Privacy Policy

👋 Overview

QuizLab ("we", "our", or "us") is operated by EncodeLab. This Privacy Policy explains what information we collect when you use the QuizLab mobile application, how we use it, and the choices you have.

By using QuizLab you agree to the collection and use of information as described here.

📋 Information We Collect

Account information — collected when you sign in with Google:

• Full name
• Email address
• Profile photo (avatar URL from your Google account)
• Firebase Authentication UID

Usage & activity data — generated as you use the app:

• Enrolled exams and quiz attempts
• Best scores and global statistics per subject
• Saved exams list
• Daily check-in timestamps
• Community feed posts

Instructor applicants only Instructors — collected during the verification wizard:

• Mobile phone number
• National ID / passport number
• NIC or passport scan (compressed image stored as encrypted base64)
• Workplace name, email, and role
• Highest qualification and certificate scan
• Subjects taught, teaching levels, and years of experience
• Optional: LinkedIn profile URL, bio, reference contact, profile photo

🎯 How We Use Your Information

• Authenticate you and maintain your account
• Display your name, avatar, and scores on leaderboards
• Track your exam progress and personalise your dashboard
• Review instructor applications and verify credentials
• Enable instructors to create and manage quiz content
• Operate the community feed
• Improve app performance and fix bugs

🔗 Third-Party Services

QuizLab is built on Google Firebase. The following Firebase services process your data:

• Firebase Authentication — manages sign-in via Google
• Cloud Firestore — stores your profile, activity, and (for instructors) verification documents

These services are governed by Google's Privacy Policy. We do not sell your data to any third party.

👁️ Data Visibility

• Your name and scores are visible to other users on leaderboards
• Your community posts are visible to all app users
• Your email, exam history, and instructor documents are private and only accessible to you and authorised QuizLab administrators

🔒 Data Security

All data is stored in Google Cloud Firestore and protected by Firebase Security Rules. Instructor identity documents (NIC scans, qualification certificates) are stored as compressed, base64-encoded data directly within secured Firestore documents — they are not publicly accessible.

We use industry-standard practices to protect your information, but no method of electronic storage is 100% secure. We encourage you to use a strong, unique password for your Google account.

👶 Children's Privacy

QuizLab is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

⚙️ Your Rights & Choices

• Access — you can view your profile and activity from the app at any time
• Correction — contact us to correct inaccurate information
• Deletion — contact us to request deletion of your account and associated data
• Withdraw consent — you may revoke Google Sign-In access from your Google account security settings at any time

🔄 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of QuizLab after changes constitutes your acceptance of the updated policy.