What the app uses
- Your name, login code, stage and group, from the College’s records
- Your answers, scores and results in quizzes and competitions
- A notification token, only if you turn notifications on
What the app never does
- No location, contacts, microphone or advertising
- No third-party analytics or tracking, and no selling of data
- No student data is sent to the AI service that teachers use
Who runs the app
Yasa Quiz is the quiz and competition app of the College of Law, University of Duhok, in Duhok, Kurdistan Region of Iraq. The College runs the app and decides how the data in it is used; the app’s server is operated for the College by the app’s developer. In this policy, “we” means the College.
The app is for the College’s students and teachers. There is no public sign-up: student accounts are created by the College, and teachers sign in through the College’s attendance system.
What data we process
- Your College record. Your full name, your login code, your stage and group (and your seat number, where the College records one). Your teacher sends these to the app from the College’s attendance system; you do not enter them yourself.
- Your password. It is stored only as a one-way hash, so nobody can read it, not even the College. You choose your own password the first time you sign in.
- Your activity in the app. Your answers in quizzes and competitions, your scores, points, ranks and results, and when you took part.
- A notification token. If you allow notifications, your device gives the app a push token, so that we can tell you when a competition opens or a live quiz starts. Without your permission no token is created.
- Connection data. To deliver the service and protect it from abuse, our server processes your IP address and basic technical details of each request. Server logs are limited in size, and old entries are deleted automatically.
The camera is used only to scan the QR code of a quiz or competition. The image is read on your device; no photo is taken or uploaded. A photo is uploaded only if you choose one yourself in a part of the app that offers this.
What we do not collect
- No location and no contacts; the app does not use the microphone or record audio.
- No advertising, no advertising identifiers and no in-app purchases.
- No third-party analytics, crash-reporting or tracking tools.
- We do not sell your data or use it for marketing.
During quizzes and exams the app blocks screenshots on your device. It does not record your screen.
Why we use it
- to sign you in and keep your account secure;
- to run live quizzes and competitions, score your answers and show your results;
- to show leaderboards and the results of your stage or group;
- to let your teachers see how their students did, as part of their teaching;
- to send the notifications you have allowed.
We use the data only for the College’s teaching and student activities.
Artificial intelligence
Teachers can use an external AI service to help them draft questions from their own course material. The teacher checks every draft before students see it.
No student data (names, login codes, answers or scores) is sent to the AI service, and AI is not used to make decisions about students.
Where your data is stored
The data is stored on a server that the app’s developer operates for the College. The server is rented from Hetzner, a hosting company, and is located in Germany (European Union); the daily backups are kept on the same server. Every connection between the app and the server is encrypted (HTTPS).
Notifications are delivered through the Expo push service and Apple’s or Google’s notification service. They receive only your device’s push token and the text of the notification, never your answers or scores.
How long we keep it
We keep your account and results while you are a student of the College. When you leave the College, or if you ask us to, your account and its data are deleted. Copies in our daily backups are overwritten within 30 days, and server logs are limited in size, so old entries are deleted automatically.
Your rights and choices
- Ask for a copy of the data we hold about you.
- Ask for a correction. Your name, stage and group come from the College’s records, so they are corrected there: ask your department, or e-mail us.
- Ask for deletion. You cannot sign yourself up in the app, so it has no delete button either: e-mail us from your University e-mail address or ask your department, and the College will delete your account and its data.
- Turn off notifications at any time in your device’s settings. Signing out removes your session from the device.
Children
Yasa Quiz is meant for students of the College of Law, who are university students. It is not directed at children.
Changes to this policy
If we change this policy, we will publish the new version on this page with a new effective date, and tell you about important changes in the app.
Contact
For questions about this policy or your data, or to make a request, contact the College of Law: