal service is given on request to that address. We are not required to appoint a Data Protection Officer; privacy requests reach us directly and are handled in person.

The categories and sources of personal data we process are described in section 1, our processing purposes in section 2, and the categories of recipient we transfer to in section 3.

Your rights under KVKK Article 11. By applying to us as data controller, you may request to:

• learn whether your personal data is processed;
• request information about it if it has been processed;
• learn the purpose of processing and whether the data is used in accordance with that purpose;
• know the third parties to whom the data is transferred, in Türkiye or abroad;
• request correction if it has been processed incompletely or inaccurately;
• request erasure or destruction under the conditions set out in Article 7 of the Law;
• request that correction, erasure or destruction be notified to the third parties to whom the data was transferred;
• object to a result to your detriment arising from analysis of the processed data exclusively by automated systems;
• claim compensation for damage suffered because of unlawful processing.

Application and complaint. To exercise these rights you must first apply to us under KVKK Article 13; you can send your application to privacy@quizneu.com. We conclude your request within thirty days at the latest. If your application is rejected, if you find our answer insufficient, or if no answer is given in time, you may lodge a complaint with the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) under KVKK Article 14.

Transfers abroad. Some of the providers we use to run the Services are located outside Türkiye; to that extent your personal data is transferred abroad. We rely on the methods set out in KVKK Article 9 for those transfers.

EEA, Switzerland and the UK

This section gives additional information for people who use the Services from the European Economic Area ("EEA"), Switzerland or the United Kingdom, and supplements the other sections of this Policy.

Controller. QuizNeu is operated by an individual established in Türkiye. We are the "controller" of this information within the meaning of the General Data Protection Regulation and the equivalent legislation in the United Kingdom and Switzerland (together, "GDPR"). The Services can be downloaded from app stores worldwide; this section gives the additional information that applies if you use the Services from those countries.

Legal bases for processing. We process your personal information only where we have a legal basis:

• Contract. Where processing is necessary to perform a contract you are party to, or to take steps at your request before entering into one. For example, running your account and delivering what we undertook under the Terms of Use.
• Consent. Where you have given consent. For example, when you choose to receive marketing communications, our basis is your consent. Wherever we rely on consent, you can withdraw it at any time.
• Legitimate interests. Where processing is necessary for our legitimate interests and those interests are not overridden by your rights and freedoms. For example, providing, maintaining and improving the Services and protecting them against abuse.
• Legal obligation. To comply with obligations we are subject to.
• Vital interests. In rare cases, to protect your vital interests or those of another person.

You do not have to give us your personal information, but we need it to provide some of the Services. If you choose not to give it, we may be unable to provide the service you asked for.

Your rights under the GDPR. Subject to limitations and exceptions, you may have the following rights: access; rectification; erasure; restriction of processing; objection to processing (including profiling and direct marketing); data portability; and, where we rely on consent, withdrawal of that consent. Withdrawing consent does not affect processing carried out before the withdrawal or processing we carry out on another basis.

To exercise your rights, write to privacy@quizneu.com with the subject line "GDPR Request". We may need to verify your identity before answering and may ask for additional information for that purpose. Where we cannot verify your identity or find a record in our systems, we may refuse or limit the request.

Automated decision-making. We do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. We do carry out profiling to rank the content shown to you in Discover; that processing relies on legitimate interests and you may object to it.

Complaint to a data protection authority. If you have a concern about how we handle your personal information, write to us first at privacy@quizneu.com. You also have the right to lodge a complaint with the data protection authority where you are — the relevant national supervisory authority in the EEA, the Information Commissioner's Office (ICO) in the United Kingdom, and the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland.

International transfers. Your data is processed in Türkiye and in the countries where our service providers are located. There is no adequacy decision by the European Commission in respect of Türkiye. For the transfers we make to our providers, we rely to the extent necessary on appropriate transfer mechanisms such as the European Commission's Standard Contractual Clauses.

United States

The California Consumer Privacy Act (CCPA/CPRA) and other state privacy laws apply only to businesses that exceed certain thresholds — an annual gross revenue threshold, a threshold for the number of consumers whose data is processed, or deriving a set share of revenue from selling personal information. QuizNeu meets none of those thresholds and therefore is not a "business" within the meaning of those laws. If that changes, we will update this Policy and add the required sections.

That said:

• We do not sell your personal information and do not share it for cross-context behavioural advertising.
• If you request a copy of your personal information, its correction or its deletion, we handle those requests as described elsewhere in this Policy, whichever state you are in. Writing to privacy@quizneu.com is enough.
• We do not discriminate or retaliate against you for making a request.

11. Changes to this Policy

We may change this Privacy Policy from time to time. When we update it, the effective date and version number at the top of the page change; for significant changes we also notify you in the app or by email.

If we are going to use your personal information for a new purpose materially different from the one it was first collected for or that you later permitted, or disclose it to a third party in a way not described in this Policy, we will give you a choice about that use or disclosure; where the law requires consent, we will obtain yours first.

If you do not accept the changes, you can delete your account and stop using the Services at any time. Continuing to use the Services after the effective date means you accept the changes to this Privacy Policy.

12. Contact us

For this Privacy Policy, your personal data or requests about your rights:

privacy@quizneu.com

For general support questions about the Services: support@quizneu.com To report a security vulnerability: security@quizneu.com

A postal address for formal service is given on request to that address. We may need to verify your identity before answering your request.

This Policy was drawn up in Turkish; the texts in other languages are translations provided for convenience. In the event of a discrepancy between the translations, the Turkish text prevails. This provision does not remove any protection afforded to you by the mandatory law of the country where you are.