This policy explains which personal data QuizFrance (quiz-france.app) processes, why, for how long, and what your rights are under the General Data Protection Regulation (GDPR).

1. Data controller

Uladzimir Yakavenka, sole trader registered in Poland
NIP: 7011268678, REGON: 542190848
Address: ul. Wilcza 11, 00-538 Warsaw, Poland
Email: [email protected]

2. Data we process

• Account: name, email address, password (stored hashed), language, gender (used so the AI examiner addresses you correctly).
• Sign-in with Google or Facebook: account ID, name, email address and profile picture provided by that service.
• Practice: quiz answers, flashcard progress, results and activity history.
• AI voice interview: audio recordings of your voice, their text transcription and the AI examiner's replies.
• Subscription: Stripe customer and subscription IDs, plan, dates and payment history. We never receive or store card numbers.
• Comments and messages: name, email address and content of comments posted on the blog or glossary, and of messages sent to support.
• Technical data: IP address, browser type, server logs and error reports.
• Cookies: see section 8.

3. Purposes and legal bases

• Creating and managing your account, providing the service and the subscription: performance of a contract (Art. 6(1)(b) GDPR).
• AI voice interview (speech recognition, dialogue, speech synthesis): performance of a contract, at your request, when you start an interview (Art. 6(1)(b) GDPR).
• Invoicing and accounting obligations: legal obligation (Art. 6(1)(c) GDPR).
• Security, abuse prevention and error diagnostics: legitimate interest (Art. 6(1)(f) GDPR).
• Audience measurement and advertising: consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.
• Replying to your messages and service notifications: performance of a contract or legitimate interest.

4. Voice processing

Audio recordings are used only to transcribe your answers and run the practice interview. They are not used to identify you by biometric means. Transcription is performed by OpenAI, and the examiner's voice is generated by ElevenLabs from the text of its replies. Recordings and transcripts remain available in your interview history.

5. Recipients and processors

Your data is never sold. It is shared only with the providers the service needs to run:

• Amazon Web Services EMEA SARL: server and data hosting;
• Cloudflare, Inc.: content delivery and attack protection;
• Stripe Payments Europe, Ltd.: payments and subscription management;
• OpenAI: speech recognition and the AI examiner's dialogue;
• ElevenLabs: the AI examiner's speech synthesis;
• Resend: sending service emails;
• Sentry: technical error tracking;
• Google and Meta: sign-in with their accounts and, only with your consent, audience measurement (Google Analytics) and advertising (Meta Pixel);
• Crisp: support chat, when enabled.

6. Transfers outside the European Union

Some providers (notably OpenAI, ElevenLabs, Resend, Sentry, Google and Meta) may process data in the United States. These transfers rely on the European Commission's standard contractual clauses or, where applicable, the EU-U.S. Data Privacy Framework.

7. Retention

• Account and practice data, voice recordings and transcripts: until you delete your account.
• Billing data: for the period required by accounting and tax law (generally 5 years after the end of the financial year concerned).
• Server logs: 90 days.
• Published comments: until deleted by you or by moderation.
• Consent-based data (audience measurement, advertising): until you withdraw consent, and at most 13 months for cookies.

You can delete your account at any time from your profile.

8. Cookies

Strictly necessary cookies (session, authentication, security, language and theme preferences) are always active. Audience measurement and advertising cookies are set only after you agree in the cookie banner. You can change or withdraw your choice at any time from that banner or in your browser settings.

9. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, to withdraw your consent at any time, and to set instructions for your data after your death. To exercise these rights, write to [email protected]. We reply within one month.

You may also lodge a complaint with the French data protection authority, CNIL (cnil.fr), or the Polish authority, Prezes Urzędu Ochrony Danych Osobowych (uodo.gov.pl).

10. Minors

The service is intended for adults. A minor may use it only with the consent of a parent or legal guardian.

11. Changes

We may update this policy to reflect changes in the service or the law. The date of the last update is shown at the bottom of this page. If we make a significant change, we will let you know by email or in the service.