Privacy Policy

1. Information we don't collect

• Your name, phone number, email address or ID — there is no sign-up.
• Your question banks, questions, answers, notes, mistakes, favorites, progress or local backups — except what you send to an AI feature (section 3). The AI study analysis sends statistics and bank or chapter names only.
• Location, contacts, microphone or advertising identifiers. The app uses your photos or camera only when you pick or take pictures for an AI feature, and only those pictures are uploaded.
• Card numbers, or your Apple ID or Google account password. Apple and Google process payments.

2. Licenses and purchases

When you claim a trial, activate, restore a purchase, or the app checks your license, it sends the following over HTTPS to our license service, hosted on Tencent Cloud CloudBase in mainland China:

• A device identifier (a hash generated on the device, not your phone number) — to bind the license to this device.
• A short digest of the device name, the user agent and the app version — to tell devices apart, troubleshoot activation and limit repeated trials.
• Your IP address, recorded by the server — for abuse prevention, rate limits and security logs.
• Purchase records — on iOS the Apple transaction ID, product ID and receipt or signed transaction; on Google Play the order ID, product ID and purchase token — to verify the payment with Apple or Google, unlock what you bought and handle refunds.
• An activation code, if you enter one.

The announcement service only returns notices and never receives your banks. An activated app works offline, and none of this is sent while you are offline.

3. Optional AI features

AI features run only when you start them, and each one explains what it sends and asks for your consent before first use. If you don't use them, your banks never leave your device. Requests go over HTTPS to our service on Tencent Cloud in Shanghai, China. The AI work runs on our server on Oracle Cloud in Singapore, which calls large language model APIs from Google (Gemini) and OpenAI (GPT); DeepSeek (in mainland China) is used only when those are unavailable. These providers process the content under their own terms.

• AI Import — the files you pick (PDF, images, Word, Excel, text) and the bank name you enter. Gemini recognizes the content and GPT checks and organizes it. The results (question text and image crops) are kept on our server in China so you can import them. When DeepSeek is used, page images that need figures are briefly stored in our private Tencent Cloud storage in China and sent to Tencent Cloud OCR to locate the figures, then deleted.
• Questions from your material — the material you pick, and the question types, number, difficulty and instructions you set. Text that can be read directly (Word, Excel, text, a PDF's text layer) is extracted without a model; scans and images are read by the model. Gemini reads the material and writes the questions; GPT checks them again without seeing the answers. So that reusing the same material within 30 days doesn't charge for reading again and moves on to key points you haven't covered, we keep the extracted text and list of key points (stored under a hash of the file), the material overview, which pages were read, and the numbers of key points already covered (no question text), each for 30 days.
• AI explanation — only the question you tap: its type, stem, options, reference answer, existing explanation and up to 3 downscaled images. The server keeps a hash of the question and the generated explanation for 180 days, not the question text.
• AI answer filling — only the unanswered questions you choose: type, stem, options and up to 3 downscaled images. Two different models answer them and an answer is filled in only when they agree. The server keeps a hash of each question with the filled answer and explanation for 180 days, and which questions you filled for 90 days.
• AI study analysis — your study statistics only: questions answered, accuracy, study days and time, streaks, daily goal, accuracy and time by chapter and question type, mastery and mistake counts, mock exam scores and times, days until your exam, the score the app calculated, and the names of banks and chapters. Never questions, options, answers, explanations or notes. The server doesn't keep the statistics; it keeps a hash, the request ID and the report for 24 hours so you can fetch it again and aren't charged twice.
• Points wallet — an anonymous random ID created by the server and linked to your device identifier, your balance and transactions. Point purchases are verified with Apple or Google, and refunds remove the points (Google Play refunds are checked daily). On iOS, if you agree in the consent screen, we tell Apple how the points were used when you ask Apple for a refund.
• Job and usage records — for conversion and question jobs: file name, pages or characters, quote and charge, status and errors; for each AI explanation, answer filling, study analysis or sample: the time, count and whether points were charged. Operation details (quotes, confirmations, cancellations, refunds and deletions, with the wallet ID, device identifier, platform, job name and a masked form of any activation code) are kept for accounting, disputes and troubleshooting. None of these contain file or question content.

How long: uploaded files are deleted after 7 days; recognition results and generated questions after 30 days; extracted material text, key points, overviews and covered key points after 30 days. Usage records and operation details are deleted after 1 year. Job and point records are kept for accounting; you can ask us to delete them (section 12). Once imported, a bank lives only on your device.

