Privacy Policy

This Privacy Policy explains how Quizara collects, uses, discloses, stores, and protects personal data when you use quizara.com, app.quizara.com, the Quizara learning application, or contact our support team (collectively, the “Services”).

Quizara is operated by LeapNext Technologies Pte. Ltd. (UEN 202607327K), with a registered address at 10 Anson Road, #26-03 International Plaza, Singapore 079903. In this Policy, “Quizara”, “we”, “us”, and “our” refer to that company. For applicable data protection laws, we act as the organisation or data controller responsible for the personal data described here.

This Policy does not govern websites or services operated by third parties that you may reach through a link from Quizara. Their own privacy notices apply.

Depending on how you use Quizara, we may collect:

• Account and identity data: your name, email address, profile image, authentication-provider identifier, account status, and related security information. If you sign in with Google, Google provides the account information you authorise it to share.
• Study preferences: language, selected CFA exam and exam period, curriculum preference, target date, and study-plan settings.
• Learning activity: Lessons opened or completed, video and whiteboard progress, Practice and Unit Test activity, answers, scores, Mock Exam attempts, question history, calculated mastery signals, and review history.
• AI feature data: prompts, AI responses, conversation history, the Lesson, question, note, or completed review context supplied to an AI feature, generation metadata, and AI Credit usage.
• Plan and transaction data: Trial or paid-plan access, access dates, AI Credit grants, order identifiers, purchase status, currency, amount, checkout and customer details, refund information, risk or failure information, and other transaction records returned by our payment provider. Our payment provider processes payment-card details; Quizara does not receive or store your complete card number.
• Support and communications: messages, attachments, feedback, and other information you send to us.
• Technical and usage data: IP address, browser and device type, operating system, requested URLs, timestamps, session and security events, error information, and performance logs generated when you use the Services.
• Website analytics data: the pages you view, the links and buttons you follow, how far down a page you read, the exam period you select, the referring website or campaign that brought you here, an approximate device category, and page performance measurements, together with a randomly generated analytics identifier stored in your browser.

Please do not provide sensitive personal data, confidential information, or personal data about another person in an AI prompt or support request unless it is necessary and you are authorised to do so.

We collect personal data:

• directly from you when you create an account or contact us;
• automatically as you study, answer questions, use AI features, or interact with the Services;
• from authentication, hosting, payment, and other service providers acting on your request or on our behalf; and
• from records we create to operate access, security, support, and billing.

We use personal data to:

• provide accounts, Lessons, Practice, Unit Tests, Mock Exams, study progress, plan access, and support;
• remember your exam, curriculum, language, and study preferences;
• calculate learning progress and mastery signals, show prior work, and recommend what to revisit;
• provide AI answers and reviews, maintain conversation history, and calculate or settle AI Credit usage;
• process purchases, activate access, keep transaction records, and prevent duplicate or fraudulent transactions;
• authenticate users, secure the Services, investigate abuse, debug errors, and maintain reliability;
• respond to support requests and send essential service, security, plan, or policy communications;
• measure how the public website and the application are used, in aggregate, so we can improve navigation, explanations, and performance; and
• comply with law, enforce our Terms of Service, and establish, exercise, or defend legal claims.

Where a law requires a legal basis, we process personal data as necessary to perform our contract with you, comply with legal obligations, pursue legitimate interests such as security and product improvement, or based on consent. You may withdraw consent at any time, but withdrawal does not affect processing that was already lawful.

Quizara uses specialised AI features to answer CFA-related questions and help you review supported study material. When you use an AI feature, we send the AI service provider your prompt and the context reasonably needed to generate a response.

Context can include the Lesson, question, selected answer, Study Note, formula, or completed review currently open. The global Ask AI entry receives limited basic study context; it does not automatically read your entire account or complete learning history. Conversation history may be stored so you can continue or revisit a discussion.

We may also provide the AI service chain with an internal account identifier, feature tags, and generation metadata needed to operate, secure, meter, and troubleshoot the requested feature.

We do not use private AI conversations to train a publicly available Quizara model. AI service providers process submitted content to provide, secure, and monitor the AI service under our provider arrangements. AI output can be inaccurate and is not used by Quizara to make legal, employment, credit, or similarly significant decisions about you.

The learning application uses cookies and similar browser storage that are necessary for authentication, session continuity, security, and saved preferences. Our hosting providers also create ordinary technical logs needed to deliver and protect the Services.

We also measure how the Services are used, so we can see which pages and explanations help candidates and which do not. This analytics is provided by PostHog and Google Analytics, which store a randomly generated identifier in your browser so that repeat visits from the same browser are counted once rather than as separate people. That identifier may be shared between quizara.com and app.quizara.com so that one visit continuing into the learning application is not counted twice.

