Pop Quiz Pro

Privacy Policy

Back

1. Information We Collect

We may collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you ("Personal Information") when you use our Services. The Personal Information we collect falls into three categories: (1) information you provide to us, (2) information we collect through automated methods, and (3) information we collect from other sources.

How Study Content Is Stored and Synced

The primary copy of your personal study content (submitted text, generated quizzes, flashcards, notes, transcripts, audio recordings, and related materials) is stored on the device you created it on. Pop Quiz Pro keeps an archived backup copy of that content on our servers solely so that you can recover it if your device is lost, damaged, replaced, or restored. This backup copy is tied to your authenticated account and is used only for recovery — it is not the primary store of your content, and in day-to-day use the app reads and writes content directly on your device.

CoWork content is the one exception. Because CoWork Sessions are inherently multi-user, any content you post or share into a CoWork group — group sessions, shared flashcards and notes, chat messages, Board edits, activity feed entries, scheduled events, and shared voice transcripts — is stored on our servers (via Google Firebase Cloud Firestore) so that every member of that group can see it. CoWork content and personal content are kept separate in our storage.

Please exercise caution and do not submit sensitive personal information such as health or medical data, Social Security numbers, financial account details, passwords, or private information about other people to the Services. When you use AI-powered features, your submitted text, images, and audio are transmitted to a third-party artificial intelligence service (currently Google's Gemini API) for processing as described in Section 3.

Information You Provide to Us

We collect Personal Information that you provide directly to us in the following ways:

Account Registration: When you register for an account, we collect your display name, email address, and birth month and year. If you choose to sign in with your Google account or Apple account, the authentication is handled by Google or Apple respectively. We do not receive or store your Google or Apple account passwords. We receive only your name, email address, and confirmation that your identity was verified by the provider.

Onboarding Information: During account setup, we collect your birth month and year (required, used for age verification and age-based data-collection rules). You may also provide your grade level and expected graduation year.

Subscription Information: If you purchase a subscription, we collect information related to your subscription status, plan type, billing period, grace-period state, and purchase platform. Payment processing is handled entirely by Apple (via StoreKit for iOS/macOS purchases), Google (via Google Play Billing for Android purchases), or a PCI-compliant third-party payment processor for web purchases. Pop Quiz Pro does not receive your full credit card, debit card, or other payment instrument numbers. We verify your subscription status server-side against Apple and Google and store the verified state in your user record.

Study Content: When you create or upload study materials — whether typed text, imported documents, photographs of textbooks or whiteboards, audio recordings, or uploaded audio files — the working copy of that content lives on your device. Pop Quiz Pro writes an encrypted archived backup copy to our servers so that you can restore your content if your device is lost or replaced. Audio files are converted on your device before any upload to the AI provider; WAV files are not accepted because of file size. Optical character recognition on photographs runs on your device via Tesseract.js before any image text is sent to the AI.

CoWork Content: If you use CoWork Sessions (our collaborative study feature — see Section 8), additional Personal Information is collected and stored on our servers in Firestore for each group you host or join, because every member of the group needs to see it. This includes: the group name and avatar; your membership role (host, premium, or freemium) in each group; the sessions, flashcards, and notes shared to the group; chat messages you send through the group's Chat button; edits you make to the group Board; your scheduled events, RSVPs, and notification preferences; the activity feed entries recording your actions in the group; and, if you use Study Room Live Mode, the voice transcripts you choose to share with the group.

Voice and Audio Data: Pop Quiz Pro supports audio input in two ways. For lecture capture, you may record or upload audio in a personal session; that audio is transcribed via Gemini and the transcript becomes study content in your session. For Study Room Live Mode (a Premium CoWork feature in v3.1), you speak directly to Pop AI, and Google's Gemini Live API generates a text transcript in real time. At the end of the Live Mode session, you decide whether to share the transcript with your group, keep it privately in your CoWork notes for that group, or discard it. Discarded transcripts are not written to our database.

Support and Contact: If you contact us for support, we collect your name, email address, and any additional information you provide in your message.

Feedback: When you provide comments, reviews, or feedback about the Services, we collect the content of that feedback along with any identifying information you include. Feedback is not treated as confidential and may be used to improve the Services without attribution or compensation.

User Reports: If you use the report button on any piece of content, any chat message, or any other user inside a CoWork group, we collect the content of your report, a pointer to the reported material, and the identifiers of the reporter and the reported party so that we can review and act on the report (see Section 8).

Data Automatically Collected

We may use automated technologies to collect Personal Information when you use our Services:

Usage Analytics (users 16 and older only): We collect data about how you use the Services, including session frequency, session duration, features used, quizzes generated and completed, study performance scores (without the underlying study content), subjects studied, and CoWork engagement (groups joined, messages sent, Board edits, Live Mode sessions). This data is NOT collected for users under 16.

