What we collect, why, and how to control it.

Last updated 21 May 2026

1. Who we are

QuizSprint is run by Code Kubic Solutions (2663998-P), a business registered in Malaysia. We act as the data controller for the information described here.

We comply with the Malaysian Personal Data Protection Act 2010 (PDPA) and design with student safety in mind.

2. What we collect

The only personal data we collect is what we need to run the service:

Your email and Google sub identifier — provided by Google when you sign in. We don't see or store your Google password.
Your practice records — the chapters you attempt, the answers you pick, whether you were correct, and your confidence value at the moment of commit.
Preferences — your selected level (e.g. Form 4), so the practice picker doesn't ask every time.
Basic logs — IP address, browser, and timestamps. Kept short-term for security and abuse prevention.

We do not collect your school ID number, your phone number, or your real name (we only ever see what's in your Google account email).

3. Why we use it

To sign you in and keep you signed in.
To show you your progress, recent chapters, and review your wrong answers.
To improve question quality — looking at aggregate accuracy by chapter.
To detect and prevent abuse (e.g. bots, scraping).

We do not sell your data and we do not share it with advertisers.

4. Who else sees your data

We use a small number of trusted providers to run QuizSprint:

Google — for sign-in (OAuth). When you click "Continue with Google", Google sees that you signed in to QuizSprint and shares your email with us.
Neon (database) — stores your account row and practice records. Hosted in Singapore.
Google Gemini — we use this to generate practice questions. We send chapter names and existing question stems. We never send any user data (emails, answers, attempts) to Gemini.

5. Cookies

We use a single session cookie to remember that you're signed in. It's HTTP-only, sealed, and only sent over HTTPS.

We do not currently use third-party tracking cookies, analytics scripts, or advertising pixels. If we ever turn on advertising (see the next section), we'll update this paragraph and add a cookie banner before any third-party scripts load.

6. Future advertising

QuizSprint is free for students. To keep it sustainable as we grow, we may introduce non-intrusive advertising on certain pages — for example, a single ad placement between sections on the home page, on the practice picker, on a completed-set screen, and on public curriculum pages.

If we do, we commit to:

No ads inside an active question or on the answer-result moment.
No ads on `/profile`, `/login`, `/terms`, or `/privacy`.
Every ad slot is clearly labelled "Sponsored".
If we work with networks like Google AdSense, we use non-personalised ads for users under 18 and we will update this policy with the network's name, what data it sees, and how to opt out before any ads load.

Today, no ads load. This section describes our future intent so you have it in writing.

7. How long we keep it

Active accounts: kept while your account exists, so we can show your progress over time.
Deleted accounts: all your records are removed within 30 days of your request.
Security logs: kept up to 90 days, then deleted.

8. Your rights under PDPA

You have the right to:

Access your data — visit your profile to see what we have.
Correct data that is wrong.
Delete your account and the records attached to it.
Withdraw consent at any time by deleting your account.

To exercise any of these, email us at hello@codekubic.com.

9. Children

QuizSprint is intended for students aged 13 and above. If you are younger, please get permission from a parent or guardian before signing up. If you believe a child has signed up without consent, contact us and we'll remove the account.

10. Security

We use HTTPS everywhere, sealed session cookies, and a real authentication flow via Google. No system is perfect, but we treat student data with care. If a breach ever affects your account, we will notify you.

11. Changes to this policy

If we change anything significant — for example, adding a new third party or starting to show ads — we will update this page and let you know on the site before the change takes effect.

12. Contact

Questions or concerns about your data? hello@codekubic.com — we read everything.