Security

Families trust us with sensitive information, and we take that seriously. This overview describes the safeguards we use to protect data on QuizCademy. Our practices evolve as threats and best practices change.

Encryption

Data is encrypted in transit using industry-standard TLS, so information moving between your device and QuizCademy is protected. Data at rest in our databases and backups is encrypted as well.

Access controls

Access to personal data is limited to authorized personnel who need it to operate the Service, and is governed by the principle of least privilege. Administrative access requires strong authentication, and we log access to sensitive systems.

Infrastructure

We run on reputable cloud infrastructure with strong physical and network security. We separate environments, keep systems patched, and take regular backups so we can recover data if something goes wrong.

Payments

Payments are handled by a PCI-compliant payment processor. We do not store full card numbers on our servers.

Monitoring and response

We monitor for unusual activity and maintain procedures to respond to security incidents. If an incident affects your personal information, we will notify affected users and regulators as required by law.

What you can do

• Use a strong, unique password and keep it private;
• Make sure children's accounts are managed by a parent or guardian; and
• Contact us right away if you suspect unauthorized access to your account.

Responsible disclosure

If you believe you have found a security vulnerability, we welcome your report and will work with you to resolve it. Please contact us at [email protected] and give us a reasonable opportunity to address the issue before public disclosure.

Contact

For security questions, contact [email protected], or reach our legal team at [email protected].