Website analytics does not use your name or email address and is not used to identify you personally on the public website. We do not use it for advertising: Google advertising features, advertising personalisation, and session recording are switched off. Quizara does not use advertising cookies or third-party cross-site behavioural advertising trackers, and we do not sell personal data or share it for cross-context behavioural advertising.

For visitors in the European Economic Area and the United Kingdom, we ask for consent before starting PostHog or Google Analytics. Until you choose “Allow analytics”, the public website does not create analytics identifiers, store analytics data in your browser, or send analytics events. We use the country-level location supplied by our hosting provider only to choose the appropriate consent mode; if that location is unavailable, analytics waits for consent.

In other regions, website analytics is active by default where permitted, and we rely on our legitimate interest in understanding and improving the Services for the resulting data processing. You can refuse analytics in the consent prompt where one is shown, or switch website analytics off at any time using the “Do not use my visits for analytics” control in the footer of every page on this website. Your choice is stored in your browser, stops collection immediately, and clears the analytics identifiers this website has set. Inside the learning application, analytics follows the separate analytics choice offered there.

The learning application does not send product analytics to PostHog or Google Analytics until you choose “Allow Analytics”. If you consent, application events may be associated with your internal Quizara account identifier. We configure application analytics not to send names, email addresses, answer text, question text, or AI conversation text.

With your application analytics consent, PostHog may also provide masked session replay for reliability and product improvement. The replay is configured to mask inputs and page text and to block the main learning-content area. Session recording remains disabled on the public website.

Blocking essential cookies may prevent login or other parts of the application from working.

We may disclose personal data to:

• Infrastructure providers that host the website, database, authentication, files, and application;
• AI service providers that process prompts and relevant learning context to generate a requested response;
• Payment providers that process checkout, payment, fraud prevention, and refunds;
• Analytics providers — currently PostHog and Google Analytics — that receive website and application usage events on our behalf so we can measure and improve the Services;
• Operations and communications providers used to deliver limited registration, reliability, service-capacity, and aggregate operational notifications. These notifications may contain limited account identifiers, a masked email address, and technical diagnostic details;
• Professional advisers and authorities when reasonably necessary for legal, audit, accounting, security, or compliance purposes; and
• Transaction counterparties if we are involved in a merger, financing, acquisition, reorganisation, or sale of all or part of our business, subject to appropriate confidentiality and data-protection safeguards.

Service providers may use personal data only to perform services for us or as otherwise permitted by law. We do not disclose personal data to data brokers.

Quizara is operated from Singapore, and our service providers may process personal data in Singapore, the United States, or other countries. Those countries may have data-protection laws different from the laws where you live.

Where required, we use contracts, recognised transfer mechanisms, and other safeguards designed to provide a standard of protection comparable to applicable law.

We retain personal data for as long as reasonably necessary to provide the Services and for the purposes described in this Policy. Retention depends on the type of record, whether your account remains active, and legal, security, accounting, dispute, and backup requirements.

• Account, preference, learning, and AI conversation data is generally retained while your account is active so that history and progress remain available.
• Transaction, access, and AI Credit records may be retained for accounting, fraud prevention, dispute handling, and legal compliance after an account closes.
• Security and technical logs are kept only as long as reasonably needed for security, reliability, and investigation.

When retention is no longer necessary, we delete or de-identify the data. Deletion from encrypted backups may occur on the normal backup rotation schedule.

We use administrative, technical, and organisational safeguards designed to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include access controls, authentication, encrypted transport, provider security controls, logging, and limiting access to people and systems that need the data.

No online service is completely secure. You are responsible for protecting access to your Google account and devices and for notifying us promptly if you suspect unauthorised access to Quizara.

Depending on your location and applicable law, you may ask us to:

• confirm whether we process your personal data;
• provide access to or a copy of your personal data;
• correct inaccurate or incomplete data;
• delete data that we no longer need or must not process;
• restrict or object to certain processing;
• provide data you supplied in a portable, machine-readable format;
• withdraw consent where processing relies on consent; or
• complain to Singapore’s Personal Data Protection Commission or the data-protection authority where you live.

Submit a request to support@leapnext.tech with the subject “Privacy Request”. We may verify your identity and may retain information where an exception or legal obligation applies. We will not discriminate against you for exercising a privacy right.

Quizara is intended for CFA exam candidates and is not directed to children under 16. We do not knowingly collect personal data from a child under 16 without the authorisation required by applicable law. If you believe a child has provided personal data improperly, contact us so we can investigate and take appropriate action.

We may update this Policy as the Services or legal requirements change. We will post the revised version here, update the effective date, and provide additional notice when a material change requires it.

For questions, complaints, or privacy requests, contact our Data Protection Contact:

LeapNext Technologies Pte. Ltd.
UEN 202607327K
10 Anson Road, #26-03 International Plaza, Singapore 079903
Email: support@leapnext.tech