Privacy policy

DRAFT — pending legal review. This draft has not been reviewed by a lawyer yet. Items marked TO CONFIRM are still open.

Version draft-2026-10-22b · Last updated October 22, 2026

Who we are

Quizzard is a study app for families with kids in grades 5–9 at Fairfax County Public Schools (FCPS). It’s in a free, invite-only alpha run by Tom Kiefhaber.

Contact: [TO CONFIRM: support email address].

What we collect

• From a parent or guardian: name, email address, password (stored only as a one-way hash), and the record of your consent (which version, when, how).
• About each kid, entered by a parent: first name, a username, and a password or PIN (stored only as a hash). No kid email address.
• The kid’s classes: school, course and teacher’s name.
• Material you add: pasted text, and uploaded files or photos (PDFs, images, text files), plus the text we extract from them.
• What we make from it: study guides and practice questions.
• Practice: each answer, whether it was right, how long it took, whether a hint was used, and a running picture of which skills are strong or weak.
• Tutor chats, once the tutor ships (planned for this alpha).
• Usage events we record ourselves: material added, practice started, round finished, tutor turn. Each has a date and the kid or parent it belongs to.
• Cost records for each AI request (which step, which model, the cost). These link to a kid and family until you delete them. After that they stay, unlinked, for our accounting.

What we don’t collect

We never ask for or store school passwords. We don’t collect kid email addresses, location, or advertising identifiers. We use no third-party analytics or ad trackers.

How we use it

Only to run Quizzard for your family. We build study guides and practice from your material, steer practice toward weak skills, show parents where each kid stands, and measure whether the alpha is working (for example, how often families add material). We never sell data or use it for ads.

The AI we use

Quizzard uses Anthropic’s Claude API to read uploaded files and photos and to write study guides and practice questions.

What we send: the material itself, plus the kid’s grade band and course name. We never put a kid’s name or personal details in our instructions to the AI.

A photo or document you upload can still show a name (on a worksheet, say). We remove each kid’s first name and username, and your family’s surname, from the text we read out of it, and from its title, before we store it or use it. We also ask the AI to leave names out. Names we don’t know (a classmate’s, a nickname) can only be caught by that request.

Anthropic’s handling of API data: [TO CONFIRM: Anthropic's current commercial API terms — whether API inputs/outputs are used for training, and how long they are retained — checked against this account's terms].

Sharing with your kid’s class

A parent can choose to share material with their kid’s class. Other families in that class then see the study guide and practice made from it, labeled with the class (for example “Shared with Mr S’s Science 7”). They never see the original file or photo, and never see your family’s name.

Your kids’ answers, scores, skills and chats are never shared with anyone outside your family.

Service providers

These companies process data for us and nowhere else:

• Render (hosting and database)
• Cloudflare R2 (file storage)
• Postmark (email)
• Sentry (error reports, with personal details scrubbed before they’re sent)
• Anthropic (AI)

[TO CONFIRM: each provider's data-processing terms are accepted on Quizzard's accounts]

Your choices and rights

• See: a parent can see everything about their kids in the app.
• Delete: any guardian can delete the whole family from the family page. It deletes every account in the family and everything about the kids at once, permanently, and removes uploaded files. Any guardian can also delete one kid’s account, with their password, from that kid’s page; that deletes everything about that kid, and the family keeps its uploads, study guides and quizzes. A co-guardian can delete just their own login; the family stays.
• Export: any guardian can download everything about a kid from the family page: a zip with a readable data file and the original of every file your family uploaded. From material other families shared, it holds only the titles and questions your kid practiced, never their files, text or answer keys.
• Withdraw consent: this means deleting the family. We then stop collecting anything.
• Backups: deleted data is gone from the live app at once and leaves backups within [TO CONFIRM: backup retention window on Render].

Kids under 13 (COPPA)

Most Quizzard kids are under 13. A parent or guardian creates every kid login and gives consent first. Kids can’t sign themselves up.

[TO CONFIRM: whether the sign-up checkbox meets the amended COPPA Rule's verifiable parental consent requirements, in force since April 22, 2026]

What stays after you delete your family

• Material you shared with a class stays for that class, with no link to your family.
• Classes and courses you created stay, with no link to you.
• AI cost records stay, with no link to any kid or family.

Security

Passwords are stored only as hashes. Connections are encrypted. Sign-up is invite-only during the alpha, and sign-in attempts are rate-limited.

Changes

We’ll tell you before this policy changes, and ask for your consent again when it does.