Privacy Policy

Effective date: 2026-10-02 · Version 2

QuizRead ("QuizRead", "we", "us") helps people learn a foreign language by reading. This Privacy Policy explains what personal information we collect when you use the QuizRead mobile apps and the QuizRead website (together, the "Services"), how we use it, who we share it with, how long we keep it and the rights you have over it. The QuizRead apps are published per reading language — for example QuizRead English and QuizRead Deutsch — and this Policy applies to all of them.

Using the Services means this Policy applies to you. Where the law requires your consent for a particular use — push notifications, for example — we ask for it separately and you can withdraw it at any time.

Contents

1. Personal information we collect and where it comes from
2. How we use your personal information
3. How we disclose your personal information
4. Your choices about how we use your personal information
5. Do Not Track statement
6. How long we keep your personal information
7. How we protect your personal information
8. Third-party websites and platforms
9. Children's privacy
10. Jurisdictions and your rights — Türkiye; the EEA, Switzerland and the UK; the United States
11. Changes to this Policy
12. Contact us

1. Personal information we collect and where it comes from

We collect the categories of personal information described below in the course of providing the Services to you. The examples given in this section are illustrative and not exhaustive: as the Services develop, the information within each category may change, and we will update this Policy when a new category is added.

Using the app without an account

When you first open a QuizRead app, we create a guest account for you so that you can start reading straight away. A guest account holds no name and no email address. So that the app can find your guest account again after a reinstall, we store keyed hashes (one-way codes) of an installation identifier the app generates and of the identifier your device's operating system gives the app (the "identifier for vendor" on iOS, the Android ID on Android). We never store those identifiers in readable form and we do not use them for advertising.

Signing in with Apple or Google

You can sign in with Apple or with Google; QuizRead has no passwords of its own. That service verifies who you are and gives us an identifier for your account there, your email address (only when the service confirms it is verified) and, if you allow it, your name. If you use Apple's "Hide My Email", we receive the relay address Apple creates for you. We never receive your Apple or Google password and we get no other access to those accounts. If you sign in after using the app as a guest, your guest data is moved into your account.

We do not ask for your date of birth, your phone number or your postal address. If a feature later needs one of them, we will ask you for it and update this Policy.

Purchases

QuizRead Plus subscriptions are sold through the Apple App Store and Google Play. No card details reach us. The store is the seller, takes the payment and holds your billing information. Our subscription provider tells us which plan you are entitled to in which app, which store and product the purchase came from, its transaction identifiers and when the entitlement renews, expires or is refunded; we store that together with the store's notifications about it and with your daily usage counters (how many translations and readings aloud you have used against the free plan's limits). Subscriptions apply per app: a subscription bought in QuizRead English does not cover QuizRead Deutsch.

Information you create or send us

When you use the Services you create information that we store with your account, in the app you are using:

• Your reading. The readings and books you open, your reading position and progress, the readings you save to your library and folders, and the time you spend reading.
• Your own texts. Text you paste into the app or upload as a plain-text file to read it in QuizRead. Your own texts are visible only to you; they are never published or shown to other users.
• Your dictionary and study activity. The words and sentences you save, with their translations, the sentence they came from and any note you add; your decks; the answers and results of your study sessions; your level test answers and the level we estimate from them; your daily goal, your streaks and your statistics. The answers to the comprehension quiz at the end of a reading are checked on your device and are not sent to us.
• Your settings. Your reading level, interface language, translation language, voice, daily goal, reminder and notification choices, time zone and similar preferences.
• Search. The terms you type into search, stored with your account.
• Reports, requests and support. If you report a problem with a reading, a translation, a quiz question or a dictionary entry, send a content or feature request, or write to support in the app, we keep your message together with the item it concerns, your app version and platform. If you use the support form or the account deletion form on our website, we receive the email address, name, subject and message you enter (for deletion requests: the email address, sign-in method, and the reason and comment you choose to give), and the app you select. If you email us, we keep the correspondence.

Information we collect automatically when you use the Services

When you use the apps we collect certain information from and about you:

• Usage activity. Which screens and features you open, the actions you take there and how long they last; what you open, skip and how long you stay on items in Discover; and when in the day you usually start reading, which we use to time your reminders.
• Device and connection information. Your device brand and model, operating system and build, app version, whether the device is physical or an emulator, screen size, locale and time zone, the IP address you connect from and the country derived from it. Each sign-in, guest start and guest restore is recorded with that information as a security record.
• Push notification token. If you allow notifications, the token your device gives us for delivering them, which we store encrypted.

