Privacy Policy for TeachQuest

Last Updated: December 14, 2024

Welcome to TeachQuest! We are committed to protecting the privacy of our users, especially students and educators. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, "Services").

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

1. Information We Collect

We aim to collect only the minimum information necessary to provide and improve our Services. The information we collect depends on how you use TeachQuest.

1.1. Information Provided by Teachers

Account Information: When teachers register for an account, we collect their email address and a password for authentication and communication purposes. NEW: Teachers may also optionally authenticate using Google OAuth, in which case we collect their Google account ID, Google email address, and basic profile information.
Classroom Setup Information: Teachers may provide names or usernames for their students to create in-game characters. No other personally identifiable information (PII) of students is required or requested from teachers for student participation. Student accounts are created by the teacher, and student login credentials (username/password) are managed by the teacher.
Custom Content: Teachers may create custom content within the platform, such as quests or events. This content is stored on our servers.

1.2. Information Regarding Students (Minors)

TeachQuest is designed with student privacy as a top priority, adhering to regulations such as the Children's Online Privacy Protection Act (COPPA) in the United States and the General Data Protection Regulation (GDPR) in Europe.

Student Usernames/Names: The only student-related information we process is the name or username provided by the teacher. This is used solely for displaying the student's character within their specific classroom environment in the game. This information is not publicly accessible and is confined to the teacher-managed classroom.
No Direct Collection from Students: We do not directly collect personal information from students. Students log in using credentials provided by their teacher. They are not asked to provide emails, addresses, or other PII.
Parental Access: Parents may be able to view their child's progress using a unique student code provided by the teacher. This access is read-only and does not involve collection of parental PII beyond what is necessary if they contact us for support.

1.3. Automatically Collected Information

When you access our Services, we may automatically collect certain information about your device and usage, such as:

Log Data: IP address, browser type, operating system, access times, pages viewed. This data is used for analytical purposes, to improve our Services, and for security.
Cookies and Similar Technologies: We may use cookies to enhance user experience, such as keeping you logged in. You can control cookie settings through your browser.

2. How We Use Your Information

We use the information we collect for the following purposes:

To provide, operate, and maintain our Services.
To manage teacher accounts and facilitate classroom setup.
To enable student participation through teacher-created accounts.
To display student names/usernames within their specific classroom context in the game.
To personalize and improve your experience with our Services.
To communicate with teachers regarding their accounts, updates, and support.
To monitor and analyze usage and trends to improve our Services.
To ensure the security and integrity of our platform.
To comply with legal obligations.

3. How We Share Your Information

We are committed to not selling your data. We do not sell, trade, rent, or otherwise share your personal information with third parties for their marketing purposes.

We may share information under the following limited circumstances:

Service Providers: We may share information with third-party service providers who perform services for us or on our behalf (e.g., web hosting, data analysis, customer service). These providers are obligated to protect your information and use it solely for the purposes for which it was disclosed. Our website is hosted on Hostinger, and data processing by Hostinger is subject to their privacy policies and terms of service.
Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency), or to protect the rights, property, or safety of TeachQuest, our users, or others.
Aggregated or De-identified Data: We may share aggregated or de-identified information, which cannot reasonably be used to identify you, for research, marketing, analytics, or other purposes.
Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information.

Specifically regarding student information (names/usernames): This information is never shared outside of the specific classroom environment to which the student belongs, except as may be required by law or with explicit, verifiable consent from the school or parent/guardian as appropriate.

4. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your information from unauthorized access, use, alteration, and disclosure. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Teacher account information is retained as long as the account is active. Student data (names/usernames) associated with a classroom is retained as long as the teacher maintains the classroom on our platform or requests its deletion.

6. Your Rights and Choices (GDPR & Other Jurisdictions)

Depending on your location, you may have certain rights regarding your personal information:

Access: You can request access to the personal information we hold about you.
Rectification: You can request correction of inaccurate or incomplete personal information.
Erasure (Right to be Forgotten): You can request the deletion of your personal information under certain conditions.
Restriction of Processing: You can request that we restrict the processing of your personal information under certain conditions.
Data Portability: You can request to receive your personal information in a structured, commonly used, and machine-readable format.
Objection: You can object to the processing of your personal information under certain conditions.

Teachers can manage their account information and classroom data through their account settings. To exercise any of these rights, please contact us at admin@teach-quest.com. We will respond to your request in accordance with applicable law.

For student data, teachers are the primary point of contact. Parents wishing to exercise rights regarding their child's data should contact their child's teacher or school, who can then coordinate with us if necessary.

7. Children's Privacy (COPPA Compliance)

TeachQuest is intended for use in educational settings under the guidance of teachers. We comply with COPPA. We do not knowingly collect personal information directly from children under 13 (or the applicable age of digital consent in other jurisdictions) without verifiable parental consent or as permitted by COPPA's school consent exceptions (where the school/teacher acts in loco parentis).

As stated, the only student information we handle is the name/username provided by the teacher for in-class game display. Teachers are responsible for obtaining any necessary consents from parents or guardians for students to use TeachQuest, in accordance with their school's policies and applicable laws.

🔒 Google OAuth Authentication (NEW)

Recently Added: TeachQuest now offers Google OAuth as an optional authentication method for enhanced user convenience and security.

What Google OAuth Means for You:

Optional Service: Google OAuth is completely optional. Traditional username/password login remains available.
Data Collection: When you choose to sign in with Google, we receive and store:
- Your Google account ID (a unique identifier)
- Your Google email address
- Basic profile information (name) for account setup
Account Linking: If you have an existing TeachQuest account, you can choose to link it with your Google account for easier login.
Teacher Verification: Google-authenticated teacher accounts are automatically verified, streamlining the account setup process.
Google's Privacy: Your interaction with Google's authentication service is also governed by Google's Privacy Policy.

Your Control:

You can disconnect your Google account from TeachQuest at any time through your account settings
You can continue using TeachQuest with traditional login methods even after linking Google
No additional student data is collected through Google OAuth - student privacy remains unchanged

Data Security:

Google OAuth tokens are verified using Google's secure tokeninfo endpoint. We do not store Google passwords or access tokens beyond the authentication process. Only the necessary Google account identifier and email are permanently stored for account linking purposes.

8. Third-Party Websites and Services

Our Services may contain links to third-party websites or services that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

As mentioned, our website is hosted by Hostinger. Their data processing practices are governed by their own privacy policy, which you can review on their website.

Google Services: As described in our Google OAuth section above, we integrate with Google's authentication services. This integration is governed by both this privacy policy and Google's own privacy policy and terms of service.

9. International Data Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal data, to the United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your personal data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

TeachQuest Privacy Team
admin@teach-quest.com