Privacy Policy
Last updated: 23 August 2026
1. Introduction
This Privacy Policy explains how the AI Quiz Generator ("QuizGen") on mrwang.co.uk collects, uses, stores and protects information when you use QuizGen.
I take the protection of personal information seriously and aim to process personal information in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, where applicable.
This Privacy Policy should be read alongside the Terms of Use.
2. Who is responsible for your information?
The organisation or individual responsible for determining how and why personal information is processed is known as the "data controller" under data protection law.
For the purposes of QuizGen, the relevant controller will depend on the nature and purpose of the processing involved.
Service operator: Timothy Wang (mrwang.co.uk)
Contact: Complete this form to get in touch.
If you are using QuizGen on behalf of a school, college, local authority or other organisation, that organisation may also have responsibilities as a data controller in relation to personal information that it provides to QuizGen.
If you are unsure about who is responsible for particular information, please contact me.
3. What information do I collect?
Depending on how you use QuizGen, I may process the following information.
Information you provide
This may include:
- text entered into the quiz generator;
- quiz topics and instructions;
- uploaded lesson files;
- generated quiz content;
- information included within uploaded documents; and
- information you provide when contacting me.
Technical information
I may also process technical information required to operate and secure QuizGen, such as:
- IP address;
- browser and device information;
- date and time of requests;
- technical logs;
- error information; and
- information about how features of QuizGen are used.
I seek to collect only information that is reasonably necessary for the purposes described in this Privacy Policy.
4. Information contained in uploaded lesson materials
Uploaded lesson materials may contain personal information.
For example, a document could contain:
- teacher names;
- pupil names;
- examples of pupil work;
- photographs;
- comments or feedback;
- email addresses; or
- other information relating to identifiable individuals.
You should remove personal information that is not necessary before uploading a file.
QuizGen is not intended to be used as a repository for pupil records or other sensitive educational information.
If personal information is included in an uploaded file, that information may be processed as part of providing the requested Service.
5. Why do I process information?
I may process information for the following purposes.
Providing QuizGen
QuizGen processes submitted information so that QuizGen can:
- process uploaded files;
- extract relevant lesson content;
- generate quizzes and other requested resources;
- return generated content to you; and
- maintain the functionality of QuizGen.
Maintaining and securing QuizGen
I may process technical information to:
- monitor the operation of QuizGen;
- identify and resolve errors;
- detect misuse;
- protect against security threats; and
- maintain the reliability of QuizGen.
Improving QuizGen
I may analyse information about use of QuizGen to understand how it is being used and identify ways to improve its functionality, reliability and educational usefulness.
This may include analysing:
- the number of quiz generation requests;
- broad subject areas;
- types of resources uploaded;
- features used;
- generated content;
- system performance;
- errors; and
- general usage patterns.
Where practical, information used for these purposes will be anonymised or aggregated.
Educational research and evaluation
Anonymised or aggregated information may be used to evaluate QuizGen and investigate its educational usefulness.
This may include practitioner inquiry, educational research, presentations, professional meetings, conferences, reports and publications.
For example, I may report that QuizGen generated a particular number of quizzes during a period or was used across a particular range of subject areas.
I will not intentionally publish information that directly identifies individuals or pupils as part of such statistics.
6. My lawful bases for processing
Under the UK GDPR, I need a lawful basis for processing personal information.
Depending on the specific processing activity, I may rely on the following lawful bases.
Contract
Where processing is necessary to provide QuizGen requested by you, I may rely on the contractual necessity lawful basis.
For example, processing an uploaded lesson file may be necessary to generate the quiz you have requested.
Legitimate interests
I may rely on legitimate interests where processing is necessary for purposes such as:
- maintaining and securing QuizGen;
- detecting misuse;
- troubleshooting technical problems;
- evaluating and improving QuizGen; and
- understanding general patterns of Service usage.
Where I rely on legitimate interests, I will consider whether the processing is necessary and whether the interests, rights and freedoms of individuals override my interests.
Legal obligations
I may process information where this is necessary to comply with a legal obligation.
The lawful basis used will depend on the particular processing activity.
7. Use of AI services
QuizGen uses artificial intelligence technology to generate quiz content.
When you submit information for quiz generation, relevant content may be transmitted to a third-party AI service provider for processing.
Currently, this includes:
Microsoft Azure / Azure OpenAI
The AI provider processes submitted information as necessary to provide the AI functionality used by QuizGen.
