Privacy Policy

Last updated: 5 June 2026

1. Who we are

Smartzi ("we", "our", "us") operates the educational quiz platform available at smartzi.app. We are committed to protecting the privacy of children and families who use our service.

2. Information we collect

Account information: When you register, we collect your name, email address (for parents/teachers), and a hashed password. Child accounts created by parents only require a username and PIN — no email address.

Learning data: We store quiz attempts, scores, streaks, stars, badges, and topic progress to personalise the learning experience and provide progress reports to parents.

Technical data: Standard server logs including IP addresses and browser information. We do not use third-party advertising trackers.

3. Children's privacy (COPPA / GDPR-K)

We take children's privacy seriously. Child accounts are created by a parent or guardian — children do not provide personal information directly. We do not collect children's email addresses. Parents can review, modify, or delete their child's data at any time from the parent dashboard.

We do not sell, share, or disclose children's personal information to third parties for marketing purposes.

4. How we use your information

  • Providing and personalising the quiz platform
  • Sending weekly progress report emails to parents (can be disabled)
  • Processing subscription payments via Stripe (payment details are handled entirely by Stripe — we never see card numbers)
  • Improving the platform based on aggregated, anonymised usage data

5. Data sharing

We share data with the following third-party services only as necessary to operate the platform:

  • Stripe — payment processing. Subject to Stripe's privacy policy.
  • Resend — transactional email delivery.
  • Vercel — hosting and infrastructure.

We do not sell your personal data.

6. Data retention

Account data is retained for as long as your account is active. Parents can delete child accounts at any time from the parent dashboard, which permanently removes all associated data. You may request deletion of your account by emailing us.

7. Your rights

Under GDPR and applicable laws, you have the right to access, correct, export, or delete your personal data. Parents have these rights on behalf of their children. Contact us at the email below to exercise your rights.

8. Cookies

We use a single session cookie to keep you logged in (NextAuth.js). We do not use advertising or analytics cookies.

9. Contact us

For privacy questions or data requests, please contact us at: privacy@smartzi.app