Privacy Policy — QuizAI Teacher (Mobile)

Effective Date: 27 April 2026 Last Updated: 13 June 2026

This notice describes how the QuizAI Teacher Android app (net.accessph.quizaiteacher) handles personal information. It supplements the platform-wide Privacy Policy, which governs all QuizAI services.

1. Who is responsible

ACCESS Software Solutions ("ACCESS", "we") — DTI Business Name Registration No. 3377044, San Luis, Baguio City 2600, Philippines.

Email: info@accessph.net.

ACCESS is the data controller for personal data processed through the QuizAI Teacher app, in coordination with your Institution.

2. What we collect

2.1 From your account

• Name, email address, school-issued user ID, role (teacher).
• Google profile picture and google_sub (only if you sign in with Google).
• Bcrypt-hashed password — only when local-password fallback is enabled by your administrator.

2.2 From your use of the app

• Quizzes, questions, answer choices, and questionnaires that you author — including classes you add manually and AutoQuizzes you create from a scanned master answer sheet or the in-app bubble-matrix builder (the answer key you tap out is stored as the quiz's correct options).
• Class schedules and student rosters that you manage.
• In-app notifications addressed to you (e.g. a parsed master sheet or a student's answer-sheet score). The app polls the server for these on the interval you set in Settings (5–60 s); each notification is stored server-side with a delivery status so it is shown exactly once, and is removed when your account is deleted.
• Scanned answer-sheet images you submit for OMR processing, plus the parsed answer mapping derived from each scan. This includes intermediate processing-stage images uploaded alongside the capture and any cropped / rotated working copies you create while reviewing a scan — all retained with the scan so it can be re-processed.
• Live-quiz state you push (current question, lock toggles).
• Anonymized crash diagnostics (Firebase Crashlytics).
• Anonymized usage statistics (Firebase Analytics).

2.3 Device data

• Device model, OS version, app version.
• Network IP address (used by the backend for rate limiting / audit).

2.4 What we do not collect

• We do not collect biometric templates. Fingerprint and Face unlock are handled by the Android Keystore; only a yes/no signal is returned to the app.
• We do not collect precise location.
• We do not use advertising IDs or run ad trackers.

3. Why we use it

We do not sell personal data, and we do not use student or teacher content for AI training or any non-educational purpose.

4. Permissions used by the app

You can revoke any permission at any time in Android Settings → Apps → QuizAI Teacher → Permissions. Features that depend on the revoked permission will be unavailable until it is granted again.

5. Sharing & disclosure

We share data only with:

• Your Institution — your administrators and authorized faculty with a need to know.
• The QuizAI Web Platform — every API call is to our own backend, which then federates to the ACCESS School Management System where applicable.
• Service providers under data-processing agreements:
  • Google Sign-In — for OIDC authentication.
  • Google Firebase (Crashlytics, Analytics) — for anonymized diagnostics. Personal identifiers are not sent to Firebase.
• Authorities, when legally required — pursuant to a valid subpoena, court order, or directive from the National Privacy Commission.

We never share your data with advertisers.

6. Data storage on the device

• Bearer API key — stored in FlutterSecureStorage (Android Keystore-backed). Cleared on logout or when the key expires.
• Cached classes/rosters/quizzes — stored in the app's private data directory and excluded from Android Auto Backup. Cleared on logout, on uninstall, or via Settings → Apps → QuizAI Teacher → Storage → Clear data.
• Preferences — theme choice, last-used screen.

Data in transit is encrypted with TLS 1.2+. Data at rest on our servers is hashed (passwords) or stored in access-controlled databases.

7. Retention & Account Deletion

The mobile app caches a working copy of recently-viewed data for offline resilience; the authoritative copy lives on the QuizAI web backend and follows the retention schedule in the platform Privacy Policy.

The cached copy on your device is cleared:

• on logout;
• on uninstall;
• when you tap Clear data in Android settings.

When a Teacher account is deleted, the quizzes, questionnaires, and OMR scan history you authored are re-attributed to a system-defined universal teacher account identified as AINGEL so the Institution's grade records and item analyses remain accessible. Your own user row, personal class schedules, and device API keys are deleted. See the platform Privacy Policy for the full mechanics.

8. Your rights

You may exercise the rights granted by the Philippine Data Privacy Act (R.A. 10173) — including access, rectification, erasure, and lodging a complaint with the National Privacy Commission — by contacting info@accessph.net or your school's QuizAI administrator. See the platform Privacy Policy for the full list.

9. Children's privacy

The Teacher mobile app is intended for use by adult educators (typically 18+). Accounts are provisioned by Institutions, which are responsible for confirming eligibility.

10. Changes

We will update the "Last Updated" date and, where the change is material, notify users via the app or by email. Continued use after the effective date constitutes acceptance.

11. Contact

ACCESS Software Solutions San Luis, Baguio City 2600, Philippines info@accessph.net · https://accessph.net