Privacy Policy

1. Data We Collect

We collect the following information when you use YMCQ:

• Account information — name, email address, and profile details you provide during registration.
• Usage data — quiz attempts, scores, progress, session duration, and feature interactions.
• Device & technical data — browser type, operating system, IP address, and general location derived from IP.
• Payment data — subscription and billing information processed by Polar. We do not store full payment card details.

2. How We Use Your Data

We use collected data to:

• Provide and personalise the Service (adaptive quizzes, progress tracking).
• Process payments and manage subscriptions.
• Send transactional emails (password resets, subscription updates).
• Analyse usage patterns to improve the platform.
• Detect and prevent fraud or abuse.

3. Data Storage

Your data is stored in PostgreSQL databases hosted on secure infrastructure. Uploaded files (e.g., profile images) are stored in Cloudflare R2 object storage. All data is encrypted in transit using TLS.

4. Third-Party Services

We share data with the following third parties as necessary to operate the Service:

• Polar — payment processing and subscription management.
• Cloudflare R2 — file storage for uploaded content.

We do not sell your personal data to third parties. Data shared with service providers is limited to what is necessary for them to perform their functions.

5. Cookies

YMCQ uses essential cookies to maintain your authentication session and remember your preferences. We do not use third-party advertising or tracking cookies.

6. Data Retention

We retain your account data for as long as your account is active. After account deletion, we remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention).

Anonymised, aggregated usage statistics may be retained indefinitely.

7. Your Rights

You have the right to:

• Access and download your personal data.
• Correct inaccurate information in your account.
• Delete your account and associated personal data.
• Object to processing of your data for specific purposes.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at the address below.

8. Children’s Privacy

YMCQ is intended for users who are at least 18 years old or who have parental consent. We do not knowingly collect personal data from children under 13. If we become aware of such collection, we will promptly delete the data.

9. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at privacy@ymcq.app.