QuizPeek Privacy Policy

Last updated: October 2026

QuizPeek is designed to process only the information necessary to provide its login, quiz-answering, account, and usage features. QuizPeek does not sell user data or use it for advertising.

Chrome Web Store Limited Use: The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

1. About QuizPeek

QuizPeek is available as a browser extension and a native Android app. The browser extension captures the visible browser tab when a user activates the quiz-answer feature. The Android app can capture the full display only after the user grants Android's screen-capture permission and subsequently taps the floating QuizPeek (QP) button. The captured image is sent securely to QuizPeek's backend and may be sent to Google Gemini to generate the requested answer.

The Android app shows an in-app disclosure before starting the screen-capture permission flow. Users should avoid capturing screens containing passwords, financial details, private messages, or other sensitive information.

2. Information we process

Google account information

This information is obtained from Google when the user signs in with Google and is used to create and manage the QuizPeek account.

Authentication information

Authentication information is used to authenticate the user, maintain the signed-in session, and authorize requests to QuizPeek. The browser extension stores its session token in local extension storage. The Android app stores its QuizPeek session token in private app storage and excludes that token file from Android cloud backup and device transfer. Google sign-in credentials are used for the login exchange.

User-submitted screenshots

When the user requests an answer, QuizPeek may capture the visible browser tab. The screenshot may contain text, images, quiz questions, answer choices, or other information visible on the screen.

Account and usage information

Payment and transaction information

QuizPeek uses this information to verify credit purchases and update the user's QuizPeek credit balance. QuizPeek does not request or store users' credit card numbers, card security codes, online banking passwords, or other banking credentials through the QuizPeek extension.

Account deletion requests

When a user submits an account deletion request through the app or website, QuizPeek processes the account email, optional message, request source, request status, timestamps, and administrative processing notes. This information is used to verify ownership, prevent duplicate or abusive requests, and complete the deletion process. After an authenticated request is accepted, the account is scheduled for automatic deletion 7 days later. The user can sign in on the deletion page during that grace period to cancel the request. If it is not cancelled before the scheduled time, QuizPeek automatically deletes the account and eligible linked data. After deletion, QuizPeek removes the request email, message, and admin notes and retains only an anonymized request reference and status.

3. How we use information

QuizPeek uses processed information for the following purposes:

4. How screenshots are processed

In the browser extension, a screenshot of the visible browser tab is captured only when the user activates the answer feature. In Android, after granting Android's screen-capture permission, the user starts a capture by tapping the floating QP button. The Android capture can include the entire visible display, including content outside the QuizPeek app.

The screenshot is sent to the QuizPeek backend over HTTPS to process the user's request. The backend may send it to Google Gemini for AI analysis. This transfer is necessary to generate the requested answer.

In the browser extension, the user must first accept the in-extension privacy disclosure before QuizPeek can send a screenshot for answering. QuizPeek does not use an Android AccessibilityService. Android captures begin only after the user grants screen-capture permission and taps the floating QP button. Users should not activate capture on screens containing sensitive information they do not want processed.

QuizPeek does not store screenshots in its database as persistent user records. Screenshots are processed temporarily during the request and are not intentionally retained as permanent files.

QuizPeek may temporarily keep the generated answer in server memory for a short period to reduce duplicate AI requests. This temporary cache contains the generated answer, not the original screenshot.

5. Data storage

QuizPeek stores account and service information in its PostgreSQL backend database. This may include Google account identifiers, email, profile information, plan, credits, credit transactions, usage statistics, generated answers, model identifiers, token counts, and request timestamps. The backend writes generated answers to persistent usage records linked to the requesting account; they are not only held in the short-lived in-memory answer cache.

QuizPeek does not intentionally store users' screenshots in the database.

6. Third-party services

Google

Google services are used for authentication and Google Gemini may be used to analyze screenshots and generate quiz answers. Google's own terms and privacy policies may also apply to its processing of information.