I do not represent that information submitted to QuizGen will remain exclusively within my own infrastructure.
You should therefore avoid submitting information that is unnecessarily sensitive or confidential.
8. Third-party service providers
I use third-party providers for services including:
- website hosting;
- database hosting;
- file storage;
- artificial intelligence processing;
- security;
- analytics; and
- technical infrastructure.
Where a third party processes personal information on my behalf, appropriate contractual and data protection arrangements will be put in place where required.
9. International transfers
Some third-party service providers may process information outside the United Kingdom.
Where personal information is transferred internationally, I will take appropriate steps to ensure that the transfer is carried out in accordance with applicable data protection law.
This may include relying on an adequacy decision or appropriate safeguards where required.
10. How long do I keep information?
I do not keep personal information for longer than is reasonably necessary for the purpose for which it was collected.
My current retention periods are:
| Type of information | Retention |
|---|---|
| Uploaded lesson files | 1 year |
| Extracted lesson text | Data is passed onto third-party service providers and not retained by QuizGen |
| Generated quiz content | Data is passed onto third-party service providers and not retained by QuizGen |
| Technical and error logs | 7 days |
| Anonymised/aggregated statistics | May be retained indefinitely where they can no longer reasonably identify an individual |
Retention periods may vary where information needs to be retained for security, legal, technical or other legitimate purposes.
When information is no longer required, I will seek to delete it securely or anonymise it where appropriate.
11. Anonymisation and aggregated statistics
I may create anonymised or aggregated information from Service usage.
This may include statistics such as:
- number of quizzes generated;
- number of generation requests;
- broad subject areas;
- types of educational resources used;
- general usage trends; and
- technical performance statistics.
Such information may be used in:
- educational presentations;
- conferences;
- practitioner inquiry;
- research;
- reports;
- publications; and
- demonstrations of QuizGen.
Where information has been effectively anonymised so that individuals can no longer reasonably be identified, it is no longer personal data for data protection purposes.
I will take reasonable steps to prevent statistics from being presented in a way that could identify an individual, particularly where the number of users represented by a statistic is small.
12. Security
I take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, destruction, alteration or disclosure.
However, no online service can guarantee absolute security.
You should therefore avoid submitting information that is unnecessarily sensitive or confidential.
13. Your rights
Depending on the circumstances and the lawful basis applicable to the processing, you may have rights under UK data protection law.
These may include the right to:
- request access to your personal information;
- request correction of inaccurate information;
- request deletion of personal information;
- request restriction of processing;
- object to certain processing;
- request data portability in certain circumstances; and
- withdraw consent where processing is based on consent.
Some rights are subject to legal conditions and exemptions, and not every right will apply to every type of processing.
If you wish to exercise a right or ask a question about how your information is being processed, contact me here.
14. Right to object
Where I process personal information based on legitimate interests, you may have the right to object to that processing.
If you object, I will consider your request in accordance with applicable data protection law.
15. Children's information
QuizGen is primarily intended for use by teachers and other educational professionals.
You should not use QuizGen to collect personal information about pupils or children unless this is necessary for a specific purpose and an appropriate lawful basis exists.
Where lesson materials contain information about children or young people, you should ensure that they have the necessary authority and lawful basis to share that information with QuizGen.
Where possible, pupil names, identifiers and other unnecessary personal information should be removed before uploading materials.
16. Copyright and confidential information
QuizGen processes material submitted by you in order to provide its functionality.
You are responsible for ensuring that they have the necessary rights and permissions to submit any material.
Please do not upload confidential information belonging to another person or organisation unless you are authorised to do so.
17. Cookies and similar technologies
QuizGen may use cookies or similar technologies that are necessary to operate the website.
Where non-essential cookies or similar technologies are used, additional information and controls will be provided where required by applicable law.
18. Changes to this Privacy Policy
I may update this Privacy Policy from time to time to reflect changes to:
- QuizGen;
- the information I process;
- third-party providers;
- legal requirements; or
- my data-processing practices.
The date at the top of this page indicates when the Privacy Policy was last updated.
Where required, I will provide appropriate notice of significant changes.
19. Complaints
If you have concerns about how your personal information has been processed, please contact me first using the details in the "Contact" section below.
You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), if you believe that your personal information has been processed unlawfully.
20. Contact
If you have any questions about this Privacy Policy or how QuizGen processes personal information, please contact me here.