Privacy Policy

Last Updated: 2026-05-05

This Privacy Policy describes how WizLabs Inc. (“WizLabs,” “we,” “us,” or “our”), a company incorporated in the Province of Prince Edward Island, Canada, collects, uses, and protects your information when you use the WizChips application and related services (the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address — used for authentication and account recovery
• Password — stored in hashed form; we never have access to your plaintext password
• Username — a unique public identifier you choose during signup

1.2 Study Materials

When you upload study materials (images, PDFs, or text), we collect and process:

• The uploaded file or text content
• File metadata (filename, file size, format)
• Upload timestamp

Important: The text content extracted from your study materials is used to generate educational games and is permanently deleted after processing is complete. We do not retain the original text of your study materials. Only the generated games, structural metadata, and derived educational content are stored.

1.3 Usage and Activity Data

We collect data about how you use the Service, including:

• Game scores, completion status, and learning progress
• Feature usage and navigation patterns
• Session information (app opens, page views)
• Processing events (material uploads, game generation status)

This data is collected through our own internal analytics system. We do not use third-party analytics services such as Google Analytics, Mixpanel, or similar tools.

Our analytics system automatically strips sensitive information (passwords, tokens, authorization headers) from all recorded events.

1.4 Credit and Transaction Data

We record information related to the in-app credits system:

• Credit balance and transaction history
• Transaction type (earned, spent, bonus, purchase), amount, and description
• Associated study material (for processing transactions)

For paid credit pack purchases, payment processing is handled by Stripe. We do not store your full payment card details on our servers — Stripe stores those and sends us only a transaction reference.

1.5 Social Interaction Data

When you use social features, we collect:

• Follow and follower relationships
• Block lists
• Material sharing records (who shared with whom, acceptance status)
• Challenge participation (participants, scores, duration)

2. How We Use Your Information

We use the information we collect to:

• Provide the Service — process your study materials into educational games, track your learning progress, and deliver the core functionality
• Enable social features — allow you to connect with other users, share materials, and participate in challenges
• Manage credits — track your credit balance and processing costs
• Improve the Service — analyze usage patterns to identify bugs, improve performance, and develop new features
• Prevent abuse — detect and prevent fraudulent activity, including multiple account creation to exploit credit bonuses
• Communicate with you — send service-related notifications (e.g., processing completion, challenge invitations)

3. How We Share Your Information

3.1 With Other Users

When you use social features, certain information is visible to other users:

• Your username
• Your follower/following lists (to mutual connections)
• Study materials you choose to share
• Challenge participation and scores

3.2 With Third-Party Service Providers

We use third-party services to operate the Service:

• Cloud infrastructure and database providers — to store your account data, game progress, and generated content securely
• AI and machine learning service providers — to process your study materials and generate educational games
• Authentication services — to securely manage your account login
• Payment processors — Stripe handles credit pack purchases

When your study materials are processed, the text content is sent to third-party AI service providers. These providers process the data to generate educational games and do not retain your content beyond what is necessary to complete the processing request.

3.3 As Required by Law

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Row-Level Security — database-level access controls ensure users can only access their own data
• Password hashing — passwords are stored using industry-standard cryptographic hashing (bcrypt)
• Secure sessions — authentication uses JSON Web Tokens (JWT) with standard security practices
• Data sanitization — sensitive fields are automatically stripped from analytics events

While we take reasonable measures to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention and Deletion

5.1 Active Accounts

• Study material text is deleted after processing; generated games and metadata are retained while your account is active
• Account data, game progress, and credit history are retained as long as your account exists
• Analytics events are retained for service improvement purposes

5.2 Account Deletion

You may delete your account at any time through the Service. When you delete your account, we permanently delete:

• All study materials and generated games you own
• Your credit balance and transaction history
• Your profile information (username)
• Your social connections (follows, blocks)
• Your authentication record

What we retain after deletion:

• A cryptographic hash of your email address, solely to prevent abuse of the signup credit bonus system. This cannot be used to identify you or contact you.
• Any deletion feedback you voluntarily provide, stored separately and not linked to your identity.

5.3 Shared Content

If you shared materials or participated in challenges before deleting your account, copies of shared materials that were accepted by other users will remain in those users’ libraries, as they are independent copies.

6. Children’s Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13 in compliance with the U.S. Children’s Online Privacy Protection Act (COPPA) and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

If we learn that we have collected personal information from a child under 13, we will take steps to delete that information as quickly as possible. If you believe a child under 13 has provided us with personal information, please contact us immediately.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you
• Correction — request correction of inaccurate personal information
• Deletion — request deletion of your personal information (available directly through the account deletion feature)
• Data portability — request your data in a structured, commonly used format
• Withdrawal of consent — withdraw your consent to data processing at any time by deleting your account

Canadian Users (PIPEDA)

If you are a Canadian resident, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including the right to access and correct your personal information. To exercise these rights, contact us using the information below.

US Users (State Privacy Laws)

If you are a resident of a US state with applicable privacy laws (such as California’s CCPA), you may have additional rights including the right to know what personal information we collect, the right to delete it, and the right to opt out of certain data practices. We do not sell your personal information.

8. International Data Transfers

Your information may be processed in countries other than your own, including Canada and the United States, where our service providers operate. By using the Service, you consent to the transfer of your information to these countries, which may have different data protection laws than your jurisdiction.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service with a new “Last Updated” date.

Your continued use of the Service after changes are posted constitutes your acceptance of the revised Privacy Policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

WizLabs Inc. Email: contact@wizchips.com