Privacy Policy

QuizHack is a product operated by Lumi, a software company based in Poland. In this Privacy Policy, references to "we," "us," and "our" mean the Lumi team operating QuizHack.

If you finalize a specific legal entity name, registered address, and support contact for customer-facing legal notices, those details should be added here and in the Terms of Service so the site reflects the exact business operator.

QuizHack currently collects account and authentication information such as your name, email address, profile image, email verification state, authentication provider records, and Auth.js session data. If you sign in with Google or by magic link, the related provider data needed to complete sign-in may also be processed.

If you purchase access, we process billing and subscription information through Stripe and our own subscription records. This may include customer identifiers, plan details, billing status, renewal timing, cancellation state, and related transaction metadata needed to manage your subscription.

If you use the product features, we may process uploaded document files, document metadata, extracted text, document chunks, chat messages, conversation titles, selected-document context, and extension usage records such as device name, hashed extension token, solve mode, question count, image presence, latency, and token usage.

We may also process technical and security data needed to operate the service, including session cookies, limited IP-related security data for extension usage, Cloudflare Turnstile verification on login, and service logs used for abuse prevention, debugging, and reliability.

We use your information to create and secure accounts, authenticate sign-in, pair the extension, process subscriptions, provide document and chat functionality, return answers, and keep the service running reliably.

We also use service data to prevent abuse, troubleshoot failures, enforce product limits, investigate fraud or misuse, maintain records related to billing and refunds, and improve product quality and support operations.

When you use document, chat, or extension answer features, questions, prompts, selected document context, and related content may be processed by our underlying AI providers so the service can generate responses.

Uploaded documents may be processed into extracted text and retrieval-ready chunks so QuizHack can use the relevant study context later. Based on the current backend implementation, uploaded raw files are removed after processing, but extracted text, document metadata, and retrieval data may remain until deleted or otherwise removed from the service.

Chat messages and related metadata may be stored so your conversations can be displayed back to you and used as part of the product workflow. Extension solve requests may also generate usage and operational records about the solve event, even when the page-facing UI is minimal or hidden.

You should not upload or process material you are not allowed to use, share, or store. Coursework content can be sensitive, and you remain responsible for what you choose to submit to the service.

We may share information with service providers that help us operate QuizHack, including hosting and infrastructure providers, authentication providers, Stripe for billing, Cloudflare Turnstile for login security, email providers for magic-link delivery, and AI providers that help generate product outputs.

We may also disclose information when reasonably necessary to comply with law, enforce our terms, protect the rights or safety of users or others, investigate fraud or abuse, or support a business transfer such as a merger, acquisition, or asset sale.

We do not sell personal information and we do not share your information with third parties for unrelated advertising purposes based on the current product setup.

QuizHack uses cookies and similar session technologies that are necessary to keep you signed in, protect accounts, and maintain the core website experience. Because Auth.js is part of the current stack, session-related cookies are used for authentication and access control.

We also store a first-party cookie preference record so the website remembers whether you accepted or rejected optional analytics and marketing cookies.

The service may also use browser storage or comparable technical mechanisms where needed for product functionality, security, or extension-related state. These technologies are part of running the product rather than a separate ad-tech stack.

QuizHack now uses Google Analytics 4 on the public website to measure page views, pricing interest, and key call-to-action clicks. We do not start that analytics tooling unless you affirmatively opt in through the cookie banner or cookie preferences controls.

When analytics consent is granted, Google Analytics may collect data such as page paths, browser and device metadata, approximate geographic region, referrer information, and interaction events on public website pages. We do not use this website analytics setup to track extension runtime behavior, uploaded document content, chat content, or activity inside the authenticated /app workspace.

If you reject optional analytics cookies, Google Analytics should not initialize and related optional cookies should not be created. If you later withdraw consent, future analytics collection is disabled and we attempt to remove related Google Analytics cookies from the browser.

If you separately accept marketing cookies, QuizHack may load Google Ads and Google Tag Manager so paid acquisition and subscription checkout conversions can be measured. TikTok measurement is expected to run through the tag manager container. For subscription conversion matching, we may send hashed first-party identifiers such as a SHA-256 hashed email address or hashed account identifier after marketing consent. These marketing tools do not receive raw prompts, quiz answers, uploaded document text, names, phone numbers, addresses, or raw account identifiers from this website setup.

We retain information for as long as reasonably necessary to operate QuizHack, maintain subscriptions and account history, secure the service, comply with legal obligations, resolve disputes, and enforce our agreements.

We use reasonable administrative, technical, and organizational safeguards to protect data, but no online service can guarantee perfect security. You should also take reasonable steps to protect your own account and devices.

You can update certain account information through the product or your sign-in provider, cancel paid access through the billing flow, and delete uploaded documents through the product where that functionality is available.

Depending on where you live, you may also have legal rights relating to access, correction, deletion, or restriction of certain personal information. We may need to verify your identity before processing some requests.

QuizHack is operated from Poland, but the service may be used by customers in the United States and other countries. Depending on where you are located, your information may be processed in jurisdictions other than your own.

When we handle personal information across borders, we aim to do so in a manner consistent with applicable privacy and data-protection requirements.

QuizHack is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the service. If you believe a child has provided us with personal information, contact us so we can review the situation.

We may update this Privacy Policy from time to time. When we do, we may change the effective date and update the text here to reflect the current service and data practices.