Privacy Policy

Last updated: 2026-09-24

AI Solve Quiz ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights. By using the AI Solve Quiz Chrome extension or website, you agree to this policy.

1. What We Collect

1.1 Account Information

When you sign in with Google, we receive and store your Google account ID, email address, display name, and profile picture URL. We also record the IP address used at sign-up for abuse prevention.

1.2 Usage Data

We log metadata about your AI explanation requests: the question type (e.g., multiple-choice), which AI model was used, token counts, response latency, and whether the request succeeded. Our audit log also retains a short, truncated copy of the answer so a repeated request can be served without charging you twice.

1.3 Saved Questions and Sessions

To provide your question history and the optional sharing feature, we save the questions you solve into sessions tied to your account. For each solved question we store the cropped question image, the answer, the explanation, the confidence score, and related metadata (subject, question type, output language, model, and timestamp). The cropped image is stored as an object in Cloudflare R2; the remaining fields are stored in our database.

These records are private to your account, with two exceptions. The first is a share link: if you create one for a session, anyone who has that link can view that session's questions, images, answers, and explanations without signing in, until you revoke the link. The second is the small, hand-picked set of de-identified question images we publish in our own marketing, described in Promotional Use of Question Images.

You can delete an individual session — or your entire account — at any time; doing so permanently removes the stored images and question content (see Account and Data Deletion). An image we have already published under section 2.1 is the one thing a deletion does not reach, because the published copy is a separate de-identified file that is no longer linked to your account. Section 2.1 explains how to have it taken down.

1.4 Screen Capture — What Leaves Your Device

AI Solve Quiz only captures the screen region you explicitly select. That region is cropped on your device, and only the resulting image is sent to our backend — your full screen, your other tabs, and the rest of the page are never captured or transmitted. The cropped image is forwarded to Google Gemini to generate your answer and is saved to your account as described in section 1.3.

1.5 Image Generation Prompts

When you generate an image, the text prompt you write is sent to our servers and to the model that produces the picture. Prompts are screened for prohibited content before generation. We store the prompt with the resulting image record so you can see your own history and so we can act on a report.

The generated image itself is stored on your device. Our servers keep a copy only long enough to deliver it — about 48 hours — and then delete the file. After that, the copy on your phone is the only one, and deleting the app deletes it.

1.6 Billing Data

We store records of your PayPal subscription and add-on purchase transactions (amounts, dates, PayPal IDs) for billing and credit management. We do not store payment card details; all payment processing is handled by PayPal.

1.7 Credit Ledger

We maintain an audit ledger of credit transactions (grants, consumption, refunds). These records contain no question content.

1.8 Mobile Device & Advertising Identifiers

When you use the AI Solve Quiz mobile application, Google Mobile Ads (AdMob) may collect mobile device identifiers (such as Apple's Identifier for Advertisers — IDFA, or Google's Advertising ID — GAID), IP address, coarse location data, and technical device specifications for ad delivery, frequency capping, anti-fraud, and performance metrics.

1.9 Meeting Recordings

If you record a meeting in the mobile app, or import an existing audio file, the recording is uploaded to our storage and sent to a speech-to-text provider to be turned into a transcript. That transcript is then sent to a language model to produce the summary and action items. Both providers are named in section 3.

A recording may contain other people's voices. You are responsible for having whatever consent the law where you are requires before recording a conversation, and that obligation is yours rather than ours — we have no way to ask the other people in the room.

The audio file is deleted 30 days after it is uploaded. The transcript, the summary and the meeting record are kept until you delete the meeting or your account, up to 180 days. Deleting a meeting removes the audio, the transcript and the summary.

2. How We Use Your Data

• To authenticate you and manage your account.
• To process AI explanation requests and deduct the appropriate credits.
• To manage billing and subscriptions via PayPal.
• To display advertisements and support free service tiers via Google Mobile Ads (AdMob).
• To detect and prevent abuse (e.g., fraudulent credit farming).
• To monitor system health and diagnose errors via Sentry.
• To show what the service can actually handle, by publishing a small set of de-identified question images — see section 2.1.

2.1 Promotional Use of Question Images

We publish a small, hand-picked set of cropped question images on our website and in other marketing materials, to show the kinds of questions the service handles. Some of these appear on our homepage.

We publish the question image only. We never publish your answer, your explanation, your session, your email address, your display name, or any other account data, and we never attribute an image to the person who submitted it.

Before an image is published we review it and reject it if it shows a face, a handwritten name, a signature, a school letterhead, a username, or any other identifying mark. Every published file is re-encoded so that its embedded metadata is stripped, including any GPS coordinates your phone camera recorded.

Because images published this way are de-identified, they are not intended to be personal data. Where the law of your jurisdiction nonetheless treats them as personal data, we rely on our legitimate interest in demonstrating the service, and you may object at any time.

How to have a published image removed: email [email protected] with the image or a description of it. We will remove it within 30 days. You do not need to give a reason, and it will not affect your account, your credits, or your subscription.