International transfers: content you submit to these features is transferred to our server in Singapore and to the AI providers above, outside mainland China, and processed there. If you don't consent, nothing is uploaded and everything else keeps working.

Please upload only material you have the right to use. Users under 14 should use AI features with a parent's or guardian's consent.

4. Anonymous usage statistics and import reports

• To see whether imports and practice work, the app sends a few anonymous events: the app was opened (at most once a day), an import succeeded or failed, and a practice session finished. Each event carries only the platform, app version, a random ID created on the device (not linked to your license device ID) and whether it was the first time. No bank content and no file names. Turn it off any time in Settings → Anonymous usage stats; when it's off, nothing is sent.
• If an import goes wrong and you choose to report it from the preview, we receive a description of the document's structure — numbering, option and answer styles, counts by question type and the parser's warnings — with question text, options, answers and file names removed. Sending the original file to support uses your device's share sheet and does not go through our servers.

5. Data that stays on your device

• Banks, progress, settings and backups (.stb) stay in the app's storage or in files you export.
• On iPhone and iPad you can turn on backup to iCloud; it goes only to your own iCloud account.
• Deleting the app or its data deletes them, and we can't restore your banks from our servers. Please export backups.

6. In-app purchases

• App Store: payments are made through Apple's in-app purchase and Apple handles the payment details. We receive only the transaction evidence needed to unlock the 7-Day Pass, Lifetime or points, and we close the license when Apple reports a refund.
• Google Play: payments are made through Google Play Billing and Google handles the payment details. We receive the order ID, product ID and purchase token, verify them with Google, unlock what you bought or add points, and close the license or remove the points when Google refunds or revokes an order.

7. Service providers

• Apple — payments, receipt verification and refund notifications.
• Google (Google Play) — payments, order verification and refund records.
• Tencent Cloud CloudBase (mainland China) — the license service and its logs.
• Tencent Cloud (Shanghai, China) and Oracle Cloud (Singapore) — AI features only. Tencent Cloud runs the conversion service, AI explanation, answer filling and study analysis; Oracle Cloud runs recognition for AI Import and question generation.
• Google (Gemini), OpenAI (GPT) and DeepSeek (mainland China) — AI features only, for the content you submit. DeepSeek only replaces the other two when they are unavailable.
• Tencent Cloud OCR — only when AI Import falls back to DeepSeek, to locate figures on page images.
• Cloudflare — hosts this website.

We don't give this information to advertising networks or data brokers, and we don't use it to track you across apps.

8. Why we use it

• License and purchase data — to provide what you bought.
• Security logs and anonymous usage statistics — our legitimate interest in keeping the service safe and working. You can switch the statistics off.
• Content you send to AI features — your consent, which you give before first use.

9. How long we keep it

• License and device binding: while the license is valid. Removed or invalid after you unbind, the license expires or a refund revokes it.
• Security and operation logs: only as long as needed for abuse prevention and troubleshooting.
• Banks and progress on your device: until you delete the app or its data.
• AI features: as described in section 3.

10. Your choices and rights

• Use the app without claiming a trial, buying or entering a code — then no license requests are made. The app may still check announcements, and you can stay offline.
• Restore purchases on a new device with the same Apple ID or Google account.
• Don't use AI features: nothing is uploaded unless you consent and choose the content.
• Turn off anonymous usage stats in Settings.
• Ask us for a copy of, or to delete, the server records linked to a device, license or AI wallet. Depending on where you live — for example the EU, the UK or California — you may have further rights, such as correcting your data or objecting to its use, and the right to complain to a data protection authority. Contact us to use them (section 12).

11. Children

• QuizBao is made for exam preparation and self-study. It is not directed at children under 13, and we don't knowingly collect children's personal information.

12. This website and contact

• quizbao.moyuxb.com doesn't set cookies or use advertising or analytics scripts. Cloudflare, which hosts it, processes technical data such as IP addresses to deliver and protect the site, and may give us aggregated, cookie-free visit counts. If you close the language suggestion bar, that choice is remembered in your browser's local storage.
• The Simplified Chinese site, shuati.moyuxb.top, has its own first-party visit statistics, described in its privacy policy (Chinese).
• If what we collect or why changes in a meaningful way, we will update this page and its date.
• Contact: qianchang4372@gmail.com · WeChat: bao437268331.