Privacy Policy
Last updated: 10 August 2026
This Privacy Policy explains how QuizSurge ("we", "us", "our") collects, uses, discloses, and protects your personal information. We are a New Zealand-based business and comply with the Privacy Act 2020 and the Privacy Principles contained within it.
By using QuizSurge, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
1.1 Information you provide
- Account information: Email address, display name, and password (hashed) when you create an account.
- Quiz content: Questions, answers, images, and documents you upload or create.
- Payment information: Billing details processed securely via Stripe. We do not store full credit card numbers.
- Communications: Messages you send us via our contact form or email.
1.2 Information collected automatically
- Usage data: IP address, browser type, device information, pages visited, and timestamps.
- Quiz analytics: Player scores, participation rates, question performance statistics.
- Cookies: Authentication tokens and analytics cookies (see our Cookie Policy).
2. How We Use Your Information
- To provide, operate, and maintain the QuizSurge service;
- To create and manage your account and authenticate your sessions;
- To process payments and manage subscriptions via Stripe;
- To display real-time leaderboards and quiz results;
- To analyse usage patterns and improve our service;
- To detect, prevent, and address technical issues, fraud, or security violations;
- To send you service-related notifications, updates, and (with your consent) marketing communications;
- To comply with our legal obligations under New Zealand law.
3. Legal Basis for Processing
Under the Privacy Act 2020, we collect and use your personal information for the purposes described above. We rely on the following lawful bases:
- Performance of a contract: Providing the QuizSurge service you have signed up for;
- Compliance with legal obligations: Meeting our obligations under New Zealand tax, privacy, and consumer law;
- Legitimate interests: Improving our service, ensuring security, and communicating with users;
- Consent: For optional activities such as marketing communications, where you have opted in.
4. Sharing and Disclosure
We do not sell your personal information. We may share information with:
- Service providers: Stripe (payments), Firebase/Google Cloud (hosting and authentication), and AI providers for question generation;
- Quiz participants: Leaderboard names and scores are visible to other players in your quiz sessions;
- Legal authorities: Where required by New Zealand law, court order, or to protect our rights and safety.
5. Data Storage and Security
Your data is stored on secure cloud infrastructure provided by Google Cloud Platform, with servers located in Google Cloud regions. We use bank-grade encryption (TLS in transit, AES-256 at rest), secure authentication via Firebase Auth, and regular security reviews.
Despite our efforts, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
6. Your Privacy Rights Under the Privacy Act 2020
Under the New Zealand Privacy Act 2020, you have the right to:
- Access: Request a copy of the personal information we hold about you (Privacy Principle 6);
- Correction: Request that we correct any inaccurate or incomplete personal information (Privacy Principle 7);
- Deletion: Request deletion of your personal information, subject to legal retention requirements;
- Complain: Make a complaint to the Privacy Commissioner if you believe we have breached your privacy.
To exercise any of these rights, contact us at privacy@quizsurge.com. We will respond within 20 working days as required by the Privacy Act 2020.
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide our services. After account closure, we retain data for 90 days to allow for recovery, then permanently delete it, unless retention is required by New Zealand law (e.g., tax records under the Tax Administration Act 1994).
8. International Data Transfers
Your information may be transferred to and processed in countries outside New Zealand (including the United States, via Google Cloud Platform and Stripe). We ensure these transfers comply with the Privacy Act 2020 and that appropriate safeguards are in place.
9. Children's Privacy
QuizSurge is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it. Quiz participants (players who join quizzes via a link or code) do not need to create an account and may provide only a display name.
10. Cookies
We use essential cookies for authentication and analytics. For more details, please refer to our Cookie Policy. You can control cookies through your browser settings.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
- Email: privacy@quizsurge.com
- Post: QuizSurge, [Business Address], New Zealand
If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner at 0800 803 909 or visit www.privacy.org.nz.