⚠️ DRAFT — NOT LEGAL ADVICE — This document is a working draft prepared for attorney review. It does not constitute a finalized privacy policy. Do not rely on it as legal guidance.

Legal

Privacy Policy

Effective date: May 21, 2026  ·  Last updated: May 25, 2026  ·  Questions? support@quiznote.online

The short version: QuizNote is a free music-theory practice app. Right now, all your learning data stays on your device — no accounts, no login, no server-side storage. We don't show ads and we don't sell data. This policy also describes features we are building (accounts, cloud sync, payments, child profiles) so you can see what's coming. Anything not yet live is clearly marked PLANNED.

01 Who We Are

QuizNote ("we," "us," or "our") is an independent music education project operating at quiznote.online. QuizNote is currently operated as an unincorporated project. A formal legal entity may be established in the future, at which point this policy will be updated.

This Privacy Policy explains how we handle information when you use our web application (the "App"), including features that are active today and features we plan to add in the future.

02 What's Active Now vs. What's Planned

QuizNote is in active development. Some features described in this policy are live today; others are planned but not yet available. We include both so you can see where we're headed and so the policy is ready for attorney review ahead of launch.

Active now (local-only beta):

Planned (not yet active — behind feature flags currently turned off):

Each planned feature will be activated only after this policy has been finalized by legal counsel. We will update the "Last updated" date when features go live, and we will provide prominent notice of material changes before they take effect.

03 What We Collect

QuizNote is designed to collect as little information as possible. The table below covers both what we collect today and what we will collect when planned features go live.

StatusTypeWhat it includesWhere it lives
TODAY Profile data A randomly-generated profile ID, a nickname you choose, a color, an optional self-reported experience level, and timestamps for when the profile was created and last used Stored only in your browser's local storage. Never transmitted to us. You can have multiple profiles on one device and delete any profile at any time from within the App.
TODAY Practice round log An append-only log of completed rounds: which profile, which module, difficulty tier, number of questions, number correct, time taken, and completion timestamp Stored only in your browser's local storage. Used by the App to show personal-best scores and recommend what to practice next. Not transmitted to us.
TODAY UI preferences Selected difficulty tier per module, sound on/off, timed-mode setting, and similar per-module UI state Stored only in your browser's local storage. Convenience only.
TODAY Technical / hosting logs Browser type, OS, approximate region, referring URL, pages visited, time of visit Collected automatically by Vercel (our host) for uptime and performance. Not used to identify you personally. See Section 8.
TODAY Voluntary contact Your email and message, if you contact us directly Used only to respond to your inquiry. Not added to any list or shared.
PLANNED Account credentials Name and email address provided by your Apple or Google sign-in Stored on our server, linked to your QuizNote account. Used for authentication and account recovery. We do not receive or store your Apple/Google password.
PLANNED Synced practice data The same profile data, practice round logs, and preferences described above — synced from your device to the cloud when you are signed in Stored on our server to enable cross-device access and backup. The App is offline-first: it works without a connection and syncs when one is available.
PLANNED Payment data Billing name, email, and payment-method token (card details go directly to Stripe — see Section 7) Stripe processes and stores card details. We receive only a token, the last four digits of the card, expiration date, and billing email — enough to show you your subscription status and issue receipts.
PLANNED Child profile data Nickname, color, practice round logs — linked to a parent/guardian's account Synced to the cloud only after verifiable parental consent. Local-only child play on a parent's device (without sync) does not constitute collection of children's data — see Section 9.
PLANNED Diagnostic / error data Technical error reports: the error message and stack trace, the module or screen where it occurred, app version, browser and operating system, screen size, and a timestamp. Scrubbed of profile nicknames and other identifiers before sending. When enabled, sent automatically (or on an opt-in basis) to our error-reporting provider or endpoint. This is off until cloud features launch. Today: you may choose to email us diagnostics yourself — that voluntary message is covered above under “Voluntary contact,” and nothing is transmitted automatically.

We do not collect real names, email addresses, or account information during normal App use today. There is no login or registration system at this time. Nicknames are freely chosen and are not verified as real names.

Sharing and export (on your device). The progress dashboard lets you create a shareable summary of your own practice — a “Practice Notes” image (offered through your device’s share sheet) or a printable / PDF page. These are generated entirely on your device from the local data described above and may include the profile nickname, streak, practice time, and mastery counts. QuizNote does not receive, store, or transmit the generated image or PDF — whether you save it, print it, or share it to another app is entirely your choice, and any destination you send it to is governed by that destination’s own terms. This feature involves no server-side collection by us.

