Privacy Policy

QuizHack is a product operated by Lumi, a software company based in Poland. In this Privacy Policy, references to "we," "us," and "our" mean the Lumi team operating QuizHack.

If you finalize a specific legal entity name, registered address, and support contact for customer-facing legal notices, those details should be added here and in the Terms of Service so the site reflects the exact business operator.

QuizHack currently collects account and authentication information such as your name, email address, profile image, email verification state, authentication provider records, and Auth.js session data. If you sign in with Google or by magic link, the related provider data needed to complete sign-in may also be processed.

If you purchase access, we process billing and subscription information through Stripe and our own subscription records. This may include customer identifiers, plan details, billing status, renewal timing, cancellation state, and related transaction metadata needed to manage your subscription.

If you use the product features, we may process uploaded document files, document metadata, extracted text, document chunks, chat messages, conversation titles, selected-document context, and extension usage records such as device name, hashed extension token, solve mode, question count, image presence, latency, and token usage.

We may also process technical and security data needed to operate the service, including session cookies, limited IP-related security data for extension usage, Cloudflare Turnstile verification on login, and service logs used for abuse prevention, debugging, and reliability.

We use your information to create and secure accounts, authenticate sign-in, pair the extension, process subscriptions, provide document and chat functionality, return answers, and keep the service running reliably.

We also use service data to prevent abuse, troubleshoot failures, enforce product limits, investigate fraud or misuse, maintain records related to billing and refunds, and improve product quality and support operations.

When you use document, chat, or extension answer features, questions, prompts, selected document context, and related content may be processed by our underlying AI providers so the service can generate responses.

Uploaded documents may be processed into extracted text and retrieval-ready chunks so QuizHack can use the relevant study context later. Based on the current backend implementation, uploaded raw files are removed after processing, but extracted text, document metadata, and retrieval data may remain until deleted or otherwise removed from the service.

Chat messages and related metadata may be stored so your conversations can be displayed back to you and used as part of the product workflow. Extension solve requests may also generate usage and operational records about the solve event, even when the page-facing UI is minimal or hidden.

You should not upload or process material you are not allowed to use, share, or store. Coursework content can be sensitive, and you remain responsible for what you choose to submit to the service.

We may share information with service providers that help us operate QuizHack, including hosting and infrastructure providers, authentication providers, Stripe for billing, Cloudflare Turnstile for login security, email providers for magic-link delivery, and AI providers that help generate product outputs.

We may also disclose information when reasonably necessary to comply with law, enforce our terms, protect the rights or safety of users or others, investigate fraud or abuse, or support a business transfer such as a merger, acquisition, or asset sale.

We do not sell personal information and we do not share your information with third parties for unrelated advertising purposes based on the current product setup.

QuizHack uses cookies and similar session technologies that are necessary to keep you signed in, protect accounts, and maintain the core website experience. Because Auth.js is part of the current stack, session-related cookies are used for authentication and access control.

The service may also use browser storage or comparable technical mechanisms where needed for product functionality, security, or extension-related state. These technologies are part of running the product rather than a separate ad-tech stack.

Based on the current codebase, QuizHack does not yet appear to run a dedicated analytics product on the marketing site or app. If we add analytics, product telemetry, or error-monitoring tools later, we may collect usage signals such as page views, clicks, device and browser information, and interaction events needed to understand performance and improve the service.

If analytics or diagnostics tools are added, we may update this Privacy Policy, our cookie disclosures, or both so the description of those tools matches how they are actually used.

We retain information for as long as reasonably necessary to operate QuizHack, maintain subscriptions and account history, secure the service, comply with legal obligations, resolve disputes, and enforce our agreements.

We use reasonable administrative, technical, and organizational safeguards to protect data, but no online service can guarantee perfect security. You should also take reasonable steps to protect your own account and devices.

You can update certain account information through the product or your sign-in provider, cancel paid access through the billing flow, and delete uploaded documents through the product where that functionality is available.

Depending on where you live, you may also have legal rights relating to access, correction, deletion, or restriction of certain personal information. We may need to verify your identity before processing some requests.

QuizHack is operated from Poland, but the service may be used by customers in the United States and other countries. Depending on where you are located, your information may be processed in jurisdictions other than your own.

When we handle personal information across borders, we aim to do so in a manner consistent with applicable privacy and data-protection requirements.

QuizHack is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the service. If you believe a child has provided us with personal information, contact us so we can review the situation.

We may update this Privacy Policy from time to time. When we do, we may change the effective date and update the text here to reflect the current service and data practices.