On the website we do not use analytics, advertising or tracking cookies. The website sets one cookie, which remembers the language you chose for the site. The apps keep your settings, your session and recently used content on your device so that they work and load quickly.

We do not currently use advertising networks, third-party analytics, crash-reporting services or session-replay tools. Our iOS apps do not access the advertising identifier (IDFA) and we do not track you across other companies' apps or websites. If that changes, we will update this Policy before it starts and, where the law requires consent, ask for yours.

Personal information we collect from third parties

Apple and Google, as described above, when you sign in with them.

The app stores and our subscription provider, for your purchases, renewals, cancellations and refunds.

We do not buy personal information from data brokers and we do not collect information about you from social media.

2. How we use your personal information

We use your personal information to provide, maintain, improve and promote the Services and to communicate with you. Our main purposes are:

Providing, maintaining and personalising the Services. Signing you in, keeping your library, dictionary, decks and progress in sync, applying your plan and its limits, and showing you readings at your level. To translate a word or a passage and to read text aloud, we process the text you select (see section 3).

Recommendations and level. From your level and your usage signals — what you read, what you opened and what you skipped — we automatically rank the readings shown to you in Discover. From your level test answers we estimate your reading level. This produces recommendations and a suggested level only; it makes no automated decision that has legal effects concerning you or similarly significantly affects you, and you can change your level yourself at any time.

Reminders and notifications. Sending the push notifications you have allowed: daily goal and streak notices, review and reading reminders, and messages from our team, at most two automated reminders a day.

Measuring, analysing and improving the Services. Understanding how the Services are used and how they perform, from our own usage records; we do not send them to analytics companies.

Providing support, resolving problems and responding to requests. Answering your messages and reports, fixing the content or translation you reported, handling deletion requests and sending you important notices about your account.

Preventing fraud, crime and abuse; the security and integrity of the Services. Investigating, detecting, preventing or reporting fraud, abuse of the free plan, account takeover, security incidents and other potentially prohibited or unlawful activity, and helping to protect your account. This is what the security record of sign-ins and devices is for.

Protecting our rights and those of third parties, and enforcing our rules. Enforcing our Terms of Use and our other applicable agreements and policies.

Complying with all applicable law. Including responding appropriately to lawful requests for information made by public authorities or third parties through legal process.

We do not show advertising in the Services, do not convert your personal information into advertising identifiers and do not build audience segments for advertising. We do not send you marketing email.

If we plan to process your personal information for a purpose beyond those set out above and incompatible with the original purpose, we will tell you before doing so and obtain your explicit consent where required.

3. How we disclose your personal information

Nothing you create in QuizRead is published. Your own texts, your dictionary, your decks and your progress are visible only to you and, where they need it to help you or to run the Services, to our team.

QuizRead may share your information with third parties in the following circumstances:

For operations carried out on our behalf. We share personal information with service providers that process it on our behalf, only in accordance with our instructions, this Privacy Policy and the confidentiality and security obligations we consider appropriate. The provider categories we currently use are:

• server hosting, databases and backups;
• network delivery and protection of our servers (content delivery and DDoS protection, through which your requests and IP address pass);
• machine translation: when you translate a word or a passage, the selected text — including text from your own uploaded texts — the sentence around it and the language pair are sent to our translation provider, currently Google (Gemini API). We do not send your name, email address or account identifier with it;
• text-to-speech: when audio for a word or passage has not already been prepared, the text may be sent to a speech provider; otherwise your device's built-in voice is used;
• push notification delivery (through Expo, Apple Push Notification service and Firebase Cloud Messaging);
• subscription management (RevenueCat), which receives a pseudonymous identifier for your account in that app and the store's purchase records — not your name or email address;
• storage and delivery of the images and audio of our catalogue;
• sign-in (Apple and Google) and the app stores (Apple and Google), which act as independent controllers for their own services;
• email hosting for our mailboxes, when you write to us.

This list may change over time; you can request the current list of providers at privacy@quizneu.com.

To respond to legal and other requests and to prevent harm. We may give personal information to third parties where we believe in good faith that access, use, preservation or disclosure is reasonably necessary to:

• Respond to or comply with applicable law, regulation, legal process or enforceable governmental requests.
• Enforce our Terms of Use and our other policies, including investigating potential violations.
• Detect, prevent or otherwise address fraud, security or technical issues.
• Protect against harm to the rights, property or safety of QuizRead, our users or the public, as required or permitted by law.