Device Information: We collect information about the device you use to access the Services, including device type, operating system, operating system version, app version, and screen size.

Tracking Technologies: On our website, we may use cookies and similar tracking technologies to collect information including IP addresses, browser type, pages visited, referring websites, and approximate geographic location (country-level only). You may disable certain tracking technologies through your browser settings, though doing so may affect your use of the Services.

Data from Other Sources

We may receive information about you from third-party authentication providers (Google, Apple) when you use their services to sign in. This information is limited to what is described in the Account Registration section above.

We also receive subscription lifecycle events from the Apple App Store (via App Store Server Notifications v2) and Google Play (via Google Real-Time Developer Notifications) — events such as renewals, refunds, billing grace periods, upgrades, and cancellations — so that your subscription state stays accurate.

2. Minimum Age and Age-Based Data Collection

Minimum age at launch: 13+ (with Kid Mode for under-13 users)

Pop Quiz Pro v3.0 is available to users aged 13 and older through the standard signup flow. During signup, we ask for your birth month and year. Users under 13 may use Pop Quiz Pro through Kid Mode, a parent-in-the-loop flow in which a parent email is collected at signup and every social interaction (CoWork invitations, messages, session joins) is held for per-event parental approval. Kid Mode is described in detail in Section 6 (Children's Information) of this Policy. Kid Mode accounts have access to all of the same features available to adult Freemium accounts, including CoWork Sessions, with parental approval gating every disclosure of the child's information to another user.

Users Ages 13-15

For users aged 13-15, we collect only the minimum information necessary to operate the account and provide the Services: display name, email address, birth month and year, authentication method, subscription status, the study content the user creates or shares, and CoWork data if the user participates in a group. We do not collect usage analytics, feature usage data, study performance scores, or subject data from users 13-15. Data from users 13-15 is never included in aggregated datasets or shared with third parties for commercial purposes.

Users Ages 16-17

When a user turns 16 (calculated from the birth month and year provided at registration), we begin collecting full usage analytics, feature usage data, study performance scores, subject data, and CoWork engagement data for new activity going forward. Prior activity from when the user was under 16 is not retroactively collected. Data from users ages 16-17 is not included in aggregated datasets made available to third parties.

Users 18 and Older

Full data collection applies. Data from adult users may be included in aggregated, de-identified datasets as described in this Policy.

Automatic Age Updates

We use an automated system to periodically check user ages based on birth month and year and update data collection practices accordingly. When a user reaches a qualifying age, data collection for new activity begins automatically without requiring action from the user.

Relationship to CoWork Access

The data-collection age thresholds above (minimal collection until 16, full collection at 16, aggregated inclusion at 18) are separate from the minimum age required to use CoWork features. All 13+ users, regardless of their data-collection band, may use CoWork under the rules described in Section 8 below.

3. How We Use Your Information

We use Personal Information for the following purposes:

Providing the Services: We use your account information to authenticate you, manage your account, sync your study content across devices, and provide access to the features included in your subscription tier.

AI Processing: When you use AI-powered features (quiz generation, flashcard creation, note generation, OCR understanding, audio transcription, Pop Tutor, the POP ai button inside CoWork chat, and Study Room Live Mode), the text, images, and audio you submit are transmitted to Google's Gemini API (including the Gemini Live API for voice features) for processing. This is necessary to deliver the core functionality of the Services. Google's handling of this data is governed by Google's privacy policies and terms of service. Every Pop AI call configures Gemini's built-in safety filters at the strictest available threshold for harassment, hate speech, sexually explicit content, and dangerous content.

CoWork Collaboration: We use your CoWork data (group memberships, chat messages, Board edits, activity feed entries, events, RSVPs, shared sessions, and shared voice transcripts) to synchronize collaborative study across the members of the groups you belong to. Sync runs through Firestore's real-time database. A group member's chat messages, Board edits, and shared sessions are visible to every other member of that group by design.

POP ai Context in CoWork Chat: When a Premium user taps the POP ai button in a CoWork chat, the client passes up to the last 20 chat messages from that group as context to the Pop AI call so the assistant can respond meaningfully. The resulting response is group-visible.

Content Safety: We use your submitted content to enforce our content safety model. Every image upload, generated study material, and Pop AI response is filtered by Gemini at the API level. Direct user-to-user text in CoWork Chat and Board edits is screened by a client-side profanity filter that runs on your device at send/save time. Text that the filter flags is written to the database with a flag marker so that recipients can choose to see a masked or unmasked rendering; the filter itself does not transmit a list of your words to any server outside Firestore.

