Privacy Policy

Last updated October 30, 2026

Learnify ("Learnify", "we", "us", or "our") takes your privacy seriously. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use our websites (learnify.fun and quizify.fun), desktop and mobile applications, and related services (collectively, the "Services").

Quizify and Learnify. Quizify, at quizify.fun, is Learnify's quiz games for the class screen. It uses the same account and the same systems as Learnify, so this policy covers it in full: where it says Learnify, it means Learnify and Quizify.

Learnify is a classroom management platform designed for teachers, parents, and educational institutions. By using our Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our Services.

1. Information We Collect

We collect information to provide and improve our classroom management services. The types of information we collect include:

a) Information You Provide

• Account information: Email address, name, and password when you create an account
• Classroom data: Classroom names, settings, configurations, schedules, and tabs you create
• Student information: Names, educational progress data (points, levels, achievements, skills), attendance records, and notes that teachers enter for their students
• User-generated content: Games, questions, and educational materials you create in Quizify (formerly the Learniverse feature)
• Communication data: Emails and messages you send through our platform (e.g., classroom invites, parent invitations)

b) Information Collected Automatically

• Usage information: When you sign in and were last active, and which features and pages you use (see Section 4)
• Device information: Browser type, device type, operating system, and screen size
• Session identifiers: A random identifier for each open tab, used to keep your open screens in sync and your sign-in secure

c) Subscription and Billing Information

If you subscribe to a paid plan (Learnify Plus, Pro or Max, or Quizify Plus), we collect payment details and subscription status. Payment processing is handled by Paddle, our merchant of record (see Section 5); we do not store your full credit card number on our servers. Lifetime plans are granted by Learnify at our discretion and do not involve payment collection.

Student data entered by teachers (such as student names and points) is stored securely and is only accessible to authorized teachers and connected parents within the classroom.

2. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data based on the following legal grounds:

• Contract performance: Processing necessary to provide you with the Services you requested
• Legitimate interests: Processing necessary for our legitimate interests, such as improving our Services, preventing fraud, and ensuring platform security, where those interests are not overridden by your rights
• Consent: Where you have given us explicit consent (e.g., for marketing communications or optional features like AI-generated content)
• Legal obligation: Where we need to process your data to comply with applicable law

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our classroom management Services
• To create and manage your account
• To provide customer support and respond to your inquiries
• To understand which features are used, so we can improve them
• To keep accounts secure and to detect unauthorized access
• To communicate with you about updates, features, and important notices
• To detect, prevent, and address technical issues and security threats
• To process subscription payments and manage billing
• To generate AI questions when you choose to use that feature

4. Usage Data and Analytics

To run Learnify and make it better, we keep basic usage information: when you sign in, when you were last active, and which features you use. We use it to operate the Services, to help you when you contact support, and to keep accounts secure. It is not shown to other users, and we never sell it or use it for advertising.

Our public pages (the landing page and legal pages) count visits with Cloudflare Web Analytics. It sets no cookies, does not store your IP address, does not identify you, and does not follow you to other websites. It does not run inside your classroom.

When you sign up, we note the website you came from (for example, a search engine or a shared link), and we may ask you once how you found Learnify. Answering is optional; if you answer, your reply is stored with your account. We use both only to learn how teachers find us, never to target you.

5. Third-Party Services and Data Processors

We use the following third-party services to operate our platform. Each processes data on our behalf and under our instructions:

• Supabase: Our backend infrastructure provider, used for database hosting, authentication, real-time features, and serverless functions. Your account data, classroom data, and student data are stored on Supabase servers.
• Google OAuth: If you choose to sign in with Google, Google processes your authentication data according to their own privacy policy. We receive only your name and email address.
• Facebook Login: If you choose to sign in with Facebook, Meta processes your authentication data according to their own privacy policy. We receive only your name and email address.
• Paddle: Our payment provider and merchant of record for paid subscriptions. Paddle processes your payment details, billing name, email, and country under its own privacy policy; we never receive your full card number. On pages that show prices or open a checkout, Paddle loads its own scripts (including Paddle Retain, also known as ProfitWell), which run under Paddle's policy.
• Mailgun: Used for sending transactional emails (classroom invites, parent invitations, security notifications, email verification). Your email address is shared with Mailgun for delivery purposes only.
• Cloudflare R2: Used for storing uploaded images (such as game images and classroom assets). Uploaded files are stored on Cloudflare's infrastructure.
• Cloudflare Web Analytics: Counts visits to our public pages (see Section 4). No cookies are set, and no account, classroom, or student data is sent.
• Pixabay, Klipy, and Iconify: Image, GIF, and icon libraries. When you search for an image or a GIF while making a game, or when icons load, these services receive the search words or icon names and the ordinary technical details of the request. No account, classroom, or student data is sent to them.
• OpenRouter and Microsoft Azure: Run the AI behind question generation on our paid plans (Learnify Plus, Pro and Max, and Quizify Plus). Requests go through OpenRouter to an OpenAI model hosted by Microsoft Azure, and only under zero data retention: each request is processed to produce the answer and is not stored afterwards. OpenAI does not receive this data. Your class list is not sent (see Section 14).
• OpenAI moderation: Games published to the public game library are checked for unsafe text and pictures with OpenAI's moderation service. Only the published game is sent, with no account or class data.

We require all third-party service providers to protect your data and use it only for the purposes we specify.

