Privacy Notice

This notice explains how WIZOOP collects, uses, stores, shares and protects personal data when you use WIZOOP.

• Data controller: WIZOOP
• Privacy contact: [email protected]
• General legal contact: [email protected]

When a teacher, school, church group or other organisation uses WIZOOP with its own players, that organisation decides who plays and why, and is responsible for having the right to involve those people. WIZOOP then handles the players’ information on its behalf, as described here.

WIZOOP is built around the Personal Data Protection Act, 2022 (Cap. 44) of Tanzania and the Personal Data Protection (Personal Data Collection and Processing) Regulations, 2023. Where the Personal Data Protection Commission requires registration, a certificate or a permit for what we do, we obtain it.

If you use WIZOOP from another country, we also respect the mandatory data protection rights that apply to you there.

We collect only what we need to run WIZOOP. It falls into these groups.

People with an account (creators and hosts):

• display name, username and email address;
• your password, stored only in a scrambled (hashed) form that we cannot read back;
• if you sign in with Google: the name and email Google shares with us, and nothing else from your Google account;
• whether you chose to receive tips and updates by email, and when; and when you accepted our Terms, and which version;
• the devices you are signed in on (browser and device type, and when each was last used), so you can see and sign them out in Settings;
• your account’s security events, such as sign-ins and password changes.

Players (no account needed):

• the nickname you type, and, in live games, an avatar and the game code you entered;
• a random identifier saved in your browser, so that replays from the same device under the same name count as one player and so you can return to your team;
• your team, if the quiz plays in teams;
• your answers, scores, timing, rank and how many times you played.

Content creators add:

• quiz titles, descriptions, categories, questions, answers and settings;
• pictures, such as a quiz’s thumbnail or a picture question.

Everyone:

• messages you send to support, reports and data requests;
• limited technical information needed to keep the service safe and working, such as time of visit, error reports and the network address your request came from.

We do not ask players for their real name, email address, phone number, location or photo.

• to create and manage accounts and keep them secure;
• to run quizzes and live games, score answers, and show leaderboards and team standings the way the creator chose;
• to show creators how their quizzes are doing (plays, players, which questions are hard);
• to publish quizzes when a creator makes them public, and to suggest similar quizzes;
• to send the emails you ask for or that the service needs (verifying your email, resetting a password), and, only if you opted in, tips and updates, with an unsubscribe link in every one;
• to answer support requests and handle reports;
• to find and stop abuse, fraud and security problems, and to keep WIZOOP reliable;
• to meet our legal obligations;
• to improve WIZOOP, using the least personal information we can.

We do not use personal data for advertising, we do not build advertising profiles, and we do not sell personal data.

We rely on the grounds the Personal Data Protection Act allows: that we need the data to provide the service you asked for (a contract), that the law requires it, that you have given consent (for example for tips and updates), and, where permitted, our legitimate need to keep the service safe and working. If we rely on your consent, you can withdraw it at any time; for emails, use the unsubscribe link or Settings.

Creators can see the nicknames, scores, answers, times and play counts of people who played their quizzes, and which team they were on.

Other players can see your nickname and score on a leaderboard if the creator chose to show one. Creators of quizzes for young players can choose a leaderboard that hides names. Team standings only name a team’s best player when the creator shows the full leaderboard.

Choose a nickname that does not give away who you are.

If a creator uses AI generation, the text they type for the request is sent to our AI provider, currently Anthropic, to create the draft questions. Nothing is sent unless a creator uses that feature. We do not send players’ nicknames or answers.

Please do not put passwords, confidential information or personal details about other people into a request.

According to Anthropic’s published terms for its commercial API at the time of writing, inputs and outputs are not used to train its models by default and are deleted from its systems within a limited period unless the law requires otherwise. Those terms are Anthropic’s and may change; we review them from time to time.

We use a small number of providers to run WIZOOP. They may only use the data to provide their service to us:

• application hosting (Northflank) and database hosting (Neon);
• picture storage and our content delivery network (Cloudflare);
• email delivery (Resend);
• sign-in with Google, if you choose it (Google);
• AI quiz drafting, only when a creator uses it (Anthropic).

We may also share information with a school or organisation that runs a quiz for its own players, where that is needed to provide the service, and with courts, regulators or the police where the law requires or permits it, or to protect someone from serious harm.

We do not sell personal data.

Our providers run servers in other countries, so your data may be processed outside Tanzania. When that happens we follow the Personal Data Protection Act and the Commission’s requirements, including getting a transfer permit where one is required, and we use contracts and technical safeguards such as encryption in transit to protect it.

WIZOOP accounts are for people aged 18 or over. Children can play, with a nickname only, when a teacher, school, organisation, parent or guardian shares a quiz with them. We do not use children’s information for advertising or profiling. Our Child Safety and Minors Policy explains more and how a parent can contact us.

• Detailed answers from finished plays: 90 days, then deleted. This is what lets creators see which questions are hard.
• Leaderboard entries and scores: for as long as the quiz exists, or until the creator deletes the quiz or clears the results.
• Your account, quizzes and pictures: until you delete your account. Deleting your account in Settings removes your profile, your quizzes and their results, and signs you out everywhere.
• Sign-in sessions: until they expire or you sign them out.
• Server error reports: 30 days.
• Backups: copies made by our database provider are overwritten on their normal cycle, so deleted data can remain in a backup for a short time before it disappears.
• Some information may be kept longer where the law requires it, or to deal with a legal claim or a security incident.

We use access controls, hashed passwords, encrypted connections, limits on sign-in attempts, checks on what files can be uploaded, and least-privilege access for our team. If a breach puts people at risk, we will tell the affected people and the authorities as the law requires.

No online service can promise perfect security. Use a strong, unique password and sign out on shared devices.

Subject to the law, you have the right to:

• be told how your data is used;
• see the data we hold about you;
• have wrong data corrected;
• have your data erased;
• restrict or object to some uses;
• receive your data in a portable file;
• withdraw consent you gave;
• not be subject to a decision made only by a machine that significantly affects you (we do not make such decisions);
• complain, and claim compensation where the law allows.

Account holders can already do the most common ones themselves in Settings: change your name, username, email and password, download all your data, see and sign out your devices, and delete your account. For anything else, or if you are a player, write to [email protected]. We may need to check who you are first.

Because players have no account, we can usually find a player’s results only if you give us the quiz link, the nickname and roughly when you played.

Please contact us first at [email protected] so we can investigate and reply. If you are still not satisfied, you may complain to the Personal Data Protection Commission of Tanzania.

We may update this notice when the law, our providers or WIZOOP change. The current version is 1.0, effective 5 October 2026. If a change matters to you, we will say so on the site, in your account or by email.