Service Improvement: We use usage analytics and feature usage data (from users 16 and older) to understand how the Services are used, identify areas for improvement, fix technical issues, and develop new features.

Personalization: We use your birth month and year, grade level (if provided), and usage patterns to tailor the experience to your educational level and preferences.

Account Administration: We use your information to manage subscriptions, verify receipts, process subscription lifecycle events, send service-related communications (such as account confirmations, subscription notices, and security alerts), and respond to support requests.

Business Analytics: We use aggregated and de-identified data from adult users (18 and older) to understand demographics, study trends, and market demand. This data helps us make informed decisions about the Services and may be shared with third parties as described in this Policy.

Trust, Safety, and Enforcement: We use the information associated with user reports, content flagged by the profanity filter, content blocked by Gemini's safety filters, and any record of blocks, strikes, appeals, or CoWork bans to review reports, take appropriate action under our Terms of Service, and maintain the integrity of the Services. See Section 8 for details.

Email Communications: We use your email address to send service-related and transactional messages, including account notifications, subscription updates, security notices, CoWork invite notifications, and parental consent flows for Kid Mode. We do not currently send promotional or marketing emails. If we decide to do so in the future, we will provide notice and you may opt out at any time using the unsubscribe link provided in such emails.

Legal Protection and Mandatory Reporting: We may use your information to protect our legal rights or interests, enforce these Terms, respond to legal requests, prevent fraud or abuse of the Services, or comply with mandatory reporting obligations. In particular, as described in Section 8, if Pop Quiz Pro becomes aware of apparent child sexual abuse material (CSAM) on the Services, we are required under 18 USC 2258A to report it to the National Center for Missing and Exploited Children (NCMEC), including associated account identifiers, timestamps, and content references.

Aggregated and De-Identified Data: We may process Personal Information from adult users (18 and older) to create de-identified and aggregated data that cannot reasonably be used to identify any individual. Such de-identified and aggregated data is not subject to this Privacy Policy, and Pop Quiz Pro is the sole and exclusive owner of such data. This data may include aggregated study trends, subject popularity, feature usage patterns, device and platform statistics, and educational demographic trends.

Tracking Technologies

On our website, we may use the following technologies:

Google Analytics: We use Google Analytics to collect and analyze information about how visitors use our Site.

Google Sign-In: If you use Google Sign-In, cookies and APIs provided by Google facilitate the authentication process. Information shared with Google through this process is subject to Google's privacy policy.

Apple Sign-In: If you use Apple Sign-In, authentication is handled by Apple. Information shared with Apple is subject to Apple's privacy policy.

Firebase: We use Google Firebase for authentication, Firestore cloud database, Cloud Functions, Cloud Storage, Crashlytics, and Firebase App Check for bot prevention. Firebase's handling of data is governed by Google's privacy policies and Firebase's terms of service.

4. Retention of Personal Information

We retain Personal Information for as long as necessary to fulfill the purposes described in this Policy, or as required by law. We take reasonable steps to delete Personal Information when: (1) we have a legal obligation to do so, (2) we no longer have a purpose for retaining the information, or (3) you request deletion of your data.

Account Deletion. Pop Quiz Pro provides an in-app Delete Account flow that permanently removes your account and the Personal Information associated with it. When you delete your account, the app clears its on-device data store, deletes the archived recovery backup held on our servers, and removes or anonymizes your CoWork memberships, authored chat messages, Board edits, and voice transcripts in accordance with the relevant group's retention needs. Certain information may be retained in our backup systems for a limited period or as required by law, including: (a) records required to comply with mandatory reporting obligations (Section 3), (b) records associated with confirmed Terms of Service violations, including strike ladder state, retained for enforcement purposes, and (c) subscription and billing records required by tax and accounting law.

CoWork Version History. Each collaborative session document and Board retains up to the last 20 versions of content. Activity feeds retain up to the last 200 events per group. Older entries are automatically pruned.

Chat Retention. CoWork chat messages are persistent for the life of the group in v3.0. We may adopt automatic chat pruning in a future version if storage costs require it; any such change will be reflected in this Policy.

Voice Transcript Retention. Transcripts you choose to share with a group live for the life of the group. Transcripts you keep private live in your personal CoWork notes for that group, accessible only to you. Transcripts you discard are never written to our database.

Downgrade Archive. When you cancel a Premium subscription, the sessions above your Freemium allowance are flagged as archived rather than deleted, so that reactivating Premium automatically restores full access. Archived data is not automatically deleted. Deleting your account deletes archived data along with active data.