04 What We Don't Do

05 Cookies and Local Storage

QuizNote does not use advertising cookies or third-party tracking cookies.

We use browser local storage (not cookies) on your device to save the profile data, practice round logs, and UI preferences described in Section 3. This data is stored entirely on your device and is not transmitted to our servers under the current local-only beta.

Our hosting provider (Vercel) may set minimal technical cookies necessary for the delivery and security of the App. These are not used to track you across other websites.

PLANNED When accounts and cloud sync are available, we may use an authentication cookie or token to keep you signed in across sessions. This will be a first-party, strictly-necessary cookie — not used for tracking or advertising.

06 Cloud Sync and Accounts PLANNED

This feature is not yet active. The following describes how it will work when launched.

Accounts: You will be able to create a QuizNote account by signing in with your Apple or Google account. We will receive your name and email address from the identity provider. We will not receive or store your Apple or Google password.

Cloud sync: When you are signed in, your practice data (profiles, round logs, preferences) will sync to our servers so you can access it from any device. The App is designed to be offline-first — it works without an internet connection and syncs automatically when a connection is available.

Without an account: QuizNote will continue to work fully without an account. Unsigned-in users will have the same local-only experience described in this policy. Creating an account is optional.

Signing out or deleting your account: You can sign out at any time, which stops syncing. You can request full account deletion, which will remove all synced data from our servers. Local data on your device will remain until you clear it yourself.

07 Payments PLANNED

This feature is not yet active. The following describes how it will work when launched.

QuizNote will offer an optional paid tier. Payment processing will be handled entirely by Stripe via Stripe Checkout (a hosted payment page). Here is how the data flows:

Stripe is a PCI DSS Level 1 certified payment processor. See Stripe's Privacy Policy for how they handle your payment information.

Pricing cohorts: We may offer different pricing to users who joined during the beta period ("beta founders") versus users who join later. Cohort membership is determined by your account creation date and is stored on our server. It does not involve any additional data collection.

08 Third-Party Services

QuizNote relies on the following third-party services. Each has its own privacy practices:

Active now:

Planned (not yet active):

We do not use analytics platforms, ad networks, social-media pixels, or any other data-collecting third-party services beyond those listed above.

09 Children's Privacy

QuizNote is designed to be safe and appropriate for learners of any age, including children. We take children's privacy seriously and have designed our system with the following principles:

Today (local-only beta):

The App does not collect real names, email addresses, phone numbers, photographs, geolocation, or any other personally identifiable information from any user during normal use. All profile data — including nicknames and practice round logs — is stored locally on the device and is never transmitted to our servers. Under the current local-only architecture, no children's data is "collected" within the meaning of COPPA because nothing leaves the device.

PLANNED Child profiles (under accounts):

Sharing a child’s progress. The dashboard’s “Practice Notes” share / export feature renders the profile nickname together with progress stats into an image or PDF on the device. For a child profile this artifact is generated locally and leaves the device only if a parent or guardian chooses to share it; QuizNote never transmits or receives it. Because nicknames are freely chosen and not verified, we treat them as non-identifying — but parents and guardians control whether any such summary is shared.

If we inadvertently receive personal information from a child via email or another contact channel, we will delete it promptly. Parents and guardians with concerns can reach us at support@quiznote.online.

10 Data Retention

Today (local-only beta):

PLANNED When accounts are available:

11 Your Rights

Today (local-only beta):

PLANNED When accounts are available:

If you are in the EEA, UK, or California, you may have additional rights under GDPR, UK GDPR, or the CCPA/CPRA. These may include the right to data portability, the right to restrict processing, and the right to object to processing. Contact us at support@quiznote.online with any request.

12 Geographic Availability

Today (local-only beta): QuizNote is available to anyone with a web browser. Since no data leaves your device, geographic restrictions are not necessary from a privacy standpoint.

PLANNED When accounts launch: QuizNote accounts will initially be available to United States users only. During signup, users will be asked to confirm their country of residence. We may use geo-IP as a secondary check to help enforce this restriction.

The US-only scope simplifies our initial compliance obligations while we focus on getting the product right. We plan to expand to additional countries in the future, updating this policy and our compliance practices accordingly.

Users outside the US can continue to use QuizNote in local-only mode (without an account) at any time.

13 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page.

For significant changes — especially the activation of planned features described here (accounts, cloud sync, payments, child profiles) — we will provide prominent notice in the App before the change takes effect.

Continued use of QuizNote after an update constitutes acceptance of the revised policy.

14 Contact Us

Privacy questions, concerns, or requests:

QuizNote
Email: support@quiznote.online
Website: quiznote.online

We aim to respond within 10 business days.