Privacy Policy

• We ask for one adult email address and, per child, a nickname and grade level.
• We never ask for a child's full name, date of birth, school, address, photograph, or anything else identifying.
• Uploaded pages are deleted immediately after questions are generated — normally within seconds — and on every failure path too.
• We do not sell personal information, and we do not use your data or your child's to train AI models.
• There is no advertising in Questaroo and no advertising trackers.
• You can delete everything permanently from your account page, at any time, without asking us.

Nicholas Crkvenjas, trading as Questaroo, at 5872 168 Ave NW, Edmonton, AB, Canada, is the data controller. For privacy questions or to exercise any right below, write to privacy@questaroo.ca. We aim to reply within 7 days and will always respond within 30.

Your email address. To sign you in and to send account and billing emails. It is the only way we identify you. Lawful basis: performance of our contract with you.

A nickname and grade level for each child. The nickname is shown on screen so the app feels like theirs; the grade sets the level of the questions. You choose the nickname — we suggest you use a first name only, or something invented.

Photographs or PDFs of schoolwork. Held only while we generate questions from them, then deleted. See section 5.

Questions, answers and results. The generated questions, what your child answered, whether it was right, and the minutes they earned and spent. This is what makes the progress view possible.

Payment records. If you subscribe, we store a customer reference, a subscription reference, the plan, its status, and renewal date. We never see or store your card details — those go directly to Stripe.

Usage data. A record of things that happened — an account was created, a page was scanned, a practice set was finished. It is kept in our own database and is never sent to an analytics company. It records what happened, never what was on the page or what your child is called, and we do not use it to build a profile of any individual or to target advertising.

Questaroo is designed to be bought and set up by an adult. Children do not create accounts, do not enter an email address, and are never asked for personal information by the app.

By adding a child, you confirm you are their parent or guardian and you consent to us processing the limited information you have entered about them. You can withdraw that consent at any time by deleting the child or your account.

We deliberately collect a nickname rather than a full name so that the record is not readily identifying. Please do not type a full name, school, or any other detail into the nickname field, and do not upload a page that shows your child's full name, address or a photograph of them.

If you believe a child's information has been given to us without proper consent, write to privacy@questaroo.ca and we will delete it.

When you upload a page, it goes to private storage, is sent to our AI provider to be read, and is then deleted — including when the read fails, when the page is unreadable, and when an error occurs. We keep a record that a scan happened, and the questions produced, but not the image.

The image is sent to Anthropic for processing. It is not used to train their models, and it is subject to their retention terms for API traffic rather than being stored by us.

• Uploaded images: seconds. Deleted as soon as questions are generated or the attempt fails.
• Account, children, questions, results: until you delete them, or your account.
• Payment and tax records: retained by our payment provider for as long as tax and accounting law requires, typically 6–7 years, even after you delete your account. We cannot shorten this.
• Usage records: deleted with your account.

We do not sell personal information and we do not share it for advertising. We use these providers to run the service, each only for the purpose shown:

Some of these are outside Canada, which means your information may be processed in a country with different privacy laws and may be accessible to authorities there under their law. We use providers that offer contractual protections for international transfers.

We may also disclose information where the law requires it, or to establish or defend legal claims.

You can, at any time:

• See it. Everything we hold about you is visible in the app. Ask us at privacy@questaroo.ca for a copy in a portable format.
• Correct it. Nicknames, grades and reward settings are editable in the app.
• Delete it. Your account page deletes your account, every child, all questions, answers and balances, permanently and without needing to ask us.
• Withdraw consent for a child's information by deleting that child.
• Complain. To us first, please — but you may also complain to your data protection authority. In Canada that is the Office of the Privacy Commissioner.

Access to data is enforced at the database level, so one family's records cannot be read by another even if the application had a bug. Correct answers are held where the browser cannot reach them, so marking happens on our servers. Traffic is encrypted in transit. Uploads are stored in a private bucket for the seconds they exist.

No system is perfectly secure. If a breach affects you and creates a real risk of harm, we will tell you and the relevant authority as quickly as we can, and in any event within the time the law requires.

We use a small number of strictly necessary cookies to keep you signed in. We do not use advertising cookies or third-party trackers for marketing. Analytics is limited to how the product is used and is not used to build profiles of individuals or to target advertising.

If we change this policy in a way that materially affects you, we will email you at least 30 days before it takes effect. The date at the top always shows the current version.