5. Disclosure of Personal Information

We may disclose Personal Information to the following categories of recipients:

Third-Party Service Providers: We disclose Personal Information to service providers that support our Services, including Google Firebase (authentication, Firestore database, Cloud Functions, Cloud Storage, Crashlytics, App Check) and Google (Gemini API and Gemini Live API for AI processing). We take commercially reasonable steps to ensure our service providers maintain appropriate protections for Personal Information.

Other CoWork Group Members: If you join or host a CoWork group, your display name, avatar, membership role, chat messages, Board edits, shared sessions, activity feed entries, RSVPs, and shared voice transcripts are visible to every other member of that group. Email addresses are visible only to the group host. If you block another user, you and the blocked user are removed from each other's visibility in shared group content.

AI Processing Provider: When you use AI-powered features, the text, images, and audio you submit are transmitted to Google's Gemini API and, for Study Room Live Mode, the Gemini Live API, for processing. This transmission is necessary to provide the Services. Google's handling of this data is governed by its own privacy policies and terms.

Apple and Google (Payment Processing): For in-app subscriptions, payment data is handled directly by Apple or Google. Pop Quiz Pro does not receive your full payment details from these providers.

NCMEC and Law Enforcement (Mandatory Reporting): If Pop Quiz Pro becomes aware of apparent CSAM on the Services, federal law (18 USC 2258A) requires us to report it to NCMEC via the CyberTipline, preserving the associated content, account identifiers, and metadata for the period required by law. Reports may also be shared with law enforcement. This obligation applies regardless of the user's age or subscription status.

Educational Institutions: We may disclose account information to educational institutions with which you are affiliated if required to enforce our Terms of Service or Honor Code, or in response to a valid institutional inquiry regarding academic integrity.

Government and Law Enforcement: We will cooperate with law enforcement and governmental agencies, and may disclose Personal Information: (i) if we believe in good faith we are legally required to do so, (ii) when advised by legal counsel, (iii) to protect the rights, safety, or property of Pop Quiz Pro or others, or (iv) as otherwise required by law.

Professional Advisors: We may disclose Personal Information to our attorneys, accountants, and other professional advisors in their capacity as advisors.

Successor Entities: In the event of a merger, acquisition, bankruptcy, reorganization, or sale of assets, your Personal Information may be transferred to the acquiring or successor entity.

Aggregated Data Recipients: We may share aggregated, de-identified data derived from adult users (18 and older) with third parties for research, analytics, or commercial purposes. This data cannot reasonably be used to identify any individual.

With Your Consent: We may disclose Personal Information to third parties when you explicitly request or consent to such disclosure.

6. Children's Information

Pop Quiz Pro v3.0 supports users under 13 through a dedicated Kid Mode flow that complies with the Children's Online Privacy Protection Act ("COPPA"). Children 13 and older use the standard signup flow. This Section describes how Personal Information is handled for users in each age band.

Users Ages 13-15: We collect only the minimum Personal Information necessary to operate the account and provide the Services (display name, email, birth month and year, authentication method, subscription status, study content, and CoWork content if the user uses CoWork). We do not collect usage analytics or behavioral analytics from users 13-15 and do not include their data in aggregated datasets or share it for commercial purposes.

Kid Mode (users under 13)

Kid Mode is the experience Pop Quiz Pro provides to users whose signup information indicates they are under 13 years old. Kid Mode is available in v3.0 at launch. This section describes every aspect of how a Kid Mode account is created, what data is collected, how parental consent is obtained and renewed, and what safeguards are in place.

What we collect at Kid Mode signup. A Kid Mode account is created with four pieces of information only: a username chosen by the child (a non-identifying display handle), the child's birth month and year (used exclusively to calculate the under-13 age flag and to automatically transition the account on the child's 13th birthday), the email address of the child's parent or legal guardian, and the phone number of the child's parent or legal guardian. The parent phone number is used exclusively as a secondary contact channel for reaching the parent if the parent email becomes undeliverable (see "Parent email recovery" below); it is not used for marketing, promotional, or advertising purposes. We do not collect the child's real first or last name, school, location, or any other directly identifying Personal Information at signup. If the child authenticates via Sign in with Apple or Google Sign-in, any real-name fields returned by the identity provider are discarded server-side before persistence; only the stable authentication identifier and the provider's email (used for authentication only) are retained.

Why we can collect parent contact information at signup without prior consent. Under 16 CFR §312.5(c)(2)-(3), an operator is permitted to collect a parent's online contact information from a child for the sole purpose of obtaining verifiable parental consent for subsequent activities. The parent email and phone number collected at Kid Mode signup are used only to send parental approval requests, revocation confirmations, delivery-failure recovery notices, and safety notifications described below. They are not used for marketing, product announcements, or any other purpose until and unless the parent separately opts in after Kid Mode is active.