SePay

SePay may be used to receive payment notifications and transaction information for verifying credit purchases. QuizPeek uses the payment information provided through this service only for payment verification, credit allocation, transaction records, and related service security.

Render, PostgreSQL, Vercel, and GitHub Pages

Render hosts the QuizPeek backend API. QuizPeek uses a PostgreSQL database configured for the service; the database may be hosted by a provider separate from Render. The official web portal and public privacy and deletion pages are hosted on Vercel (quizpeek.io.vn) and GitHub Pages. These infrastructure providers may process technical connection and service logs as part of providing and securing their services. The applicable provider terms and privacy information also govern infrastructure-level processing.

7. Data sharing

QuizPeek does not sell, rent, or trade user data.

QuizPeek does not share user data with third parties for advertising or unrelated marketing purposes.

Information may be transmitted to service providers required to operate QuizPeek, including Google services, AI processing services, SePay for payment verification, hosting infrastructure, and database infrastructure. Payment information is used only for purposes related to the user's purchase and QuizPeek account.

8. Browsing activity

QuizPeek does not intentionally collect or store the user's browsing history.

The extension accesses visible page content only when triggered by the user initiating a screenshot capture.

9. Local extension storage

QuizPeek may store information locally in the browser, including:

The extension uses local browser storage to maintain extension settings, sign-in state, and account information between browser sessions. The Android app stores its QuizPeek session token in private app DataStore storage. That token storage is excluded from cloud backup and device transfer.

10. Data retention

QuizPeek stores generated answers and associated usage metadata in persistent database records linked to the account that made the request. These records are retained while needed to operate the service, provide usage and credit accounting, prevent abuse, maintain security, or comply with legal obligations. When a verified deletion request is processed, QuizPeek deletes account-linked usage and other eligible account records from systems under its control. Some records may be retained or anonymized where required for legal, security, fraud-prevention, or accounting reasons.

The backend also keeps a temporary in-memory cache of generated answers to reduce duplicate AI requests (currently configured for about one minute). This cache is separate from persistent usage records.

Screenshots are not intentionally written as persistent user records to QuizPeek's application database. They are processed temporarily by the backend and may be transmitted to Google Gemini for analysis. Any separate processing or retention by the AI provider is governed by that provider's applicable terms and data policies.

11. Security

QuizPeek uses reasonable technical measures to protect information, including authenticated API requests, HTTPS communication, server-side storage of sensitive service credentials, and access controls for administrative functionality.

However, no internet transmission or storage system can be guaranteed to be completely secure.

12. User choices and account access

Users may sign out of QuizPeek through the extension. Signing out removes locally stored authentication information from the extension.

Users may also choose not to use screenshot-based AI features. Without submitting a screenshot, QuizPeek does not process that screenshot for AI answering.

12A. Account and data deletion

Users may request deletion of their QuizPeek account and associated personal data through the Account and Data Deletion page. The web request page requires Google sign-in with the same Google account already linked to QuizPeek. The account email is taken from the authenticated QuizPeek account, not entered manually. Once the signed-in account is verified, the request is scheduled for automatic deletion 7 days later. Users can sign in on the same page and cancel before the scheduled time. If not cancelled, a backend task periodically deletes the account and eligible account-linked usage records, credit transactions, payment orders, and other related data. A minimal anonymized deletion-request record may be retained for audit purposes. Submitting a request does not mean deletion has already completed; automatic processing may occur shortly after the scheduled time. Some records may be retained where required for legal, security, fraud-prevention, or accounting obligations.

13. Children's privacy

QuizPeek is not specifically directed at children and does not intentionally collect personal information from children as a separate category.

14. Changes to this policy

QuizPeek may update this Privacy Policy when its features, services, or data practices change. The updated version will be published on this page with a new "Last updated" date.

15. Contact

For privacy questions, data requests, or concerns about QuizPeek's privacy practices, email baonhq.se@gmail.com.