Privacy Policy

1. Information We Collect

A. Students & Visitors (Minimal Data)

Students can participate in Inquiziti live games or assignments without an account. When joining as a "Guest" or "Visitor," we collect only:

• Nickname: A display name for the session. We advise against using full real names.
• Game Data: Answers selected and scores during that specific session or assignment.

B. Registered Users (Teachers & Students 13+)

If you choose to create an account, we collect:

• Username, Email Address, and Password (Hashed/Encrypted).
• Age Verification: Date of birth is processed to verify eligibility but is not stored.
• User Content (Activities).

C. Automated Information

We collect IP addresses and browser types strictly for security, abuse prevention (e.g. rate limiting), and platform analytics. We use cookies only for authentication and essential site function. We also use Google reCAPTCHA to protect our site from spam and abuse.

2. How We Use Information

We use the information solely to provide, maintain, and improve the Inquiziti platform.

• To Provide the Service: Enabling you to host live games, assign asynchronous assignments, join activities, and track progress.
• To Improve the Platform: Analyzing aggregated, anonymized usage (e.g., "Which game mode is most popular?") to improve gameplay.
• AI Features: When you use our AI content generator, your text prompts are processed by our partner (Google) statelessly. Your inputs are not used to train public AI models.
• No Marketing to Students: We do not send marketing emails to student accounts.

3. Student Privacy & Compliance

4. Data Sharing & Service Providers

We do not sell data. We share data only with trusted third-party service providers necessary to operate the Service. All data is stored in the United States.

• Hosting: Amazon Web Services (AWS)
• Payment: Stripe (Credit card details are not stored by Inquiziti)
• Analytics: PostHog (Configured for privacy minimization)
• Auth & Identity: WorkOS (Manages secure user authentication)
• Security: Google reCAPTCHA (Used to prevent bot abuse and spam. Use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service.)

5. Data Retention

• Guest Data: Retained for approximately 12-18 months to allow teachers to review academic year progress, after which it is anonymized or deleted.
• Inactive Accounts: If an account is inactive for 24 months, we may delete the account and associated data.
• Backups: Deleted data may persist in secure, encrypted backups for up to 30 days.

6. State-Specific Rights (CCPA)

Residents of California have the right to request access to or deletion of their personal information ("Right to Know" and "Right to Delete"). We do not sell your personal information. To exercise these rights, contact us at the email below.

7. International Users (GDPR & UK GDPR Compliance)

If you are accessing the Service from the European Economic Area (EEA), United Kingdom, or Switzerland, you have specific rights under the General Data Protection Regulation (GDPR) and related laws:

• Lawful Bases for Processing: We process your personal data primarily to perform our contract with you (Terms of Service) and under our legitimate interest to secure and improve the platform.
• Your Rights: You have the right to request access to, rectification of, or erasure ("Right to be Forgotten") of your personal data, as well as data portability and restriction of processing.
• International Data Transfers: Since we are based in the United States, your data is transferred and stored in the US. We secure these transfers using Standard Contractual Clauses (SCCs) to ensure equivalent protection.

To exercise any of these GDPR rights, please contact our privacy desk at the email address below.

8. Contact Us