Implicit platform-level consent. Pop Quiz Pro is distributed exclusively through the Apple App Store and the Google Play Store. A minor cannot create an Apple ID or Google account independently — both platforms require an adult account holder. The act of downloading Pop Quiz Pro to a device therefore implies an adult account holder authorized the installation at the platform level. Combined with the per-interaction parental approval mechanism described below, this gives Pop Quiz Pro a documented parental consent chain for every discrete data disclosure.

Full feature access in Kid Mode. A Kid Mode account, once created, has immediate access to every feature available to an adult Freemium account, including personal study sessions, flashcards, quizzes, POP ai chat inside the child's own sessions, OCR, audio capture, document uploads, PDF export, and CoWork Sessions. Kid Mode is not a feature-restricted tier; it is a parent-in-the-loop tier.

Per-interaction parental approval (verifiable parental consent). CoWork Sessions involve the disclosure of the child's display name and study content to another user, which is the point at which Personal Information first leaves the child's private account. Pop Quiz Pro therefore places every discrete social interaction under per-event parental approval. Specifically:

Each approval click constitutes a discrete verifiable parental consent event under 16 CFR §312.5(b). The click originates from the parent's email address, produces a server-side audit log entry with the parent's identifying token, the child's account, the approved contact, the approval window, and a timestamp, and authorizes a narrow, time-bounded disclosure.

Automatic parental notification on approved-contact suspensions. If a user whom the parent has previously approved for CoWork interaction with the child is suspended or banned from Pop Quiz Pro for a policy violation during the approval window, Pop Quiz Pro automatically emails the parent to inform them of the suspension, the reason (at the category level), the approved contact's remaining approval window, and a one-click revocation link. The parent may revoke the approval immediately or keep it in place.

Parental revocation by email. A parent who wishes to review or revoke existing approvals sends an email from the registered parent email address to Pop Quiz Pro with the subject line "revoke" (for a listing) or "revoke all" (to revoke every active approval at once). Pop Quiz Pro replies with an enumeration of all currently-active approvals on that parent's Kid Mode accounts, each with its remaining time and a one-click revocation token. Revocation takes effect immediately upon the parent clicking the relevant token.

Quiet mode (opt-in). A parent may opt in to a reduced-email quiet mode from the footer of any approval email. Quiet mode sends a parental approval email only for a first-time contact between the Kid Mode account and another user. Subsequent invitations from the same already-approved contact during an active approval window do not re-trigger an email. Quiet mode is off by default; the parent must opt in to enable it.

Parent email recovery. If the parent email on file begins returning hard bounces, Pop Quiz Pro flags the Kid Mode account as "parent email unverified." The child's access to the rest of the app is unaffected: solo study features continue to work normally, and any CoWork contacts the parent has already approved continue to interact for the full duration of their existing approval windows. Documents and study guides already received through CoWork remain fully usable; the child can continue to read, study from, and export any content already delivered to their account. Only new CoWork communication actions that would require a new parental approval — a new outbound invitation, a new inbound invitation from a not-yet-approved contact, a new direct message outside an active approval window — are held until the parent email is re-verified. The block notification appears only inside the CoWork ChatBox; the rest of the app is unaffected. Recovery proceeds through three steps: (1) Pop Quiz Pro sends an SMS to the parent phone number on file informing the parent that their email has bounced and providing a link to enter a new email address at popquizpro.ai/parent/update-email; (2) if the parent clicks the link and submits a new email, the new address is immediately bound to the child's account, the "parent email unverified" flag is cleared, and any held CoWork approval requests are re-sent to the new address; (3) if the parent does not respond to the SMS within seven days, the child is shown a friendly message asking their parent to email parent@popquizpro.ai from the new email address with the child's username and birth month so that Pop Quiz Pro can verify the parent's identity and rebind the new email manually. Until recovery is completed, new CoWork group actions requiring a new parental approval remain held; solo features and previously-approved CoWork interactions are not affected.

Automatic age-up on the child's 13th birthday. Pop Quiz Pro uses the birth month and year collected at signup to automatically transition the account out of Kid Mode on the child's 13th birthday. At that time, the account is prompted on next login to add a display name, confirm the account email, and review the standard (13+) Privacy Policy and Terms. Until the child completes this transition, the account remains in Kid Mode with all Kid Mode protections and per-interaction parental approvals in place.