With a successor that acquires all or part of our business. If QuizRead is involved in a merger, acquisition or sale of all or part of its assets, your personal information may be transferred to the acquiring party. You will be notified of any such change in the ownership or use of your personal information and of the choices you have in that regard.

With your consent. With your consent, we may also share your personal information with companies, organisations or individuals outside QuizRead.

4. Your choices about how we use your personal information

Notifications. QuizRead asks for permission before sending push notifications. You can turn each kind of notification on or off in the app's settings, or switch notifications off for QuizRead in your device settings.

Your level and your recommendations. You can change your reading level at any time. You may object to the ranking of Discover described in section 2 by writing to us; the catalogue stays available to you to browse.

Special categories of personal data. QuizRead does not process special categories of personal data relating to health, race or ethnic origin, political opinion, philosophical belief, religion, sect, dress, membership of an association, foundation or trade union, sex life, criminal convictions and security measures, or biometric and genetic data; the Services have no field for them. We recommend that you do not put such information into your own texts, your notes or your messages to us.

Cookies and local storage. The website's language cookie is needed to show you the language you chose; you can delete it in your browser settings. Clearing the app's data on your device removes the settings and content stored there.

Online advertising. We do not show advertising in the Services and do not share your personal information with advertising networks, so there is no advertising preference for you to manage.

Deleting your content and your account. You can delete your own texts, dictionary entries, decks and library items at any time in the app.

• Signed-in account. You can delete your account in the app's settings; for your security you are asked to confirm with Apple or Google first. Your sessions end immediately. The deletion becomes final 30 days later; if you sign in again with the same Apple or Google account within those 30 days, the deletion is cancelled. When it becomes final, your name and email address are removed and your library, dictionary, decks, own texts, reading and study history, statistics, settings, notifications, search history and support messages are erased. What remains is described in section 6.
• Guest account. You can delete a guest account's data in the app's settings at any time; it is erased immediately.
• Without the app. If you cannot use the app, send a request through the account deletion form on our website or write to privacy@quizneu.com. We match the email address to an account and delete it; if the email address does not match an account, nothing is deleted.

Deleting your account does not cancel a subscription; cancel it in your Apple or Google account settings.

5. Do Not Track statement

Browsers and some extensions can send "Do Not Track" and global privacy control signals that automatically communicate a user's wish to opt out of certain data processing. Because we do not track you across sites or apps and do not share data with advertising networks, there is no processing activity for those signals to correspond to.

6. How long we keep your personal information

QuizRead keeps your personal information for as long as your account exists, for as long as we need it to fulfil the purposes in section 2, or for as long as we need it to comply with our legal obligations. When those conditions no longer apply, the information is deleted. We may keep and use anonymised or aggregated information — information that no longer identifies you — indefinitely.

The following periods apply:

• Search history: 30 days.
• Usage activity: 180 days.
• Security record of sign-ins and devices, with IP address: 365 days. When an account is deleted, these records are separated from it and their IP address is removed; they are kept, no longer linked to anyone, until the 365 days end.
• Guest accounts: deleted after 60 days without use, unless a subscription bought on them is still active.
• Deleted accounts: a 30-day period before the deletion becomes final, as described in section 4.
• Backups: deleted data can remain in our backups for up to 14 days after it is deleted from the Services, until those backups are overwritten.

Three points are worth stating separately:

• Your Apple or Google account identifier is kept after deletion. To prevent the same Apple or Google account from silently creating a new account after a final deletion, we keep the identifier that Apple or Google gave us for it — without your email address or name. As a result, once a deletion is final, that Apple or Google account cannot be used to sign in to QuizRead again; write to support@quizneu.com if you want to use QuizRead again with it.
• Purchase records are kept in anonymised form. Your subscription records and usage counters are separated from your account and their store identifiers are removed, so that we keep accurate records of purchases and refunds without knowing whose they were. Any record we are required by law to keep with your identity is kept for the period the law requires.
• Reports you sent are kept without your name. A report about a reading or a translation stays, so that the fix remains documented, but it is no longer linked to you and its message and quoted text are removed.

We keep support requests and requests sent through our website for as long as we need them to deal with the matter and keep accurate records of how we handled it, and for no longer than the limitation periods that apply to it. Once information identifying you has been removed, we may draw on recurring questions to improve our help content.

