Privacy Policy
Last updated: [18.07.2026]
In short: ZQuiz collects what it needs to give you a personal and safe study experience. We never sell your data, we show no ads, and you can ask to have your data deleted at any time.
1. Data controller
Otimo AS (company no. 915 790 526), Loddefjordveien 14, is the controller of the personal data processed in ZQuiz. Contact: [geir@otimo.no].
2. What data we process
You provide
- Phone number — to create and secure your account (login with a one-time code).
- Name and age (optional) — to personalise the app.
- Country and school level — to link content to the right curriculum.
- Learning profile — your answers to a short assessment of how you learn best.
Generated through use
- Study data — subjects, decks, sessions, milestones and progress you create in the app.
- Subscription status — whether you have an active premium subscription.
- Technical operating data — needed to deliver and troubleshoot the service.
3. Why we use the data, and legal basis
- Delivering the service (account, study content, sync) — performance of a contract (GDPR Art. 6(1)(b)).
- Personalising content to your learning profile and curriculum — performance of a contract.
- Securing your account with phone verification — legitimate interest (Art. 6(1)(f)) and contract.
- Managing subscription and payment — performance of a contract.
- Aggregated, anonymous statistics (e.g. how many study a subject in a country) — legitimate interest. This can never be traced back to you as an individual.
4. Third parties we share with
We share only what is necessary, and with processors bound by contract:
- Google Firebase — phone-number verification (one-time code via SMS).
- OpenRouter / language-model providers — to generate study cards from your subjects. Content is sent for processing but is not used to identify you.
- Apple App Store and Google Play — handle the payment for subscriptions. We do not receive your card details.
We do not sell personal data, and we do not use it for advertising.
5. Where data is stored
Personal data is stored on servers in the EU/EEA. If a processor handles data outside the EEA, it is done under a lawful transfer mechanism (e.g. the European Commission's Standard Contractual Clauses).
6. How long we keep it
We keep data for as long as you have an account. If you delete your account, personal data is removed within a reasonable time, unless legal requirements (e.g. accounting for purchases) require otherwise.
7. Your rights
You have the right to access, rectification, erasure, restriction and data portability, and to object to processing. You may withdraw consent where processing relies on it. Contact us at [geir@otimo.no]. You may also lodge a complaint with your local data protection authority (in Norway, the Datatilsynet).
8. Children
ZQuiz is aimed at students. If you are below the age of consent for data processing in your country, a parent or guardian must consent on your behalf.
9. Changes
We may update this policy. Material changes will be notified in the app or on this page.
10. Contact
[Otimo AS], [geir@otimo.no].