Privacy Policy

This Privacy Policy explains how Quizara collects, uses, discloses, stores, and protects personal data when you use quizara.com, app.quizara.com, the Quizara learning application, or contact our support team (collectively, the “Services”).

Quizara is operated by LeapNext Technologies Pte. Ltd. (UEN 202607327K), with a registered address at 10 Anson Road, #26-03 International Plaza, Singapore 079903. In this Policy, “Quizara”, “we”, “us”, and “our” refer to that company. For applicable data protection laws, we act as the organisation or data controller responsible for the personal data described here.

This Policy does not govern websites or services operated by third parties that you may reach through a link from Quizara. Their own privacy notices apply.

Depending on how you use Quizara, we may collect:

• Account and identity data: your name, email address, profile image, authentication-provider identifier, account status, and related security information. If you sign in with Google, Google provides the account information you authorise it to share.
• Study preferences: interface language, selected CFA exam, exam period and curriculum, preferred study language, and exam date.
• Learning activity: Lessons opened or completed, video and whiteboard progress, Practice and Unit Test activity, answers, scores, Mock Exam attempts, question history, calculated mastery signals, and review history.
• AI feature data: prompts, AI responses, conversation history, the Lesson, question, Study Note, formula, or other page context supplied when you ask from inside the product, relevant course material, learning records, or past conversations retrieved when needed to answer your request, generation metadata, and AI Credit usage.
• Plan and transaction data: Trial or paid-plan access, access dates, AI Credit grants, order identifiers, purchase status, currency, amount, checkout and customer details, refund information, risk or failure information, and other transaction records returned by our payment provider. Our payment provider processes payment-card details; Quizara does not receive or store your complete card number.
• Support and communications: messages, attachments, feedback, and other information you send to us.
• Technical and usage data: IP address, browser and device type, operating system, requested URLs, timestamps, session and security events, error information, and performance logs generated when you use the Services.
• Website analytics data: the pages you view, the links and buttons you follow, how far down a page you read, the exam period you select, the referring website or campaign that brought you here, an approximate device category, and page performance measurements, together with a randomly generated analytics identifier stored in your browser for up to 12 months. When analytics is permitted, that identifier can connect a website visit with a later registration and permitted learning-application usage.

Please do not provide sensitive personal data, confidential information, or personal data about another person in an AI prompt or support request unless it is necessary and you are authorised to do so.

We collect personal data:

• directly from you when you create an account or contact us;
• automatically as you study, answer questions, use AI features, or interact with the Services;
• from authentication, hosting, payment, and other service providers acting on your request or on our behalf; and
• from records we create to operate access, security, support, and billing.

We use personal data to:

• provide accounts, Lessons, Practice, Unit Tests, Mock Exams, study progress, plan access, and support;
• remember your exam, curriculum, language, and study preferences;
• calculate learning progress and mastery signals, show prior work, and recommend what to revisit;
• provide AI answers and requested summaries or reviews, maintain conversation history, and calculate or settle AI Credit usage;
• process purchases, activate access, keep transaction records, and prevent duplicate or fraudulent transactions;
• authenticate users, secure the Services, investigate abuse, debug errors, and maintain reliability;
• respond to support requests and send essential service, security, plan, or policy communications;
• measure use of the public website and the application through limited event data and resulting reports, so we can improve navigation, explanations, and performance; and
• comply with law, enforce our Terms of Service, and establish, exercise, or defend legal claims.

Where a law requires a legal basis, we process personal data as necessary to perform our contract with you, comply with legal obligations, pursue legitimate interests such as security and product improvement, or based on consent. You may withdraw consent at any time, but withdrawal does not affect processing that was already lawful.

Quizara uses specialised AI features to answer CFA-related questions and help you review supported study material. When you use an AI feature, we send the AI service provider your prompt and the context reasonably needed to generate a response.

Context supplied from the page where you ask can include the Lesson, question, selected answer, Study Note, formula, or other learning material currently open.

When you ask Quizara to summarise, review, explain your performance, or help decide what to revisit, Quizara can retrieve the records relevant to that request and supply them to the AI service. These can include your Practice and question history and recorded results, product mastery signals, Quizara Lessons and Study Notes, other course content, and past Quizara conversations. Quizara does not indiscriminately read every record in your account; it retrieves relevant records when your request calls for them.

Quizara withholds the correct answer and explanation for a question until the product record confirms that they have been revealed to you. Conversation history may be stored so you can continue or revisit a discussion.

We may also provide the AI service chain with an internal account identifier, feature tags, and generation metadata needed to operate, secure, meter, and troubleshoot the requested feature.

We do not use private AI conversations to train a publicly available Quizara model. AI service providers process submitted content to provide, secure, and monitor the AI service under our provider arrangements. AI output can be inaccurate and is not used by Quizara to make legal, employment, credit, or similarly significant decisions about you.

The learning application uses cookies and similar browser storage that are necessary for authentication, session continuity, security, and saved preferences. Our hosting providers also create ordinary technical logs needed to deliver and protect the Services.

We also measure how the Services are used, so we can see which pages and explanations help candidates and which do not. This analytics is provided by PostHog and Google Analytics, which store a randomly generated identifier in your browser for up to 12 months. The identifier may be shared between quizara.com and app.quizara.com so we can connect the website visit and its campaign source with a later registration and, when application analytics is also permitted, subsequent product use.

