Privacy Policy
Last updated：2026-08-06
QAI (myquizai.com) is an AI-powered quiz generation and practice service. This policy explains what personal data we collect, how it is used, and the rights you have. By using the service you confirm you have read and understood it.
1. What we collect
(1) Information you provide
- Sign-in data. When you sign in with Google we receive your name, email address and profile picture URL. We never receive your Google password, and we do not access your Gmail, Drive or contacts.
- Source material. Topics you type, text you paste, PDFs or images you upload, and the contents of YouTube or website links you supply.
- Chilin conversations. The questions you ask the assistant, and any quiz question you attach with the “Ask Chilin” button.
(2) Collected automatically
- IP address and request time, for rate limiting and abuse prevention (stored in Upstash, expiring within 24 hours).
- Daily generation and message counters keyed to your account id (reset at midnight Taipei time).
- Server logs generated by our hosting platform, Vercel.
- Cookies and advertising identifiers — see section 4.
(3) Data that stays on your device
This is a deliberate design choice: the quizzes you generate, your answers, your review schedule and your streak are all stored in your own browser’s localStorage and are never uploaded to our servers (keys beginning qai:). We cannot read them. Clearing your browser data deletes them permanently and irreversibly.
The one exception is publishing: when you press Share, that quiz is copied to our server to create a public link (see section 5).
2. How we use it
- Providing the service itself: generating questions, grading short answers, answering your questions.
- Keeping you signed in.
- Enforcing usage limits (3 quizzes a day, 5 saved at a time, 30 assistant messages a day).
- Detecting and preventing abuse or abnormal traffic.
- Serving advertising (see section 4).
We do not sell your personal data, and we do not share it with third parties for purposes unrelated to running this service.
3. Third-party processors
The service relies on the following third parties. Your data is passed to them only as far as necessary, and is also governed by their privacy policies:
| Service | Purpose | Data involved |
|---|---|---|
| Google (OAuth 登入) | Sign-in | Your name, email address, profile picture URL |
| Google AdSense | Advertising | Cookies, IP address, browsing behaviour |
| Supabase | Account & session storage | Account id, email, sign-in timestamps |
| Anthropic (Claude API) | Question generation, Chilin replies | The topic/text/file you submit, chat messages |
| Upstash (Redis) | Rate limits, daily quotas, published quizzes | IP-keyed counters, account-keyed counters, published quiz content |
| Vercel | Hosting | Server logs (IP, timestamp, request path) |
4. Cookies and advertising
- Essential cookies keep you signed in. Blocking them makes sign-in impossible.
- Advertising cookies. This site uses Google AdSense. Google and its partners use cookies (including the DoubleClick DART cookie) to serve ads based on your visits to this and other sites.
You can opt out of personalised advertising:
5. Published quizzes
When you press Share, the entire quiz — questions, options, answers and explanations — is copied to our servers and given a public URL that anyone can open and that search engines may index. Do not publish quizzes containing personal or confidential information.
You can unpublish at any time from your library, which disables the URL. We cannot guarantee removal of copies already cached by search engines or saved by others.
6. Retention
- Account data: until you delete your account.
- Rate-limit counters: expire within 24 hours.
- Daily quota counters: reset at midnight Taipei time.
- Published quizzes: until you unpublish them.
- Local quizzes and attempts: on your device, under your control.
7. Your rights
Under Taiwan’s Personal Data Protection Act (Article 3) you may: enquire about and review your data, request a copy, request correction or completion, request that we stop collecting/processing/using it, and request deletion.
- Local data: delete it yourself at Settings → Local data → Clear. No request needed.
- Account data: email willson114478@gmail.com to request deletion; we will act within 30 days.
8. Minors
The service is aimed at students preparing for Taiwanese entrance examinations, so users are expected to include minors. If you are under 18, use the service only with the consent of your legal guardian; if you are under 13, please do not create an account (Google accounts also have minimum-age requirements). If we learn we have collected data from a child under 13 without guardian consent, we will delete it promptly. Guardians may contact willson114478@gmail.com.
9. Security
All connections use HTTPS. Authentication is handled by Supabase; we never see or store your password. API keys live only on the server and are never sent to the browser. That said, no method of transmission or storage over the internet is completely secure.
10. Changes
We may revise this policy from time to time. The “Last updated” date at the top will change, and material changes will be announced in the app.
11. Contact
For any privacy question, email: willson114478@gmail.com