Privacy Policy

Last updated: 2025-08-10

Vietnamese Chính Tả Quiz (“the App”) helps teachers create spelling quizzes and post grades to Google Classroom. This policy explains what we collect, why we collect it, and how you can control your data.

What we collect

Account info from Sign-in with Google or Microsoft: email address, display name, and user ID.
Teacher Google Classroom data (with consent only): course lists, coursework created by this App, class roster (names and emails), and student submissions metadata needed to post grades.
Student quiz data: answers, score, accuracy, quiz ID/name, timestamps, and the student’s email.
OAuth tokens for connected teachers so the App can call Google Classroom on their behalf.
Diagnostics: basic logs and error reports for troubleshooting (no quiz answers).

Google API scopes we request

We use Google APIs only to operate the features you choose. Current scopes:

openid, https://www.googleapis.com/auth/userinfo.email, .../userinfo.profile
https://www.googleapis.com/auth/classroom.courses.readonly
https://www.googleapis.com/auth/classroom.coursework.me
https://www.googleapis.com/auth/classroom.coursework.students
https://www.googleapis.com/auth/classroom.rosters.readonly
https://www.googleapis.com/auth/classroom.profile.emails (to match a student’s quiz account to their Classroom submission so grades can be posted).

Use of Google data complies with the Google API Services User Data Policy (including the Limited Use requirements where applicable).

How we use data

Create and manage Classroom assignments that link to your quizzes.
Read roster info to locate a student’s submission and post grades back to Classroom.
Display educator dashboards and quiz results.
Operate, secure, and improve the service.

How we store & protect data

Hosted on Google Cloud / Firebase (Firestore, Authentication, Cloud Functions). Data is encrypted in transit and at rest.
Access is limited to authorized personnel who need it to operate the service.
OAuth tokens are stored securely and are only used to perform actions you trigger (e.g., create assignments, post grades).

Retention

Quiz results are kept until the teacher or student asks us to delete them, or until classroom accounts expire.
Teacher OAuth tokens are deleted when you disconnect or after 90 days of inactivity.
Server logs are typically retained for up to 30 days.

Sharing

We do not sell personal data. We share data only with service providers that host or process data for us (Google Cloud / Firebase) under contractual safeguards, or when required by law.

Children, schools & student data

The App is used under the direction of schools/teachers. We act as a processor/service provider for the educational institution. Teachers are responsible for obtaining any required parental consent. We do not knowingly allow students to create accounts without a school or teacher.

Your choices & rights

Disconnect Google Classroom at any time from your Google Account permissions: myaccount.google.com/permissions.
Request your data or deletion by emailing us at {{"ecp2mi@gmail.com"}}. We’ll respond within 30 days.
Depending on your region, you may have rights to access, correct, or delete your data (e.g., GDPR/CCPA). We honor these rights where applicable.

Cookies

We use essential cookies/local storage for authentication and app settings only—no advertising cookies.

Contact

Email: {{"ecp2mi@gmail.com"}}
Postal: {{Joseph Nguyen}}, {{"ecp2mi@gmail.com"}}

Changes

We may update this policy as the service evolves. Material changes will be posted here with a new “Last updated” date.