1. Introduction
Testngine ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our quiz platform and marketplace ("the Platform"). Please read this policy carefully.
2. Information We Collect
2.1 Information You Provide
We collect information you provide directly:
- Account Information: Username, email address, password (hashed), full name, phone number
- Profile Information: Bio, headline, avatar, location, website, expertise tags, teaching categories, certifications, languages, social links
- Payment Information: Processed securely by Stripe (we store only transaction metadata, not card details)
- Content: Quizzes, questions, answers, explanations, comments, reviews, discussions
- Communications: Support messages, feedback submissions, contact form inquiries
2.2 Automatically Collected Information
When you use the Platform, we automatically collect:
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages viewed, quiz attempts, time spent on Platform, navigation paths
- Quiz Activity: Questions answered, scores, completion rates, performance history
- Cookies and Tracking: Session tokens, preferences, analytics data (see Section 8)
2.3 Information from Third Parties
We may receive information from:
- Authentication Providers: Google OAuth (name, email, profile picture)
- Payment Processors: Stripe (transaction status, payment verification)
- Analytics Services: Aggregated usage statistics and trends
2.4 Google Sign-In / OAuth Data
When you sign in with Google, we access and use the following Google user data:
Data We Access from Google:
- Email Address: Used to create and identify your Testngine account
- Full Name: Displayed on your profile and in the Platform interface
- Profile Picture: Displayed as your avatar across the Platform
- Google User ID: Used to securely link your Google account to your Testngine account
How We Use Google Data:
- Authenticate your identity and create/maintain your account
- Display your name and profile picture in the Platform
- Send you transactional emails (e.g., quiz purchase confirmations, password resets)
- Provide personalized quiz recommendations based on your activity
- Enable social features like comments, reviews, and discussions
How We Store Google Data:
- Stored securely in our Supabase database with row-level security policies
- All data transmitted over encrypted HTTPS connections
- Profile pictures cached via Google's secure CDN URLs
- Retained as long as your account is active (see Section 5 for retention details)
How We Share Google Data:
- Public Profile Information: Your name and profile picture are visible to other Platform users on your public profile and published quizzes (you can control visibility in privacy settings)
- Service Providers: We do not share your Google email or user ID with third parties except for essential services (Supabase for database hosting, email service providers for transactional emails)
- We NEVER sell your Google data to advertisers or third parties
Your Control Over Google Data:
- You can revoke Testngine's access to your Google account at any time via your Google Account Permissions
- You can update your profile information (name, picture) in your Account Settings
- You can delete your Testngine account at any time, which will remove all associated Google data (some transaction records retained for legal compliance)
- You can adjust profile visibility settings to control who sees your public information
Note: Testngine's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
3. How We Use Your Information
We use your information for the following purposes:
3.1 Provide and Improve Services
- Create and maintain your account
- Process quiz purchases and hosting subscriptions
- Display your profile and quizzes to other users
- Track your quiz progress and performance
- Provide personalized recommendations
- Improve Platform features and user experience
3.2 Communications
- Send transactional emails (purchase confirmations, password resets)
- Notify you of quiz updates, new comments, or relevant activity
- Respond to your support requests and feedback
- Send marketing communications (with your consent, opt-out available)
3.3 Security and Compliance
- Detect and prevent fraud, spam, and abuse
- Enforce our Terms of Use and policies
- Comply with legal obligations and respond to legal requests
- Protect intellectual property rights
3.4 Analytics and Research
- Analyze usage patterns and trends (aggregated data)
- Conduct research to improve educational outcomes
- Generate platform statistics for creators
4. How We Share Your Information
We do not sell your personal information. We share information in the following circumstances:
4.1 Public Information
Your profile (username, avatar, bio, expertise, certifications) and published quizzes are visible to all Platform users. You control what information is public through your privacy settings.
4.2 Service Providers
We share data with trusted third parties:
- Supabase: Database hosting and authentication
- Stripe: Payment processing and seller payouts (75-80% creator, 20-25% platform split)
- Vercel/Hosting: Platform infrastructure
- Email Services: Transactional and marketing emails
- Analytics Tools: Usage tracking and insights
4.3 Legal Requirements
We may disclose information when required to:
- Comply with legal obligations (subpoenas, court orders)
- Protect our rights, property, or safety
- Investigate fraud or security incidents
- Enforce our Terms of Use
4.4 Business Transfers
If Testngine is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
5. Data Retention
We retain your information for as long as necessary to provide services and comply with legal obligations:
- Account Data: Retained while your account is active and for 1 year after closure (for legal compliance)
- Quiz Content: Retained as long as quizzes are published; unpublished drafts deleted after 30 days of account termination
- Transaction Records: Retained for 7 years for tax and financial compliance
- Usage Logs: Retained for 90 days for security and analytics purposes
6. Your Privacy Rights
You have the following rights:
6.1 Access and Portability
- Request a copy of your personal data in a portable format
- Access your account information and activity history
6.2 Correction and Deletion
- Update your profile information at any time in Account Settings
- Request deletion of your account and associated data (some data may be retained for legal compliance)
6.3 Opt-Out Rights
- Unsubscribe from marketing emails (transactional emails cannot be disabled)
- Disable cookies through browser settings (may affect functionality)
- Adjust privacy settings to control profile visibility
6.4 Object and Restrict
- Object to processing of your data for marketing purposes
- Request restriction of processing in certain circumstances
To exercise these rights, contact us at contact@testngine.com or visit your Account Settings.
7. Security
We implement industry-standard security measures to protect your information:
- Encryption: All data transmitted over HTTPS; passwords hashed with bcrypt
- Access Controls: Row-level security policies in our database
- Authentication: Secure session management with token-based auth
- Payment Security: PCI-DSS compliant processing via Stripe (we don't store card details)
- Monitoring: Regular security audits and vulnerability assessments
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your information.
8. Cookies and Tracking Technologies
8.1 Types of Cookies We Use
- Essential Cookies: Required for authentication and Platform functionality
- Preference Cookies: Remember your settings and choices
- Analytics Cookies: Help us understand usage patterns and improve the Platform
- Marketing Cookies: Deliver relevant ads (with your consent)
8.2 Managing Cookies
You can control cookies through your browser settings. Disabling essential cookies may affect Platform functionality.
9. Children's Privacy
The Platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at contact@testngine.com.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the Platform, you consent to the transfer of your information to our servers and service providers located worldwide.
For users in the European Economic Area (EEA), we comply with applicable data protection laws and ensure adequate safeguards are in place for international transfers.
11. Third-Party Links and Services
The Platform may contain links to third-party websites, services, or content (e.g., YouTube videos, creator websites). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting a notice on the Platform
- Sending an email to your registered address
- Updating the "Last Updated" date at the top of this policy
Your continued use of the Platform after such notice constitutes acceptance of the updated policy.
13. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Email: contact@testngine.com
Data Protection Officer: contact@testngine.com
Support: Contact Form
14. Additional Rights for EEA and California Users
14.1 GDPR (EEA Users)
If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):
- Right to lodge a complaint with your local supervisory authority
- Right to data portability in a machine-readable format
- Right to object to automated decision-making
- Right to withdraw consent at any time
14.2 CCPA (California Users)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):
- Know what personal information is collected and how it's used
- Request deletion of personal information
- Opt-out of the sale of personal information (we do not sell your data)
- Non-discrimination for exercising your privacy rights
To exercise your CCPA rights, email contact@testngine.com with "CCPA Request" in the subject line.
This Privacy Policy is part of our Terms of Use. By using Testngine, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.