7. How we protect your personal information

The security of your personal information matters to us. QuizRead takes appropriate administrative and technical measures to protect personal information against unauthorised access, use, alteration or destruction: connections are encrypted in transit, sign-in tokens are stored only as hashes, push tokens are stored encrypted, and access to personal information is limited to the people who need it to run the Services.

However, the internet is not 100% secure. We cannot guarantee that your use of the Services will be completely secure. Protect access to your device and to your Apple or Google account. If you have a question about the security of the Services, or if you notice a vulnerability, contact us at security@quizneu.com.

8. Third-party websites and platforms

We may direct you to third-party websites or platforms, such as the app stores, or give you the option of visiting them. Third-party platforms operate independently of us, and we are not responsible for the personal information you choose to send them. We recommend that you review the privacy policies and settings of the third-party platforms you interact with; those policies govern your interactions with them.

9. Children's privacy

QuizRead is designed for users aged 13 and over. In the European Economic Area, the United Kingdom and countries where the digital age of consent is higher, if you are under 16 you need the consent of a parent or guardian to use the Services and for your personal information to be processed as described in this Policy.

We do not offer a separate "child account" or restricted experience for children under 13. We do not ask for a date of birth, so we do not verify your age — you represent that you meet the age requirement.

We do not knowingly collect personal information from children under 13. If we learn that an account belongs to a child under 13, we close it and delete the related personal information. If you believe your child has given us personal information, write to us at privacy@quizneu.com; once we have verified that you are the parent or guardian, you can review the information, have it corrected, or have it deleted.

Because we do not show advertising in the Services, no interest-based advertising is served to children. We do not hold a COPPA safe harbor certification or membership of a similar programme for children.

10. Jurisdictions and your rights

The law where you are may give you some of the rights described below in relation to your personal information. These rights apply only where both you and we are subject to that law.

• If you are in Türkiye, see the "Türkiye" section below.
• If you are in the European Economic Area, Switzerland or the United Kingdom, see the "EEA, Switzerland and the UK" section below.
• If you are in the United States, see the "United States" section below.

Türkiye

QuizRead is operated by an individual established in Türkiye; it is not a company. That person is the data controller (veri sorumlusu) of your personal data within the meaning of Personal Data Protection Law No. 6698 (KVKK): we determine the purposes and means of processing.

Our contact address for all privacy matters is privacy@quizneu.com; a postal address for formal service is given on request to that address. We are not required to appoint a Data Protection Officer; privacy requests reach us directly and are handled in person.

The categories and sources of personal data we process are described in section 1, our processing purposes in section 2, and the categories of recipient we transfer to in section 3. We process your personal data on the grounds in KVKK Article 5: where it is necessary for the establishment and performance of the contract between us, for compliance with our legal obligations, for the establishment, exercise or protection of a right, for our legitimate interests provided that your fundamental rights and freedoms are not harmed, and, where required, on the basis of your explicit consent.

Your rights under KVKK Article 11. By applying to us as data controller, you may request to:

• learn whether your personal data is processed;
• request information about it if it has been processed;
• learn the purpose of processing and whether the data is used in accordance with that purpose;
• know the third parties to whom the data is transferred, in Türkiye or abroad;
• request correction if it has been processed incompletely or inaccurately;
• request erasure or destruction under the conditions set out in Article 7 of the Law;
• request that correction, erasure or destruction be notified to the third parties to whom the data was transferred;
• object to a result to your detriment arising from analysis of the processed data exclusively by automated systems;
• claim compensation for damage suffered because of unlawful processing.

Application and complaint. To exercise these rights you must first apply to us under KVKK Article 13; you can send your application to privacy@quizneu.com. We conclude your request within thirty days at the latest. If your application is rejected, if you find our answer insufficient, or if no answer is given in time, you may lodge a complaint with the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) under KVKK Article 14.

Transfers abroad. Some of the providers listed in section 3 are located outside Türkiye — in particular in the European Union and the United States; to that extent your personal data is transferred abroad. For transfers to countries without an adequacy decision we rely on the appropriate safeguards set out in KVKK Article 9 — in particular the standard contracts published by the Personal Data Protection Board — and, where their conditions are met, on the incidental transfers listed in Article 9(6).

EEA, Switzerland and the UK

This section gives additional information for people who use the Services from the European Economic Area ("EEA"), Switzerland or the United Kingdom, and supplements the other sections of this Policy.