Data handling for under-13 users. Personal Information collected from a child while they are under 13 is used only to operate the Kid Mode experience and fulfill the Services. It is not sold, not shared with third parties for commercial purposes, not used for behavioral advertising, and not included in any aggregated dataset — now or after the child turns 13. All under-13 data is anonymized where possible and compartmentalized from adult account data. Pop Quiz Pro's privacy posture for under-13 users is deliberately more protective than the posture of major consumer social platforms.

Closed system. Pop Quiz Pro does not expose a public directory, search, or discovery function for any user. Kid Mode accounts in particular cannot be found by searching, cannot be invited by strangers without the parent's explicit per-contact approval, and cannot appear in any public listing. CoWork Sessions are visible only to users whose participation the parent has separately approved.

Parental rights under COPPA. A parent may review the Personal Information collected from their child, refuse to permit its further collection or use, and request its deletion at any time. To exercise these rights, the parent contacts Pop Quiz Pro at info@popquizpro.ai from the registered parent email address, and we will act on the request within the time required by COPPA.

If a parent or legal guardian believes their child's Personal Information has been collected or used in a manner inconsistent with this Policy, please contact us at info@popquizpro.ai and we will make commercially reasonable efforts to address the concern, including deleting the account if requested.

7. Data Security

We use commercially reasonable technical and organizational measures to protect Personal Information against loss, misuse, unauthorized access, and alteration. These measures include: encryption of data in transit (TLS) and at rest (Google's managed encryption for Firestore and Cloud Storage), secure authentication through Firebase Auth, server-side subscription receipt validation through Apple's App Store Server API and Google's Play Developer API, Firestore security rules that enforce membership and permission boundaries at the database layer, and Firebase App Check to deter automated bot signups and API abuse.

YOU UNDERSTAND THAT NO DATA TRANSMISSION OVER THE INTERNET OR METHOD OF ELECTRONIC STORAGE CAN BE GUARANTEED TO BE 100% SECURE. WHILE WE STRIVE TO PROTECT PERSONAL INFORMATION, WE CANNOT GUARANTEE ITS ABSOLUTE SECURITY AND YOU PROVIDE PERSONAL INFORMATION AT YOUR OWN RISK.

8. CoWork Sessions — Group Data, Safety, and Enforcement

CoWork Sessions is Pop Quiz Pro's collaborative study feature. When you use CoWork, Pop Quiz Pro handles several additional data categories and safety processes described in this section.

8.1 What CoWork Data Is Collected

For each CoWork group you host or join, Pop Quiz Pro stores in Firestore: the group name, avatar, and invite code; the list of members and each member's role (host, premium, or freemium); the sessions, flashcards, notes, and AI-generated materials shared to the group; version history of shared materials (up to 20 most recent versions); chat messages sent via the group's Chat button, including a flag indicating whether the client's profanity filter matched; Board edits and any flagged regions; the activity feed (up to 200 most recent events); scheduled events, RSVPs, and notification preferences; and, for Study Room Live Mode sessions you choose to share, the resulting voice transcripts.

A denormalized pointer to each group you belong to is also stored under your user record so that the app can quickly list your groups.

8.2 Who Can See What in a Group

Sessions, flashcards, notes, chat messages, Board edits, activity feed entries, scheduled events, and shared voice transcripts within a group are visible to every member of that group. This is the core design of a collaborative study space.

Email addresses of group members are visible only to the group host. Non-host members see display names and avatars only. If two members share a display name, a short stable identifier may be shown alongside to disambiguate them.

Freemium members in a group can read all group content but cannot write — they cannot post chat messages, edit the Board, or contribute session content. Study materials received through CoWork (such as study guides shared by other members) can be used by Freemium users, but each one occupies a slot in the Freemium user's 3-session active cap. If all 3 slots are occupied, the user must delete or archive an existing session before they can use a new study guide received through CoWork. See Section 5 of the Terms of Service for the full soft-archive model. Writing to a group requires a Premium subscription. Hosting a group requires a Premium subscription. Membership and permission rules are enforced at the Firestore security rule level.

Group material never crosses into personal sessions, and personal sessions never cross into groups, unless you explicitly copy content between them.

8.3 Invite Model and Contact Controls

CoWork groups are invite-only. There is no public directory, group search, join-by-code lookup, user search, friend suggestions, or direct messaging feature. Invites can be sent only by a group host and only to an email address the host already knows. A block button on every member card lets you remove yourself from mutual visibility with another user; a report button on every member card and every piece of content lets you escalate to Pop Quiz Pro for review.