Public-website events do not include your name or email address. If a website visit continues into registration, the analytics identifier may later be associated with an internal Quizara account identifier; we therefore treat it as personal data rather than claiming it is anonymous. We do not use it for advertising: Google advertising features, advertising personalisation, and session recording are switched off on the public website. Quizara does not use advertising cookies or third-party cross-site behavioural advertising trackers, and we do not sell personal data or share it for cross-context behavioural advertising.

On the public website, limited product-improvement analytics starts by default for visitors located in Australia, Hong Kong, Singapore, and the United States. We use it only for product improvement and service reliability. You can switch it off at any time using the control described below.

In India and every other location not listed above, including the European Economic Area and the United Kingdom, we ask for consent before starting PostHog or Google Analytics. To decide which privacy choice to show, we use only the country code supplied by our hosting provider, not a precise location. Until you choose “Allow analytics cookies”, the public website does not create the analytics identifier, store analytics attribution in your browser, or send analytics events. If our hosting provider does not supply a reliable country code, analytics also waits for consent.

If your browser sends a recognised Global Privacy Control signal, Quizara treats it as an instruction not to run optional analytics in that browser: no consent prompt is shown, collection stays off, and analytics identifiers set by this website are removed. In every region, you can also refuse analytics in the consent prompt where one is shown, or switch website analytics off at any time using the “Do not use my visits for analytics” control in the footer of every page on this website. Your choice is stored in your browser, stops collection immediately, and clears the analytics identifiers this website has set.

The learning application applies the same regional approach to basic product analytics and offers account-level controls in Settings. When application analytics is permitted, product events may be associated with your internal Quizara account identifier. We configure those events not to send names, email addresses, answer text, question text, or AI conversation text.

Masked session replay is a separate, optional application setting in every region. It remains off unless you specifically allow it. When enabled, PostHog records interaction and timing information for reliability and product improvement, while inputs and page text are masked and the main learning-content area is blocked. Session replays are retained for up to 30 days. Session recording remains disabled on the public website.

Refusing or withdrawing analytics permission stops future optional collection; it does not by itself delete data that was lawfully collected earlier. You can request access to or deletion of eligible historical personal data using the contact details in the “Changes and how to contact us” section below. Withdrawal does not affect the lawfulness of processing that occurred before it.

Blocking essential cookies may prevent login or other parts of the application from working.

We may disclose personal data to:

• Infrastructure providers that host the website, database, authentication, files, and application;
• AI service providers that process prompts and relevant learning context to generate a requested response;
• Payment providers that process checkout, payment, fraud prevention, and refunds;
• Analytics providers — currently PostHog and Google Analytics — that receive website and application usage events on our behalf so we can measure and improve the Services;
• Operations and communications providers used to deliver limited registration, reliability, service-capacity, and aggregate operational notifications. These notifications may contain limited account identifiers, a masked email address, and technical diagnostic details;
• Professional advisers and authorities when reasonably necessary for legal, audit, accounting, security, or compliance purposes; and
• Transaction counterparties if we are involved in a merger, financing, acquisition, reorganisation, or sale of all or part of our business, subject to appropriate confidentiality and data-protection safeguards.

Service providers may use personal data only to perform services for us or as otherwise permitted by law. We do not disclose personal data to data brokers.

Quizara is operated from Singapore, and our service providers may process personal data in Singapore, the United States, or other countries. Those countries may have data-protection laws different from the laws where you live.

Where required, we use contracts, recognised transfer mechanisms, and other safeguards designed to provide a standard of protection comparable to applicable law.

We retain personal data for as long as reasonably necessary to provide the Services and for the purposes described in this Policy. Retention depends on the type of record, whether your account remains active, and legal, security, accounting, dispute, and backup requirements.

• Account, preference, learning, and AI conversation data is generally retained while your account is active so that history and progress remain available.
• Transaction, access, and AI Credit records may be retained for accounting, fraud prevention, dispute handling, and legal compliance after an account closes.
• Security and technical logs are kept only as long as reasonably needed for security, reliability, and investigation.

When retention is no longer necessary, we delete or de-identify the data. Deletion from encrypted backups may occur on the normal backup rotation schedule.

We use administrative, technical, and organisational safeguards designed to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include access controls, authentication, encrypted transport, provider security controls, logging, and limiting access to people and systems that need the data.

No online service is completely secure. You are responsible for protecting access to your Google account and devices and for notifying us promptly if you suspect unauthorised access to Quizara.

Depending on your location and applicable law, you may ask us to:

• confirm whether we process your personal data;
• provide access to or a copy of your personal data;
• correct inaccurate or incomplete data;
• delete data that we no longer need or must not process;
• restrict or object to certain processing;
• provide data you supplied in a portable, machine-readable format;
• withdraw consent where processing relies on consent; or
• complain to Singapore’s Personal Data Protection Commission or the data-protection authority where you live.

Submit a request to support@leapnext.tech with the subject “Privacy Request”. We may verify your identity and may retain information where an exception or legal obligation applies. We will not discriminate against you for exercising a privacy right.

Quizara is intended for CFA exam candidates and is not directed to children under 16. We do not knowingly collect personal data from a child under 16 without the authorisation required by applicable law. If you believe a child has provided personal data improperly, contact us so we can investigate and take appropriate action.

We may update this Policy as the Services or legal requirements change. We will post the revised version here, update the effective date, and provide additional notice when a material change requires it.

For questions, complaints, or privacy requests, contact our Data Protection Contact:

LeapNext Technologies Pte. Ltd.
UEN 202607327K
10 Anson Road, #26-03 International Plaza, Singapore 079903
Email: support@leapnext.tech