Privacy notice
Who is responsible
Kwestio is run by JAD2 Advisory, Casablanca, Morocco. Write to kwestio@jad2advisory.com about anything on this page.
Without an account
Your XP, streak, completed lessons, badges and exam attempts are stored in your own browser (localStorage). They stay on your device, we cannot see them, and clearing your browser data removes them. An account is optional. One thing leaves your device without identifying you: when you finish a full mock exam, the site sends which questions you answered, whether each was right, and your score, so that we can find questions that are wrong or unclear. Nothing in it links to you or your device; your IP address is used only to limit how often it can be sent, and is forgotten within an hour.
If you create an account
We store your name, email address, a hash of your password (never the password itself) and the progress you choose to sync, so you can use it on another device. A session cookie, needed for sign-in to work, keeps you signed in for up to 7 days; the session record also notes your browser type. This data is held on Cloudflare (Workers and D1). Account emails (confirming your address, resetting your password) are sent through Resend. We keep your account until you delete it.
Deleting or downloading your data
Signed in, open your account page: "Download my data" gives you everything we hold for your account as a file, and "Delete my account" erases the account and its synced progress immediately. You can also ask by email.
The contact form
We collect your name, organisation and email address, and optionally your phone number, team size, areas of interest and message, only to answer your enquiry. The form passes through our own service on Cloudflare and is emailed to our inbox by Resend; nothing from it is stored on our servers. Enquiry correspondence is kept for up to 24 months, then deleted. We never sell your details or add you to a mailing list from this form.
Audience measurement
We use Google Analytics 4 and Cloudflare Web Analytics to count visits in aggregate. Google Analytics runs with cookie storage denied, so it sets no analytics or advertising cookies; Cloudflare Web Analytics uses no cookies at all.
The AI Advisor
Messages you send to the Advisor are relayed through our own server to an AI provider — Groq (United States), or DeepSeek (China) if Groq is unavailable — to generate a reply. They are not linked to your identity or stored by us, but do not include confidential or personal information in them. To prevent abuse we count requests per IP address for one hour.
Transfers and your rights
Our providers (Cloudflare, Resend, Google, Groq, DeepSeek) may process data outside Morocco. You can ask for a copy of what we hold about you, ask us to correct it, or ask us to erase it by writing to kwestio@jad2advisory.com; we respond within 30 days. In Morocco you may complain to the CNDP; in the EU, to your national supervisory authority.