Quizlet Q-Chat procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “Quizlet, Inc. is an entity incorporated and organized under the laws of the United States. With respect to the personal information discussed in this Privacy Policy, we are the “controller” for such information under the General Data Protection Regulation and comparable laws in the UK and Switzerland (“GDPR”). This means Quizlet determines the purposes and means of processing personal information relating to individuals located in the EEA, Switzerland, and UK. You may contact Quizlet using the information provided in the “Contact Us” section at the end of this Privacy Policy.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “- [European Economic Area](https://edpb.europa.eu/about-edpb/board/members_en)” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “In connection with international transfers of personal information, Quizlet complies with the EU-US Data Privacy Framework (EU-US DPF), the UK Extension to the EU-US DPF, and the Swiss-US Data Privacy Framework (Swiss-US DPF). Quizlet has certified to the US Department of Commerce that it adheres to the EU-US Data Privacy Framework Principles (EU-US DPF Principles), the UK Extension to the EU-US DPF, and Swiss-US Data Privacy Framework Principles (Swiss-US DPF Principles) with regard to the processing of personal information received from individuals in the EEA, Switzerland, and UK in reliance on the EU-US DPF, UK Extension to the EU-US DPF, and Swiss-US DPF. If there is any conflict between the terms in this privacy policy and the EU-US DPF Principles and/or the Swiss-US DPF Principles, the Principles will govern.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “In compliance with the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF, Quizlet commits to refer unresolved complaints concerning our handling of personal information received in reliance on the EU-US DPF and the UK Extension to the EU-US DPF and the Swiss-US DPF to JAMS, an alternative dispute resolution provider based in the United States. Please contact us at [privacy-eu@quizlet.com](mailto:privacy-eu@quizlet.com) if you have a complaint regarding our handling of your personal information. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit [jamsadr.com/dpf-dispute-resolution](https://www.jamsadr.com/dpf-dispute-resolution) for more information or to file a complaint. The services of JAMS are provided at no cost to you.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “In connection with international transfers of personal information, Quizlet complies with the EU-US Data Privacy Framework (EU-US DPF), the UK Extension to the EU-US DPF, and the Swiss-US Data Privacy Framework (Swiss-US DPF). Quizlet has certified to the US Department of Commerce that it adheres to the EU-US Data Privacy Framework Principles (EU-US DPF Principles), the UK Extension to the EU-US DPF, and Swiss-US Data Privacy Framework Principles (Swiss-US DPF Principles) with regard to the processing of personal information received from individuals in the EEA, Switzerland, and UK in reliance on the EU-US DPF, UK Extension to the EU-US DPF, and Swiss-US DPF. If there is any conflict between the terms in this privacy policy and the EU-US DPF Principles and/or the Swiss-US DPF Principles, the Principles will govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit [https://www.dataprivacyframework.gov](https://www.dataprivacyframework.gov/).” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “[EEA, Switzerland, and UK](https://quizlet.com/privacy#eea_switzerland_uk_title)” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “- If you are located in the EEA, UK, or Switzerland, please review the “EEA, Switzerland, and UK” section below.” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “- [Switzerland](https://www.edoeb.admin.ch/en/contact-2)” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “Quizlet retains your personal information for as long as your account is active, to fulfill our legitimate business purposes, or to comply with our legal obligations or document retention policies. When these conditions no longer exist, Quizlet removes that information in accordance with our standard deletion processes. Quizlet may retain and use non-personal information, including information which has been de-identified, aggregated, or anonymized, indefinitely.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “**Managing Your Account.** You can choose whether the content you create on Quizlet, such as flashcard sets, can be viewed by other users. You may also review, edit, or delete the content you create on Quizlet by using the deletion tools we provide. You may delete your account at any time by signing into your Quizlet account, going to Settings, and selecting “Delete account.” If you delete your account, the content you have created on Quizlet will be deleted in accordance with our data retention policies.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “[How Long We Retain Your Personal Information](https://quizlet.com/privacy#how_long_information_retained_title)” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “For each category of personal information identified above, we will retain your personal information only for as long as necessary to fulfill your requests or the purposes for which it was obtained, as set forth in this Notice. The criteria used to determine our retention periods include (i) the fulfillment of the purpose for which the information was collected, (ii) the duration of our ongoing relationship with you, and (iii) the legal obligations to which we are subject.” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “The criteria we use in determining how long to retain your personal information are described below in the section titled “How Long We Retain Your Information.“” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “[Disclosure of Your Personal Information](https://quizlet.com/privacy#personal_information_disclosure)” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Quizlet may receive information about you from other sources, including our partners, service providers, or other third parties. For example, the customer support chat feature may be provided by third parties that receive or have access to the content of communications made using those features. We may combine information we collect from you over time and across the Services with the information we receive from other sources and third parties (including personal information that they have collected from or about you in other contexts).” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “In the past 12 months, Quizlet has collected the following categories of personal information from consumers and disclosed such information to the following categories of third parties for the business or commercial purposes described below.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- **Complying with any applicable laws or regulations.** This includes appropriately responding to lawful requests for information from the government or third parties through legal process.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “**With your consent.** We may otherwise disclose personal information to companies, organizations or individuals outside of Quizlet when we have your consent to do so.