Privacy Policy

Effective date: 25 July 2026. Last updated: 25 July 2026.

This Privacy Policy explains how MIK INDUSTRIES LIMITED ("we", "us", "our") collects, uses, shares, and protects personal data when you use AI Quiz Assistant, including our website at quizassistant.co.uk, the AI Quiz Assistant browser extension, and our related services (together, the "Service"). We are the data controller for the personal data described in this policy.

Who we are

Company: MIK INDUSTRIES LIMITED
Company number: 15304261 (registered in England and Wales)
Registered office: 3rd Floor, 86-90 Paul Street, London, England, United Kingdom, EC2A 4NE
Contact: support@quizassistant.co.uk

Information we collect

We collect the following categories of personal data:

Account data — your email address, a securely hashed password (we never store your password in plain text), email-verification status, account status, and account creation date.
Authentication data — access and refresh tokens and session cookies used to keep you signed in. Access tokens are held by the extension in chrome.storage.local; refresh tokens are stored hashed on our servers.
Device data — a device identifier generated by the extension, device name, platform (for example macOS, Windows, Linux, ChromeOS), browser/user-agent string, extension version, last-seen timestamp, and the IP address of your most recent request. This supports device-limit enforcement and account security.
Quiz content you submit — screenshots or images of practice questions that you choose to capture, and the question text extracted from them. These images are processed to generate an analysis and are not retained after processing (see Retention below).
Analysis results and history — the extracted question text, suggested answer, explanation, confidence level, and timestamp for each analysis. This forms your usage history, which you can view, export, and delete.
Usage and diagnostic data — counts of analyses, request timestamps, feature usage, and error events used to operate, secure, and improve the Service and to enforce plan limits.
Subscription data — your plan, billing interval, subscription status, billing period dates, and the Stripe customer and subscription identifiers associated with your account.
Support communications — the content of messages you send us through the contact form or by email, and your email address so we can reply.

Payment information

Card and payment details are collected and processed directly by our payment provider, Stripe. We do not receive or store your full card number. We store only the subscription and customer references and billing status that we need to manage your plan.

How we use your information and our lawful bases

Under the UK GDPR we rely on the following lawful bases for processing:

Performance of a contract — to create and authenticate your account, run quiz analyses you request, manage your devices, and provide the features of your plan.
Legitimate interests — to secure accounts, prevent abuse and fraud, enforce usage and device limits, maintain audit logs, and improve the Service. We balance these interests against your rights.
Legal obligation — to keep financial and tax records and to respond to lawful requests.
Consent — where required, for example optional communications. You can withdraw consent at any time.

Service providers and international transfers

We share personal data only with service providers (processors) that help us operate the Service, and only as needed. These currently include:

OpenAI — processes the quiz images/text you submit to generate an analysis. See OpenAI's privacy policy.
Stripe — processes payments and subscription billing. See Stripe's privacy policy.
Microsoft (Microsoft 365) — delivers our transactional and support email over SMTP.
Hostinger — provides the server infrastructure that hosts the Service.

Some providers may process data outside the UK/EEA. Where that happens, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses. We do not sell your personal data, and we do not share it with third parties for their own advertising.

Cookies and local storage

We use strictly necessary cookies to keep you signed in and to secure your session on quizassistant.co.uk. The browser extension stores a device identifier, settings, and short-lived authentication tokens in chrome.storage.local on your device; this data is removed when you uninstall the extension or clear its data. We do not use advertising or cross-site tracking cookies.

Data retention

Submitted images: processed in memory to produce an analysis and not stored afterwards.
Analysis history: retained for approximately 90 days, and deletable by you at any time.
Account and device data: retained while your account is active.
Deleted accounts: removed after a short grace period following your deletion request.
Financial and audit records: retained for as long as required for legal, security, and accounting purposes.

How we protect your data

We apply appropriate technical and organisational measures, including encryption in transit (HTTPS/TLS), password hashing, hashed refresh tokens, access controls, rate limiting, and audit logging of sensitive actions. No system can be guaranteed to be completely secure, but we work to protect your data and to respond promptly to any incident.

Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict, or object to our processing of your personal data, the right to data portability, and the right to withdraw consent. You can access and manage much of your data directly:

View and export your analysis history and manage devices from your Dashboard.
Delete individual analyses or request account deletion at any time.
Contact us at support@quizassistant.co.uk to exercise any right.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above and, where changes are material, take reasonable steps to notify you.

Contact

Questions or requests about privacy: support@quizassistant.co.uk

MIK INDUSTRIES LIMITED · Company number 15304261 · 3rd Floor, 86-90 Paul Street, London, England, United Kingdom, EC2A 4NE

See also our Terms and Acceptable Use Policy.