How we handle your data

• Sign-in uses email & password and Google sign-in.
• Two user roles exist: admin (creates question banks and exams) and student (takes assigned exams). Role assignment is restricted to existing admins.
• Students can only see and start exams they have been assigned to, individually or through their section.
• Answer keys and explanations are not returned to a student during an in-progress attempt; they are only shown after the attempt is submitted.

QBank Studio is built and hosted on the Lovable platform. The app's database, authentication, file storage, and server functions run on Lovable Cloud (powered by Supabase) on managed cloud infrastructure. Network traffic to the app is served over HTTPS.

Describing these platform capabilities is not a Lovable-issued certification and does not constitute a third-party audit.

• Account data: email address, name (if provided), and your role. Used to sign you in and route you to the correct dashboard.
• Content you create: question banks, subjects, chapters, topics, questions, exams, and assignments. Visible to you as the owner and, for published exams, to assigned students.
• Exam activity: exam attempts, selected answers, scores, and timestamps. Visible to the student who took the attempt and to the exam owner.

Database access is enforced with row-level security. Owner-only and student-only policies apply to every table that holds user content, so users cannot read or modify rows that don't belong to them. Server functions that need to bypass row-level security run on the server and verify the caller before returning data.

The app uses cookies and local storage required to keep you signed in. We do not load third-party advertising trackers. Hosting platform logs may be collected by the underlying infrastructure for operational purposes.

• Lovable platform provides hosting, managed authentication, database, and storage primitives.
• App owner (us) configures roles, access policies, the question banks, and which exams are published to which sections or students.
• You, the user are responsible for protecting your sign-in credentials and signing out from shared devices.

For questions about this page, account deletion, or to request a copy of content associated with your account, contact the QBank Studio team through your usual support channel. Specific retention windows, subprocessor lists, and formal compliance statements are not published here until reviewed and approved by the app owner.