Privacy Policy

1. Who We Are

WizzQuest Ltd ("WizzQuest", "we", "us", or "our") is a company registered in England and Wales. We operate the WizzQuest educational platform, accessible at wizzquest.com and play.wizzquest.com.

Our registered address is: 123 Learning Lane, London, EC1A 1BB, United Kingdom.

For privacy enquiries, please contact us at: support@wizzquest.com

2. What Data We Collect

We collect the following categories of personal data:

• Account data: Email address, name, and password (hashed) for adult/parent accounts.
• Child profile data: Display name, school year group, avatar customisation preferences.
• Usage data: Quiz answers, scores, game progress, coins earned, streaks, and session duration.
• Payment data: Processed securely via Stripe. We do not store card numbers.
• Technical data: IP address, browser type, device type, and cookies (see our Cookie Policy).

3. How We Use Your Data

We use your data to:

• Provide and improve the WizzQuest platform.
• Personalise the learning experience for each child.
• Process subscription payments.
• Send service-related communications (e.g. password reset emails).
• Generate parent-facing learning insight reports.
• Comply with our legal obligations.

We do not use child data for advertising, profiling, or sell it to third parties.

4. Legal Basis for Processing

• Contract: Processing necessary to deliver the service you have subscribed to.
• Legitimate interests: Improving platform security and performance.
• Legal obligation: Complying with applicable UK and EU law.
• Consent: Where we ask for your explicit agreement (e.g. marketing emails).

For children's data, we rely on the parent/guardian's consent obtained at account creation.

5. Children's Privacy

WizzQuest is designed for children aged 5–11. We take the privacy of children extremely seriously and comply with the UK Children's Code (Age Appropriate Design Code).

• Children do not create their own accounts; accounts are created by a parent or guardian.
• We collect only the minimum data necessary for children.
• Children's data is never used for advertising or sold to third parties.
• We do not use nudge techniques or dark patterns targeted at children.

6. Data Sharing

We share data only with trusted service providers who process data on our behalf:

• Stripe: Payment processing.
• Base44: Cloud hosting and database infrastructure.
• OpenAI / Google: AI-powered question generation (no personal child data is sent).

All third-party processors are contractually bound to handle data securely and in accordance with GDPR.

7. Data Retention

• Account data is retained for the duration of your subscription plus 90 days after cancellation.
• Child profile data is deleted upon account closure or upon request.
• Payment records are retained for 7 years as required by UK law.

8. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten").
• Restrict processing in certain circumstances.
• Data portability – receive your data in a structured format.
• Object to processing based on legitimate interests.
• Withdraw consent at any time.

To exercise any right, contact us at support@wizzquest.com. We will respond within 30 days.

9. Security

We use industry-standard security measures including encrypted data transmission (TLS), hashed passwords, and access controls. We regularly review our security practices.

10. International Transfers

Some of our service providers may process data outside the UK/EEA. Where this occurs, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses).

11. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

12. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or a notice on our platform.