Privacy Policy

Last updated: 19 July 2026

This policy explains what personal data Yippito (“we”, “us”) collects when you use yippito.com and our quiz platform, why we collect it, who we share it with, and the rights you have over it. If anything here is unclear, email us at support@yippito.com.

Who this applies to

It applies to people who create a Yippito account (teachers, businesses, creators) and to players who join a live game. Players who join a game give only a nickname and, optionally, an avatar choice — no account and no email are required to play.

What we collect

When you create an account and use Yippito, we collect:

• Account details — your email address, display name, and either a password (which we store only as a securely hashed value, never in plain text) or a Google account identifier if you sign in with Google. You may add a profile picture.
• Content you create — the quizzes, questions and answers you write, and any images, audio or video you upload to your questions.
• Game activity — games you host, and the nicknames, answers and scores of players in those games.
• Technical data — basic information your browser sends (such as IP address and device/browser type), used for security and to keep the service running.

AI quiz generation

When you ask Yippito to generate a quiz, the source you provide — a topic, your pasted notes, the text of a web page, a pasted transcript, or the text of a PDF — is sent to our AI provider to write the questions. For PDFs, the file itself is never uploaded: your browser extracts the text on your own device and only that text is sent. Please do not paste content you are not comfortable processing this way.

How we use your data

• To provide the service — create your account, save your quizzes and run live games.
• To generate quizzes from the sources you give us.
• To send you essential emails — a welcome message, and notices such as a warning before inactive uploaded media is removed.
• To keep the service secure, prevent abuse and fix problems.

Under UK/EU data protection law, we rely on the following legal bases: performing our contract with you (to run the service and your account), our legitimate interests (to secure and improve the service), and your consent where required.

Who we share it with

We do not sell your data. We share it only with the service providers that make Yippito work, each acting on our instructions:

• Neon — our database (stores your account and quizzes).
• Render and Vercel — hosting for our backend and website.
• Bunny.net — storage and delivery of images, audio and video you upload.
• Resend — sending our transactional emails.
• Groq — the AI that generates quiz questions from your source text.
• Google — only if you choose to sign in with Google.
• Cloudflare — DNS, security and email routing.

We may also disclose data if required by law. Some of these providers are based outside the UK/EU; where that is the case, appropriate safeguards (such as standard contractual clauses) apply.

Cookies and local storage

We use only what is necessary to run the service — for example, keeping you signed in and remembering your language choice. We do not use advertising or cross-site tracking cookies.

How long we keep it

We keep your account data for as long as your account exists. Media you upload to a quiz that is never edited or played for a long period is automatically removed to save storage (you receive a warning email first) — using the quiz again keeps it. If you delete a quiz or your account, the associated data and media are removed.

Your rights

If you are in the UK or EU, you have the right to access, correct, delete, restrict or object to our use of your personal data, to data portability, and to withdraw consent at any time. To exercise any of these, email support@yippito.com. You also have the right to complain to the UK Information Commissioner’s Office (ICO) or your local data protection authority.

Children

Yippito is designed for teachers, businesses and creators, not for use by children on their own. Where it is used in a classroom, the teacher or school is responsible for how pupils take part. We do not knowingly collect personal data from children.

Security

Traffic to and from Yippito is encrypted (HTTPS), passwords are stored only as hashes, and access to data is limited to what the service needs. No system is perfectly secure, but we take reasonable measures to protect your data.

Changes to this policy

We may update this policy as Yippito grows. When we make material changes, we will update the date at the top of this page.

Contact

Questions about your data or this policy? Email support@yippito.com.