Privacy Policy
Introduction
Welcome to Questingo ("we," "our," or "us"), operated by Aimform Kft., a company registered in Hungary. We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains how we collect, use, store, and share information when you use our application.
By using Questingo, you agree to the terms of this Privacy Policy. If you do not agree with this policy, please do not use our application.
YouTube API Services
Questingo uses YouTube API Services to allow you to create flashcards from YouTube videos. By using Questingo, you are also agreeing to be bound by the YouTube Terms of Service.
YouTube Data Usage
When you use our YouTube integration features:
Your YouTube Data Rights
If you authorize Questingo to access your YouTube data:
- You can revoke Questingo's access to your data at any time via the Google security settings page
- When you revoke access, we will delete all authorized YouTube data within 7 calendar days
- We store YouTube data for no longer than 30 calendar days and refresh it regularly to ensure accuracy
- We only use YouTube data for the purposes you explicitly consent to
For more information about how Google handles your data, please review the Google Privacy Policy.
Information We Collect
Account Information
When you create an account, we collect:
Parent Verification Information
For COPPA compliance, we collect from parents:
- Phone number (for SMS verification via Twilio)
- Credit card verification status (via Stripe - we do not store card numbers)
- Verification audit logs (IP address, timestamp, user agent)
User-Generated Content
When you use Questingo, we store:
- Flashcard sets you create (topics, questions, answers)
- Quiz attempts and scores
- Study progress and mastery status
- Language preferences
- Voice mode preferences
- Video watch progress and timestamps (for curriculum videos)
- Voice recordings (when using speech-to-text features)
Learning Analytics Data
To personalize learning and provide insights to parents, we collect:
- Learning disposition scores (persistence, flexibility, metacognition)
- Zone of Proximal Development analysis based on quiz performance
- Interest detection from video watching and quiz topic patterns
- Parent reflections and observations about child learning
- Guardian relationship data (for multi-parent households)
- Self-aware language patterns in quiz responses
YouTube-Related Data
When you create flashcards from YouTube videos, we temporarily store:
- YouTube video IDs
- Video metadata (title, description)
- Video transcripts (for up to 30 days)
- This data is refreshed regularly and deleted after 30 days or when you delete the flashcard set
Automatically Collected Information
When you use our application, we automatically collect:
- Device information (browser type, operating system)
- Usage data (features accessed, study sessions)
- Log data (IP address, access times)
- Performance data (loading times, errors)
Cookies and Local Storage
We use browser local storage to:
- Maintain your login session
- Remember your language preferences
- Store your voice mode settings
- Improve application performance
We do not use third-party tracking cookies or advertising cookies.
How We Use Your Information
We use your information to:
1. Provide Our Services
2. Improve Our Services
- Analyze usage patterns to enhance features
- Debug technical issues
- Optimize performance
- Develop new features
3. Communicate With You
- Send account-related notifications
- Respond to your inquiries
- Provide customer support
- Send important service updates
4. Ensure Security
- Prevent fraud and abuse
- Protect against security threats
- Enforce our Terms of Service
- Comply with legal obligations
We do not use your data for:
- Third-party advertising
- Selling to data brokers
- Training AI models without consent
- Any purpose not explicitly disclosed here
Data Storage and Security
Storage Location
Your data is stored securely using:
Security Measures
We implement industry-standard security measures including:
- Encryption in transit (TLS/SSL)
- Encryption at rest
- Secure authentication (password hashing)
- Regular security audits
- Access controls and monitoring
However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
Data Retention
We retain your data for as long as:
- Your account is active
- Required to provide our services
- Necessary to comply with legal obligations
When you delete your account:
- We delete all your personal data within 7 calendar days
- Some anonymized data may be retained for analytics
- Backup copies are deleted within 30 days
Data Sharing and Disclosure
Third-Party Services
We share data with trusted third-party service providers:
All third-party services are contractually obligated to protect your data and use it only for the purposes we specify.
Legal Requirements
We may disclose your information if required to:
- Comply with applicable laws or regulations
- Respond to legal processes (subpoenas, court orders)
- Protect our rights, property, or safety
- Prevent fraud or security threats
- Enforce our Terms of Service
We will notify you of such disclosures unless prohibited by law.
No Sale of Personal Data
We do not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration.
Your Rights and Choices
Access and Portability
You have the right to:
- Access your personal data
- Export your flashcard sets and study data
- Request a copy of your data in a machine-readable format
Correction and Deletion
You can:
- Update your account information at any time
- Delete individual flashcard sets
- Request deletion of your entire account
- Correct inaccurate information
Consent Management
You can:
- Withdraw consent for data processing
- Opt-out of non-essential communications
- Disable voice mode features
- Revoke YouTube API access via Google security settings
Children's Privacy
Questingo is designed with children in mind and may be used by children under 13 years of age with verified parental consent. We comply with the Children's Online Privacy Protection Act (COPPA) and GDPR-K (GDPR protections for children), taking special precautions to protect children's privacy:
- Parent accounts are required to create child profiles
- Parental verification is required before children can access certain features
- Children's data is stored separately and with enhanced protections
- Parents can view, export, or delete their child's data at any time via Settings
- We do not target advertising to children
- Session recordings do not capture sensitive input fields for any users
For detailed information about how we handle children's data, parental consent requirements, and your rights as a parent or guardian, please see our .
Self-Serve Data Management
We provide self-serve tools so you can manage your data directly within Questingo:
- Data Export: Download a copy of your data in JSON format from Settings
- Account Deletion: Delete your account and all associated data from Settings
- Profile Deletion: Delete individual child profiles from Settings
- Content Deletion: Delete individual quizzes, flashcards, and learning progress
International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data internationally, we ensure appropriate safeguards are in place.
GDPR Rights (European Users)
If you are located in the European Economic Area (EEA), you have additional rights under GDPR. For detailed information about your GDPR rights, please visit our GDPR Information Page.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date and notify you via email or in-app notification for material changes.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy:
Email: privacy@questingo.com
Data Protection Officer: dpo@questingo.com