8.4 Content Safety Model

Pop Quiz Pro uses a two-part content safety model for CoWork:

Pop AI as the single firewall for images and generated content. Every image you upload and every piece of AI-generated study material passes through Google's Gemini API with the strictest available safety thresholds on harassment, hate speech, sexually explicit content, and dangerous content. If Gemini blocks a submission, the content is not saved and the user sees a neutral error. This covers all image uploads, all generated study material, POP ai button responses inside CoWork chat, Pop Tutor responses, and Study Room Live Mode voice transcripts.

Client-side profanity filter on direct Chat and Board text. CoWork chat messages sent with the Chat button and Board edits do not pass through Gemini. A client-side profanity filter screens these texts on the sending device and flags matches so that receiving devices can render the flagged text masked until tapped. The filter has a user setting (strict, relaxed, or off) and a host-level minimum strictness control. Under-18 accounts default to strict and see a warning before weakening the setting.

8.5 CSAM Handling and NCMEC Reporting

Apps that accept user-uploaded images are legally required to report apparent child sexual abuse material (CSAM) to the National Center for Missing and Exploited Children (NCMEC) under 18 USC 2258A. Pop Quiz Pro's posture at v3.0 is to rely on Gemini's built-in safety filters as the primary gate; every image upload flows through Gemini before anything is saved or shared. If any image trips the CSAM-relevant Gemini filters, the upload is rejected, the account is frozen pending review, evidence is preserved per the federal retention requirements, and a CyberTipline report is filed. A post-launch upgrade will add PhotoDNA hash matching as defense in depth.

8.6 User Reports and the CoWork-Only Strike Ladder

You can report any message, Board edit, shared session, or other user from within a CoWork group. Reports write to a secure queue in Firestore and trigger a notification to the Pop Quiz Pro review team.

Enforcement is handled by a four-step CoWork-only strike ladder. The ladder restricts CoWork access only; solo study features, Pop Tutor in personal sessions, and all non-CoWork app functionality remain available at every step, including after permanent CoWork loss.

Strikes 1-3 decay after 12 months of clean record. Strike 4 does not decay. Severe violations (CSAM, illegal content, targeted harassment, credible threats) skip the ladder and go directly to full account suspension plus appropriate legal reporting. Ban state is enforced at the Firestore security rule level so that it cannot be bypassed by a modified client. Pop Quiz Pro retains strike history, appeal records, and related evidence for enforcement purposes.

8.7 Voice Transcripts in Study Room Live Mode (v3.1)

Study Room Live Mode, planned for a v3.1 release, lets a Premium user speak directly with Pop AI via Google's Gemini Live API. Gemini Live produces a text transcript of the conversation in real time. At the end of each session, you choose one of three dispositions:

Other users in the group do not hear the live audio in v3.1; multi-user voice is not implemented. Voice transcripts are subject to the same Gemini safety filters as all other Pop AI content.

8.8 DMCA and Copyright Complaints

Because CoWork lets users post study content, chat, and Board edits visible to other group members, the Services function as a user-generated content host for the purposes of the Digital Millennium Copyright Act. Pop Quiz Pro maintains a designated agent for receiving notices of claimed copyright infringement under 17 USC 512(c). To submit a DMCA notice, contact:

DMCA Designated Agent

Pop Quiz Pro — DMCA Agent

Email: info@popquizpro.ai

Formal registration of the designated agent with the U.S. Copyright Office is in progress as a pre-launch step and will be reflected in this Policy when complete. Valid DMCA notices must include the elements required by 17 USC 512(c)(3), including a description of the copyrighted work, a description of the allegedly infringing material, contact information for the complainant, a good-faith statement, and a statement under penalty of perjury that the complainant is authorized to act. Upon receiving a valid notice, Pop Quiz Pro will act expeditiously to remove or disable access to the allegedly infringing material and notify the affected user, who may submit a counter-notice under 17 USC 512(g).

9. Data Storage, Sync, and Backups

Pop Quiz Pro uses a device-first data storage model. The primary copy of your personal content lives on your device, and we keep an archived backup copy on our servers so that you can recover your content if your device is lost. Multi-user CoWork content is the only category that is server-primary.

On Your Device (Primary): Personal sessions, flashcards, quizzes, notes, personal POP ai conversations, on-device audio files, and imported documents are stored on the device you use them on, using the platform's secure local storage (iOS/macOS protected data, Android internal storage, or equivalent). Day-to-day reading and writing happens against this on-device store.

Archived Backup for Recovery (Server): So that you do not lose your content if your device is lost, damaged, replaced, or restored, Pop Quiz Pro keeps a compressed, encrypted archived backup copy of your personal content on our servers, tied to your authenticated account. The backup is used only for recovery. You can restore from it when you sign into Pop Quiz Pro on a new device, or if you manually choose to restore after a data loss. Deleting personal content on your device propagates to the archived backup on the next sync so that deleted content does not linger. Premium subscribers additionally have the option to save a compressed backup file to their own iCloud Drive (Apple devices) or Google Drive (Android devices), retaining up to the last three backup versions for version history; this is in addition to, not a replacement for, the recovery backup we keep on our servers.