Controller. QuizRead is operated by an individual established in Türkiye. We are the "controller" of this information within the meaning of the General Data Protection Regulation and the equivalent legislation in the United Kingdom and Switzerland (together, "GDPR"). The apps can be downloaded from app stores worldwide; this section gives the additional information that applies if you use the Services from those countries.

Legal bases for processing. We process your personal information only where we have a legal basis:

• Contract. Where processing is necessary to perform the contract you have with us under the Terms of Use — running your account, your library, dictionary and progress, your plan and its limits, translation and reading aloud.
• Consent. For push notifications, and wherever else we ask for it. Wherever we rely on consent, you can withdraw it at any time.
• Legitimate interests. Where processing is necessary for our legitimate interests and those interests are not overridden by your rights and freedoms: recognising a guest device again, ranking Discover, improving the Services from our own usage records, and protecting the Services and your account against abuse and account takeover with the security record of sign-ins and devices.
• Legal obligation. To comply with obligations we are subject to, including keeping records that the law requires.
• Vital interests. In rare cases, to protect your vital interests or those of another person.

You do not have to give us your personal information, but we need some of it to provide the Services. If you choose not to give it, we may be unable to provide the feature you asked for.

Your rights under the GDPR. Subject to limitations and exceptions, you may have the following rights: access; rectification; erasure; restriction of processing; objection to processing (including profiling); data portability; and, where we rely on consent, withdrawal of that consent. Withdrawing consent does not affect processing carried out before the withdrawal or processing we carry out on another basis. The app does not yet offer a download of your data; if you ask for a copy, we send it to you in a structured, commonly used, machine-readable format.

To exercise your rights, write to privacy@quizneu.com with the subject line "GDPR Request". We may need to verify your identity before answering — for example by asking you to write from the email address of your account or to confirm a detail only the account holder would know. Where we cannot verify your identity or find a record in our systems, we may refuse or limit the request.

Automated decision-making. We do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. We do carry out profiling to rank the content shown to you in Discover and to estimate your reading level; that processing relies on legitimate interests and you may object to it.

Complaint to a data protection authority. If you have a concern about how we handle your personal information, write to us first at privacy@quizneu.com. You also have the right to lodge a complaint with the data protection authority where you are — the relevant national supervisory authority in the EEA, the Information Commissioner's Office (ICO) in the United Kingdom, and the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland.

International transfers. Your data is processed in Türkiye and in the countries where our service providers are located, including the United States. There is no adequacy decision by the European Commission in respect of Türkiye. For the transfers we make to our providers, we rely to the extent necessary on appropriate transfer mechanisms such as the European Commission's Standard Contractual Clauses or, for providers certified under it, the EU–US Data Privacy Framework.

United States

The California Consumer Privacy Act (CCPA/CPRA) and other state privacy laws apply only to businesses that exceed certain thresholds — an annual gross revenue threshold, a threshold for the number of consumers whose data is processed, or deriving a set share of revenue from selling personal information. QuizRead meets none of those thresholds and therefore is not a "business" within the meaning of those laws. If that changes, we will update this Policy and add the required sections.

That said:

• We do not sell your personal information and do not share it for cross-context behavioural advertising.
• If you request a copy of your personal information, its correction or its deletion, we handle those requests as described elsewhere in this Policy, whichever state you are in. Writing to privacy@quizneu.com is enough.
• We do not discriminate or retaliate against you for making a request.

11. Changes to this Policy

We may change this Privacy Policy from time to time. When we update it, the effective date and version number at the top of the page change; for significant changes we also notify you in the app.

If we are going to use your personal information for a new purpose materially different from the one it was first collected for or that you later permitted, or disclose it to a third party in a way not described in this Policy, we will give you a choice about that use or disclosure; where the law requires consent, we will obtain yours first.

If you do not accept the changes, you can delete your account and stop using the Services at any time. Continuing to use the Services after the effective date means you accept the changes to this Privacy Policy.

12. Contact us

For this Privacy Policy, your personal data or requests about your rights:

privacy@quizneu.com

For general support questions about the Services: support@quizneu.com To report a security vulnerability: security@quizneu.com

A postal address for formal service is given on request to that address. We may need to verify your identity before answering your request.

This Policy was drawn up in Turkish; the texts in other languages are translations provided for convenience. In the event of a discrepancy between the translations, the Turkish text prevails. This provision does not remove any protection afforded to you by the mandatory law of the country where you are.