Privacy notice

Tiraverse Ltd, registered in England & Wales, company number 17036977, is the controller for teacher and administrator accounts.

Where a school uses Tiraverse QUIZ with its pupils, the school is the controller for pupil data and Tiraverse Ltd is the processor. Our Data Processing Agreement sets those roles out in full.

• Data at rest stays in the United Kingdom. The database, uploaded files and generated quizzes are stored on our own servers in London.
• Traffic passes through an EU edge. HTTPS is terminated by a reverse proxy operated by Hetzner Online GmbH in Helsinki, Finland. Requests transit that proxy; nothing is stored there.
• Backups stay in the United Kingdom.

• Account details: email address, display name, role, organisation, and a password hash or passkey credential.
• Content you create: quizzes, questions, images you attach, and the source material you upload for AI generation.
• Attempts: a pupil's answers, scores, timestamps, and any audio, drawing or photo they submit as an answer.
• Pupils who join by share code without an account are recorded under the display name they type, plus an email address only if the teacher asks for one.
• Operational records: sign-in events, AI usage counts and cost per organisation, and error logs.

These are our sub-processors. We do not sell data, and we do not use it to train any model.

• Anthropic — AI question generation and AI marking. What is sent: the source material and question text a teacher submits for that request. Anthropic is our default provider; an organisation can supply its own API key instead, in which case requests go to that provider under the school’s own contract. Keys are encrypted at rest.
• Resend — transactional email only: sign-up confirmation, password reset, and result emails a teacher chooses to send.
• Hetzner Online GmbH — the reverse proxy described above. Traffic in transit only.
• Image search providers — Pixabay, Pexels, Unsplash, Openverse, Wikimedia Commons and NASA. Only the search words a teacher types leave our systems. No pupil data is sent to them.
• Umami — page analytics. It sets no cookies and records no name, email or account. Per Umami’s documentation it collects the page address, the referring address, browser, operating system, device type and country, anonymised. It runs on every page of this site, so the address of a page a pupil opens is counted along with the rest. Umami’s servers are in the United States and the European Union, so this is the one thing on this page that can leave the UK and the EU. It is analytics only: it never receives an answer, a mark or a file.

Speech-to-text runs on our own servers. Spoken answers are transcribed locally. Pupil audio is never sent to a third-party transcription service.

Ask us at hello@tiraverse.co.uk and we will act within one month, as the UK GDPR requires. A school administrator can ask on behalf of a pupil.

• Export returns a ZIP of the account, its quizzes and its results.
• Erasure schedules the account for deletion. It is hard-deleted after 30 days, which leaves a window to reverse a deletion made by mistake.
• Both run against our API today (/api/v1/me/export and /api/v1/me/erasure), and a self-service control in Settings is in development. Until it ships, email is the route and the deadline is the same.

Pupils use Tiraverse QUIZ at the direction of their school. Where consent is the basis for processing a pupil’s data, the school obtains it; the product carries a parental consent step for the cases that need one. We do not show advertising and we do not profile pupils.

• Passkeys and passwords, with per-organisation isolation enforced in the database itself.
• Encryption in transit; bring-your-own AI keys encrypted at rest.
• Security event logs, available to School-plan customers for their own IT team.

We date every change to this notice and keep the previous version available on request. If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office at ico.org.uk.