CoWork Content (Server-Primary): CoWork group sessions, chat messages, Board edits, activity feed entries, scheduled events, RSVPs, and shared voice transcripts are stored on our servers in Google Firebase Cloud Firestore ("Firestore"), on servers located in the United States. This is the only content category for which the server holds the primary copy, and it is necessary because every member of a CoWork group needs to see the same data.

Real-Time CoWork Sync. For CoWork content only, the app uses Firestore's real-time listeners to keep data current across the members of each group. A sync-on-save model writes discrete updates rather than per-keystroke streams; each save also appends to a version history and an activity feed. Personal content is not synced in real time to the server — only the archived recovery backup is updated.

Disaster Recovery. Pop Quiz Pro maintains a daily scheduled export of the Firestore database (CoWork content plus archived personal backups) to Cloud Storage for disaster-recovery and billing-dispute purposes, with a bounded retention window.

Account Deletion. When you delete your account through the in-app Delete Account flow, Pop Quiz Pro deletes (a) the content stored on your device by signing you out and clearing the app's local store, (b) the archived backup copy held on our servers, and (c) your CoWork content subject to the retention exceptions described in Section 4.

10. Access from Outside the United States

If you access the Services from outside the United States, please be aware that your Personal Information may be transferred to, stored in, and processed in the United States, which may have different data protection laws than your country of residence. Pop Quiz Pro's processing of Personal Information under the Google Firebase and Google Cloud Data Processing Addenda is intended to support transfers consistent with applicable cross-border data transfer requirements. International availability of the Services and additional regional protections will be reviewed before any international launch.

11. Third-Party Websites and Services

The Services may contain links to websites or services not operated by Pop Quiz Pro. We are not responsible for the privacy practices of third-party websites or services. This Policy does not apply to any third-party websites or services, and we encourage you to review the privacy policies of any third-party services you access.

12. Do Not Track Signals

At this time, our Services do not respond to "Do Not Track" browser signals, as there is no industry-wide standard for how to interpret these signals.

State Privacy Exhibit

A. Notice to California Consumers

In this Section, capitalized terms not defined in this Policy have the meanings set forth in the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act, and including its implementing regulations (the "CCPA").

Categories of Personal Information Collected:

In the last twelve (12) months, we have collected the following categories of Personal Information:

Categories of Sources: As described in Section 1 of this Policy.

Business Purposes for Collection: As described in Section 3 of this Policy, including providing the Services, AI processing, CoWork collaboration, content safety, service improvement, personalization, administration, analytics, trust and safety enforcement, mandatory reporting, and legal protection.

Disclosure for Business Purposes: In the last 12 months, we have disclosed Personal Information to the categories of service providers described in Section 5 of this Policy, including Google (Firebase, Firestore, Cloud Functions, Cloud Storage, Gemini API, Gemini Live API), Apple, other CoWork group members as an inherent function of the collaborative product, NCMEC (where mandatory reporting obligations applied), and professional advisors.

Sale or Sharing of Personal Information: We may use aggregated, de-identified data derived from adult users (18+) for commercial purposes as described in this Policy. We do not sell or share Personal Information of users under 18. We do not have actual knowledge of selling or sharing Personal Information of individuals under 16.

California Privacy Rights:

California consumers have the following rights:

How to Exercise Your Rights: To exercise your California privacy rights, contact us at info@popquizpro.ai. We will verify your identity before processing your request and may require additional information to do so.

Authorized Agents: You may designate an authorized agent to submit requests on your behalf. We will require proof of written authorization and verification of your identity.

B. Notice to Maryland and Montana Consumers

In this Section, capitalized terms not defined in this Policy have the meanings set forth in the Maryland Online Data Privacy Act ("MODPA") and Montana Consumer Data Privacy Act ("MTCDPA").

Maryland Consumer Rights:

Montana Consumer Rights:

How to Exercise Your Rights: To exercise your state privacy rights, contact us at info@popquizpro.ai. We will verify your identity and respond within the timeframes required by applicable law. If we deny your request, you may appeal by contacting us at the same email address.

We will not discriminate against you for exercising any of your state privacy rights.

13. Contact Us

If you have questions or concerns regarding this Privacy Policy, contact us at:

Email: info@popquizpro.ai

Website: https://popquizpro.ai/support.html

For DMCA notices, use the designated agent contact in Section 8.8.