6. Cookies and Local Storage

We use cookies and local storage technologies to operate our Services. These are used for:

• Essential cookies: Keeping you logged in to your account and managing authentication tokens
• Payment cookies: Cookies set by our payment provider (Paddle) on the pages that show prices or open a checkout, for secure payment, fraud prevention, and Paddle's own subscription services. These are governed by Paddle's privacy policy.
• Preference storage: Remembering your preferences (theme, language, display settings, sound settings)
• Session management: Managing your session for security purposes
• Cached data: Storing classroom and student data locally for faster loading and offline support

We do not use cookies for advertising, behavioral profiling, or tracking across other websites, and we do not add any third-party analytics cookies, such as Google Analytics, to Learnify. Our visitor counter (Cloudflare Web Analytics, Section 4) is cookieless by design and stores nothing in your browser. The exception is our payment provider's own cookies described above, which Paddle sets and controls.

7. Information Sharing

We do not sell, rent, or trade your personal information to third parties. We may share information only in the following circumstances:

• With your consent
• Between teachers who share access to the same classroom (co-teachers)
• With parents who are connected to their child's student profile
• With school administrators who manage the school your classroom belongs to
• With service providers who help us operate our Services (as listed in Section 5)
• When required by law or to protect the rights, safety, or property of Learnify or others
• In connection with a merger, acquisition, or sale of assets, in which case you would be notified

8. Children's Privacy (COPPA & FERPA)

Learnify is designed to be used by teachers, parents, and educational administrators (adults). Student information is entered and managed by teachers, not by students themselves. We do not knowingly collect personal information directly from children under 13.

Teachers are responsible for:

• Obtaining any necessary parental consents before entering student information into Learnify
• Complying with applicable student privacy laws, including FERPA (Family Educational Rights and Privacy Act) and COPPA (Children's Online Privacy Protection Act)
• Ensuring that student data entered into Learnify is used only for legitimate educational purposes

Learnify acts as a "school official" under FERPA, processing student education records on behalf of the educational institution. We do not use student data for advertising or build profiles of students for non-educational purposes.

If you believe we have inadvertently collected information from a child under 13 without proper consent, please contact us immediately at support@learnify.fun so we can delete it promptly.

9. Data Retention

We retain your information for as long as your account is active or as needed to provide you Services. Specifically:

• Account data: Retained while your account is active
• Student data: Retained while the associated classroom is active
• Usage information: Kept for up to 12 months
• Change history (the classes, students, and point tabs you create, rename, or delete): Kept for 30 days
• Deleted classes and students: Kept for 30 days so they can be restored, then permanently deleted
• Audit logs: Retained as required for compliance and security

You may request deletion of your account and associated data at any time by contacting us. When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or legitimate business purposes.

10. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of your personal data we hold
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and associated data
• Export: Request an export of your data in a portable format
• Restriction: Request that we restrict processing of your data in certain circumstances
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent at any time where we rely on consent to process your data

For California Residents (CCPA)

If you are a California resident, you have the right to: know what personal information we collect and how it is used; request deletion of your personal information; opt out of the sale of personal information (we do not sell personal information); and not be discriminated against for exercising your privacy rights.

For EEA/UK Residents (GDPR)

If you are located in the EEA or UK, you have the rights listed above and may also lodge a complaint with your local data protection authority if you believe we are processing your data unlawfully.

To exercise any of these rights, please contact us at support@learnify.fun. We will respond to your request within 30 days.

11. Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/HTTPS)
• Encrypted database storage
• Row-level security policies ensuring users can only access their own data
• Secure authentication with PKCE flow
• Sign-in sessions that expire and renew securely
• Access controls limiting who can access sensitive data

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

12. Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will:

• Notify affected users via email without undue delay and no later than 72 hours after becoming aware of the breach
• Notify the relevant supervisory authority where required by law (e.g., under GDPR)
• Provide information about the nature of the breach, the likely consequences, and the measures taken to address it

13. International Data Transfers

Our database runs in Singapore, so your account, classroom, and student data is stored there. Some of it may also be processed in other countries by the providers listed in Section 5, including the United States. These countries may have different data protection laws than your country of residence. By using our Services, you consent to such transfers. Where required by law (e.g., for transfers from the EEA), we ensure appropriate safeguards are in place.

14. AI-Powered Features

Learnify offers AI-powered question generation on our paid plans (Learnify Plus, Pro and Max, and Quizify Plus), with a different monthly allowance on each. It writes quiz questions from a topic you give it or, on quizify.fun, from your own material: a PDF, photos of a page, text you paste, or a link to a web page.

Requests go through OpenRouter to an OpenAI model hosted by Microsoft Azure. We allow only services that keep zero data retention: a request is processed to produce the answer and is not stored afterwards, by OpenRouter or by Microsoft. OpenAI itself does not receive this data, and none of it is used to train AI models. To answer faster, the model's servers may briefly keep a recent request in temporary memory (prompt caching). The only exception is content that automated checks flag as child sexual abuse material, which a provider may keep and report where the law requires.

When you use this feature:

• Your topic, language preference, and question settings are sent, first to check that the topic suits a classroom and then to write the questions
• Material you choose is sent only to write the questions, and we do not keep it: only the questions you save are stored. For a link, our server reads the page and sends its text
• Your class list is not sent. Please don't put student names or other student details in a topic or in your material
• AI-generated content is stored in your account and is subject to the same privacy protections as other user data
• We do not use your data to train AI models
• We count AI requests only to apply your plan's monthly allowance

15. Policy Updates

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new Privacy Policy on our website and updating the "Last Modified" date. For material changes, we will also notify you via email. Your continued use of the Services after changes constitutes acceptance of the updated policy.

16. Contact Us

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact us at support@learnify.fun.