Student Data Privacy Policy

1. Scope and who we are

This policy describes how PIGENAI LLC, a Missouri limited liability company ("PIGENAI", "we"), handles data in Quiz Showdown for Schools: the school edition at each school’s own address (for example, yourschool.quizshowdown.live), used by schools, districts and their staff. The general Quiz Showdown privacy policy at quizshowdown.live/privacy covers the consumer site.

2. What we collect from students: nothing that identifies them

• Students do not create accounts, give an email address, or sign in.
• A student joins a game with its code (or QR code) and may type a nickname. In a school game the nickname is shown on the screens during the game through the live game connection and is never written to our database. The database stores each player as "Player 1", "Player 2" and so on, with that player’s answers to the questions (which answer, whether it was right, how long it took and the points).
• If any nickname reaches a stored record, for example in an abandoned game, a daily cleanup replaces it with the Player label once the game has ended, or six hours after it started.
• Class results are saved by class and by question (how many answered, how many were right, which wrong answer was picked most). They hold no student names, player identifiers, network addresses or device identifiers.
• A teacher can keep a class list or a gradebook with real names on their own device only; it is kept in the teacher’s browser. During a game the teacher’s screen can send those names through the live game connection to students’ phones, so each student can tap their own; the names are never written to our database.
• We do not track students across games, use cookies or other identifiers to follow them, or build profiles of them.

3. What we collect from school administrators and teachers

• Name, school email address and role (district admin, school admin or teacher), entered by the school admin or by the teacher.
• Sign-in data: the email sign-in link, the authenticator app (second step) set up by each person, and the person’s active sign-in sessions, limited to two at a time for a teacher seat.
• What staff create: quizzes, class results, saved snapshots, quiz pictures and their descriptions, standards tags, the school’s name, logo and colors, and teacher import spreadsheets while they are processed.
• A record of administrative actions (an audit log), for example an invitation sent or a seat reassigned.
• Billing contact and payment details for the school’s purchase. Card payments are processed by Stripe; we never see or store a full card number.

4. How we use data, and the limits on its use

• We use school data only to provide and support Quiz Showdown for Schools for that school, at the school’s direction.
• We never sell school or student data.
• We never use school or student data for advertising, including targeted advertising, and we show no advertising in the school edition.
• We never use school or student data to build a profile of a student, for any purpose.
• We never disclose school data except to the service providers listed in section 9, to provide the service, or where the law requires it.

5. FERPA

Where a school shares education records with us under the Family Educational Rights and Privacy Act, we act as a "school official" with a legitimate educational interest, under the school’s direct control with respect to the use and maintenance of those records. We use them only for the purposes the school authorizes and do not re-disclose them. The school owns and controls its data. Because the service stores no student names or student accounts, education records that identify a student are, by design, not held by us.

6. COPPA and children under 13

Quiz Showdown for Schools collects no personal information from children. A student, of any age, joins with a game code and an optional nickname, which in a school game is never stored (section 2). There is no account, email address, photograph, voice recording, location or persistent identifier collected from a student, and the stored player list keeps players as numbers.

7. State student privacy laws

We follow the student privacy laws of the states where our schools are, including Missouri and Kansas, and the requirements of laws modeled on California’s Student Online Personal Information Protection Act (SOPIPA). In particular, we do not use student data for targeted advertising, do not build profiles of students, do not sell student data, protect the data we hold with reasonable security, and delete a school’s data when the school asks. A district can sign the Student Data Privacy Agreement on this page, which sets out these commitments as a contract.

8. AI processing

• Quizzes are written by Anthropic’s Claude models through Anthropic’s commercial API. The AI receives the teacher’s own material (an uploaded document, pasted notes, a web page or transcript, or a book’s chapter text), and for some features a quiz question, a picture to describe, or a quiz to translate. It never receives anything that identifies a student.
• Anthropic’s commercial terms state that Anthropic may not train its models on customer content from its services. School content is not used to train AI models.
• Uploaded files are deleted as soon as the quiz is made. A file whose quiz is never made is deleted by the daily cleanup once it is a day old. A whole book is read on the teacher’s device; only its chapter text is sent, kept until that chapter’s quizzes are written, and cleared within 24 hours at the latest. Books are not stored.
• The quizzes themselves are kept, so teachers can run them again. A teacher reviews and locks every AI quiz before students see it.

9. Service providers (subprocessors)

• Supabase: Database (United States, Ohio), sign-in, private file storage and the live game connection.
• Vercel: Hosting: runs the app and serves its pages.
• Anthropic: AI: writes quiz questions from the teacher’s material, suggests standards tags and picture descriptions, and translates quizzes.
• Resend: Email: sends sign-in links, invitations and school notices.
• Stripe: Card payments for a Pilot Pack or license, when a school pays by card; it receives the payer’s billing details, never student data.
• YouTube (Google): When a teacher pastes a YouTube link, the server asks YouTube for that video’s title; nothing else is sent.
• Google Classroom (Google): Optional roster import, run in the teacher’s own browser; the class list stays on the teacher’s device.

10. How long data is kept, and deletion

• Quizzes, class results, snapshots and quiz pictures: until the teacher or the school deletes them, or the school’s data is deleted. Pictures no quiz uses any more are deleted after a day.
• Games: the Player labels and answers stay with the game until its quiz is deleted.
• Staff accounts: while the school uses the service, and until the school asks for its data to be deleted. After a license ends there is a grace period in which the school can still download its results.
• Hosting request logs, kept by our host for a limited time, can include network addresses. We do not use them to identify anyone.
• To have a school’s data deleted, a school or district administrator writes to hello@quizshowdown.live from a school email address. We confirm the request and, within 30 days, delete the school’s quizzes, games, answers, class results, snapshots, pictures, branding, school address and staff memberships, and the sign-in accounts of staff who belong to no other school. We keep only a record that the deletion took place.

11. Security

• All traffic to and from the app is encrypted in transit (HTTPS). Data at rest is held by Supabase, which states that it encrypts data at rest with AES-256.
• Administrators and teachers sign in with an email link and an authenticator app code (two steps); there are no passwords to steal. A teacher seat can be signed in on up to two devices at a time.
• Each school’s data is kept separate: every record belongs to one school, and the app checks the school and the person’s role on every request. One school can never see another’s data.
• Files are kept in private storage and served only to the school they belong to. Administrative actions are recorded in an audit log.

12. If something goes wrong

If we confirm unauthorized access to a school’s data, we notify that school’s administrators without unreasonable delay, and within 72 hours of confirming it, with what happened, what data was involved, what we are doing about it and what the school can do. We work with the school on any notice the law requires it to give. To report a concern, write to hello@quizshowdown.live.

13. Changes to this policy

We post any change on this page with a new version and date, and tell school administrators by email at least 30 days before a change that reduces a protection takes effect. Version 1, effective October 20, 2026.