Privacy Policy

QuizCasa collects the student profile fields requested by a test administrator, test responses, scores, attempt timing, and payment references needed to provide tests, results, certificates, account access, and fraud prevention.

Passwords and recovery codes are stored as one-way hashes. Application and payment gateway secrets are encrypted with the shared EncryptDecrypt library before database storage. The application stores payment identifiers but does not store complete card or bank-account details.

Signed-in students can export their profile and result data or permanently delete their account from the student dashboard. Account deletion anonymizes historical academic and payment records that must remain for reporting integrity.

Administrators should configure their organization’s retention period, privacy contact, backup schedule, and applicable legal notices before operating this service publicly.