Legal
Privacy Policy
Last updated: 19 August 2026
We take your privacy seriously. Here is exactly what data we handle and why.
On this page
1. Who Is the Data Controller
- QuizPerCard is a business name registered in Ireland under the Registration of Business Names Act 1963 (registration number 791802), operated as a sole trader by Tushar Dalvi of Co. Wicklow, Ireland. In these terms "we", "us" and "our" mean that person trading as QuizPerCard.
- For the purposes of the General Data Protection Regulation (EU) 2016/679 and the Data Protection Act 2018, the data controller for personal data collected through the Service is the individual named above, trading as QuizPerCard. A registered business name cannot itself be a controller, so responsibility rests with that person.
- We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR. Data protection queries go to tushar.dalvi@quizpercard.com.
2. Overview
- QuizPerCard ('we', 'us', 'our') is committed to protecting your personal data.
- This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights over it.
- By using QuizPerCard, you agree to the practices described in this policy.
3. Data We Collect
- Account data: name, email address, and password (hashed).
- Usage data: pages visited, questions attempted, scores, streaks, and session duration.
- Device data: browser type, IP address, operating system (collected automatically).
- Payment data: billing name, billing address (needed to determine VAT) and the last 4 digits of your card. Full card details are handled by Stripe and never reach our servers.
4. How We Use Your Data
- To provide and improve the Service — generating targeted practice, tracking your weak topics, and personalising your experience.
- To process payments and manage your subscription.
- To send you product updates, feature announcements, and support responses (you can unsubscribe anytime).
- To detect and prevent fraud or abuse.
5. Legal Basis for Processing (GDPR)
- Contract: we process your account and usage data because it is necessary to provide the Service you signed up for.
- Legal obligation: we retain payment and invoice records to meet Irish tax and accounting requirements.
- Legitimate interests: we use limited analytics and abuse-prevention data to keep the Service working and secure, balanced against your rights.
- Consent: we rely on your consent for non-essential cookies and for marketing email. You can withdraw consent at any time without affecting processing carried out beforehand.
8. Data Retention
- We retain your data for as long as your account is active, or as needed to provide the Service.
- If you delete your account, your personal data is permanently deleted within 30 days.
- Anonymous, aggregated analytics data may be retained indefinitely.
9. Your Rights
- Access: you can request a copy of the data we hold about you.
- Correction: you can update inaccurate or incomplete data from your account settings.
- Deletion: you can request deletion of your account and all associated data.
- Portability: you can request your data in a machine-readable format.
- Restriction and objection: you can ask us to restrict processing, or object to processing carried out on the basis of our legitimate interests.
- Withdraw consent: where we rely on consent, you can withdraw it at any time.
- To exercise any of these rights, contact us at: tushar.dalvi@quizpercard.com. We will respond within one month.
- You also have the right to lodge a complaint with the Irish Data Protection Commission (www.dataprotection.ie), or with the supervisory authority in your EU country of residence.
10. Children's Privacy
- Ireland's Data Protection Act 2018 sets the digital age of consent at 16. If you are under 16, a parent or guardian must give consent before you create an account.
- Because the Service covers Junior Cycle as well as Leaving Cert, we expect some users to be under 16 and ask for verifiable parental consent at sign-up in those cases.
- We do not knowingly process a child's personal data without that consent.
- If you believe a child has provided us with personal data, please contact us immediately.
11. Security
- We use industry-standard security measures including HTTPS encryption, hashed passwords, and access controls.
- No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but take all reasonable precautions.
12. Contact
- For privacy-related questions or requests, please contact: tushar.dalvi@quizpercard.com