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “| Personal information types listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) | A name, signature, address, telephone number, or employment information. Some personal information included in this category may overlap with other categories. | - IT and cloud/hosting service providers, such as our email providers, business application providers, hosting providers, managed services providers, and IT consultants<br>- Online analytics and marketing/advertising service providers<br>- Professional advisors (accountants, lawyers, and auditors) |” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “- **Crashlytics:** We use Crashlytics to track and report any app crashes or issues. This helps us make sure our apps run correctly. Crashlytics does not collect any personal data.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “**With any successor to all or part of our business.** If Quizlet is involved in a merger, acquisition, or sale of all or a portion of its assets, your personal information may be transferred to a receiving party. You will be notified of such change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “**To respond to legal and other requests and to prevent harm.** Quizlet may provide personal information to third-party entities if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to:” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “We may direct you to, or provide you with an option to, visit third-party websites or platforms. Third-party platforms operate independently from us and we are not responsible for the personal information that you choose to submit to those platforms. We encourage you to review the privacy policies and settings of the third-party platforms that you interact with as they will govern your interactions with those platforms.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ - If applicable, the categories of personal information that we sold, and for each category, the categories of third parties to whom such information was sold.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- Respond to or meet any applicable law, regulation, legal process or other enforceable governmental request.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- Protect against and prevent harm to the rights, property or safety of Quizlet, our users, or the public as required or permitted by law.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “We collect information about you from the following categories of third parties.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “If you complete a purchase transaction with us, we collect limited payment information and any information needed to process your payment. Our third-party payment processors handle any payment card details and payment instrument information that you may provide.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “- **Snowplow:** We use Snowplow for internal analytics. Snowplow collects page views and sessions to validate time on Quizlet for internal reporting and metrics purposes. Snowplow does not collect personal information.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “**For external processing.** Quizlet provides personal and non-personal information to our service providers, vendors, partners, payments providers, and other affiliated organizations to process it on our behalf. Our providers process data in accordance with our instructions, Privacy Policy and any other appropriate confidentiality, security or other requirements we deem necessary in order to comply with Quizlet’s obligations. We regularly update a list of our service providers and subprocessors, which you can view [here](https://quizlet.com/privacy/providers).” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “- **Firebase:** For our mobile app, we use Firebase services to monitor performance, track usage and fix issues. Firebase helps us ensure the Services work as intended. Firebase may temporarily process IP addresses to provide these services, including to derive approximate geographic location. IP retention periods vary by service but are limited to what is needed to provide the Services.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ - The categories of third parties to whom we disclose (or sell or share, if applicable) your personal information;” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “[Third-Party Websites or Platforms](https://quizlet.com/privacy#third_party_websites_or_plattforms_title)” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “From time to time, Quizlet may be required to disclose your information to governmental authorities for the purpose of complying with applicable laws and regulations or in response to legal process. We may also disclose your personal information to third parties in connection with the sale of our business or assets, or any merger or similar corporate matter, when your personal information is part of the assets involved in such a transaction.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “| Categories of PI Collected | Examples | Categories of Third Parties to Whom Disclosed |” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “With respect to personal information received or transferred pursuant to the DPF, Quizlet is subject to the regulatory enforcement powers of the US Federal Trade Commission. In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “Quizlet may disclose your information to third parties in the following circumstances:” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “**Service Providers**” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “**Our partners and other companies.** Quizlet may receive information about you from other sources, including our partners, service providers, or other third parties. For example, the customer support chat feature may be provided by third parties that receive or have access to the content of communications made using those features. We may combine information we collect from you over time and across the Services with the information we receive from other sources and third parties (including personal information that they have collected from or about you in other contexts). This helps us to improve the information’s overall accuracy and completeness. It also helps us to better tailor our interaction with you.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “We work with the following service providers to help us improve our services and understand how they are used.” | Captured 2026-06-07Open source →Finding permalink → |
| Tier differences | All applicable tiers | low | “| --- | --- | --- |” | Captured 2026-06-07Open source →Finding permalink → |
| Tier differences | All applicable tiers | low | “03. **Subscriptions.** You have the option to purchase a subscription plan, which offers an upgraded experience with additional features or functionality for your Quizlet account (" **Subscription**"). Subscriptions may be purchased either by (i) paying a recurring subscription fee; or (ii) pre-payment giving you access for a specific time period (" **Pre-Paid Period**"). The specific features included in each Subscription plan are described on our website at the time of purchase.” | Captured 2026-06-07Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.