3. Sub-Processors

We share data with the following third-party sub-processors to operate the service:

• Google — AdMob / Mobile Ads (USA): serves advertisements within our mobile applications. AdMob may collect and process device identifiers (such as Apple IDFA or Android Advertising ID), IP address, coarse location data, and ad interaction metrics to deliver personalized or non-personalized ads, perform frequency capping, prevent ad fraud, and provide analytics. See Google's Advertising Privacy Policy.
• Google — Gemini API (USA): receives the cropped screenshot image of your selected question region to generate the answer and explanation. The image is sent inline for processing. (AI Solve Quiz separately stores the image and result for your history, as described in section 1.3.) It also receives the transcript of a meeting you summarise — the words, not the audio — in order to write the summary and action items described in section 1.9. See Google's Privacy Policy.
• Groq — Whisper speech-to-text (USA): receives the audio of a meeting you ask us to summarise in standard mode, and returns the transcript. See Groq's Privacy Policy.
• Deepgram (USA): receives the audio of a meeting you ask us to summarise in detailed mode — the mode that labels who spoke — and returns the transcript with those labels. See Deepgram's Privacy Policy.
• Cloudflare — R2 object storage (USA): stores the cropped question images for your saved sessions and shared links. Images in a shared session are accessible to anyone with the share link until you revoke it; every image we store for you here is deleted when you delete the session or your account. A de-identified copy previously published under section 2.1 is held outside R2 and is taken down on request instead.
• Google — Sign-In (USA): provides authentication via Google OAuth 2.0. We receive your Google account ID, email, display name, and picture. See Google's Privacy Policy.
• PayPal (USA): processes all payments (PRO subscriptions and add-on packs). We share your email and transaction amounts with PayPal to initiate and manage payments. See PayPal's Privacy Policy.
• Sentry (USA): receives error and performance events from our backend for error monitoring and diagnostics. We configure Sentry to strip request bodies, question images and text, and any secrets before transmission. Error events contain no question content.

4. Data Retention

• Account data: retained until you delete your account.
• Saved sessions, questions, and their stored images: retained until you delete the session or your account, at which point the images and question content are permanently removed.
• De-identified question images published under section 2.1: retained for as long as the marketing material they appear in is published, or until you ask us to remove the image, whichever comes first. Account deletion does not by itself retract them.
• Credit ledger and payment records: retained in de-identified form even after account deletion for financial record-keeping.
• Image-generation prompts and their records: retained for 180 days, or until you delete the image from your history.
• Meeting audio: deleted 30 days after upload, whether or not you have summarised it.
• Meeting transcripts, summaries and records: retained until you delete the meeting or your account, and in any case no longer than 180 days.
• Generated image files on our servers: deleted about 48 hours after they are produced. Your device keeps the only remaining copy. The one exception is an image that has been reported: it is kept until a human has reviewed the report, because deleting it would destroy the thing we were asked to look at.
• Session tokens: expire after 30 days (refresh tokens have a 30-day rolling TTL).
• Webhook event records: automatically deleted after approximately 90 days.
• Rate-limit records: automatically deleted after each window expires.

5. Cookies and Storage

The AI Solve Quiz Chrome extension stores your session tokens in Chrome's local extension storage (not browser cookies). The account portal (app.aisolvequiz.com) uses session storage in your browser. We do not use tracking cookies. See our Cookie Policy for more detail.

6. Your Rights and Ad Choice Preferences

Depending on your jurisdiction, you may have rights to access, correct, or delete the personal data we hold about you.

European Economic Area (EEA), UK, and Switzerland: Users in these regions are presented with a Consent Form powered by Google's User Messaging Platform (UMP) upon opening the mobile application. You can manage or revoke your ad personalization consent at any time through the in-app privacy settings.

iOS App Tracking Transparency (ATT): On iOS 14.5 and later, we request your permission before tracking or accessing your device's IDFA for personalized advertising. If you decline, you will continue to see non-personalized contextual ads.

7. Account and Data Deletion

You can delete your AI Solve Quiz account at any time from the account portal (app.aisolvequiz.com → Account → Delete Account).

Deleting your account will automatically cancel any active PayPal PRO subscription before your data is anonymized. This prevents future billing charges. You will not be charged again after deletion. Credits already granted are not refunded; any remaining credits are lost upon deletion.

Upon deletion, we permanently remove your saved sessions, solved questions, and their stored images, and we anonymize your account: your email address, profile picture, sign-up IP, and Google account ID are cleared. A de-identified tombstone record is retained for fraud prevention. Credit ledger and payment records are retained in de-identified form.

One thing deletion does not reach: a question image we had already published under section 2.1. That copy carries no link back to your account, so an account deletion cannot locate it. Email [email protected] and we will take it down within 30 days — before or after you delete your account.

If you believe your data has not been deleted within a reasonable time after a deletion request, contact us at the address below.

8. Communications

We send two kinds of email, and they follow different rules.

Account email. Sent because of something you or we just did on your account, and part of the service rather than something you opt into: verifying your email address, welcoming you once it is verified, resetting your password, telling the owner of an address that it already has an account, telling you when an administrator has adjusted your credit balance, and replying to a report you sent us about an answer. These cannot be switched off while the account exists — a password reset you are unable to receive is an account you are unable to get back into.

Product news. We may also email you occasionally about the product itself, such as a new feature. Every email of this kind carries an unsubscribe link in its footer, and supports your mail client's own "Unsubscribe" button where it offers one.

How to stop product news. Use the unsubscribe link in any such email — it needs no sign-in and does not expire — or write to [email protected] and we will do it for you. We record the request as soon as we receive it, though a message already on its way out may still arrive.

Unsubscribing from product news does not affect the account email described above, which will continue to arrive for as long as you have an account.

9. Security

All data in transit is encrypted via HTTPS. Our database uses TLS and SCRAM-SHA-256 authentication. Secrets (API keys, JWT signing keys) are managed as environment secrets and never hardcoded or logged. We do not log question text or personal identifiers beyond what is required for abuse prevention.

10. Children's Privacy

AI Solve Quiz is not directed at children under 13. We do not knowingly collect data from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last updated" date above. Continued use of AI Solve Quiz after an update constitutes acceptance of the revised policy.

12. Contact

Questions about this Privacy Policy or data deletion requests may be directed to: [email protected]