This document is not published yet.

It is missing details only the operator can supply, so it does not yet state who is responsible or which law applies. Do not rely on it. Missing: legalName, rightsEmail, rightsRespondent, jurisdiction.

Privacy

Last updated 2026-08-19

Who is responsible

[legal entity not set] operates MCQ MasterLoop. Privacy questions and requests go to [privacy email not set].

What we hold

When you create an account we store your name, email address and password. The password is hashed; we never see it.

If you sign in with Google we receive your name, email address and profile picture from Google. We do not receive your Google password.

We store your date of birth, because some features are limited by age, and a record of parental consent where that applies.

As you use the service we store what you answer, whether it was right, how long each question took, how confident you said you were, your streak, your XP, and any study time you log. If you use the planner we store the study week you declare and the days you mark as holidays, study leave or time away.

If you turn on two-factor authentication we store an encrypted secret and hashed backup codes.

What we do not hold

We do not store card numbers. Payments are handled by our payment processors, who send us only whether a subscription is active.

We do not sell your information, and we do not use it for advertising.

Who else processes it

These providers process data on our behalf so the service can run:

  • Supabase — database hosting (Singapore region).
  • Vercel — application hosting and delivery.
  • Google — optional sign-in.
  • Resend — transactional email, such as password resets.
  • Stripe and RevenueCat — payments and subscription status.
  • Sentry — error reports, so we can fix crashes. Configured not to attach personal data.
  • Upstash — rate limiting.

See the AI page for what is and is not sent to any AI provider.

Students under 18

This service is built for students aged roughly 14 to 18. We ask for a date of birth and, where required, a record of parental consent before an account is used.

If you believe a child has given us information without the consent of a parent or guardian, contact [privacy email not set] and we will delete it.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete your account and its data. Write to [privacy email not set]. Deleting your account removes your answers, progress and study record.

These rights are governed by the law of [jurisdiction not set].

How long we keep it

We keep your account and study record for as long as the account exists. When you delete it, we remove the data. Backups are overwritten on their normal cycle.