Skip to content
Install free

Privacy policy

How Teacup Quiz handles the data of the stores that use it and their shoppers. Last updated November 2, 2026.

Teacup Quiz is a Shopify app made by Teacup (“we”). It lets stores add product quizzes to their Shopify online store. This policy explains what we collect, why, and what you can ask of us. Questions: support@teacuphq.com.

Who is responsible

For data about a store’s shoppers, the store (the merchant) decides what is collected and why, and Teacup Quiz processes it on the store’s behalf. For data about merchants using the app, we are responsible.

What we collect from merchants

  • Your store’s Shopify domain and the access token Shopify gives the app when you install it.
  • The name and email of the staff member who opens the app, as Shopify provides them.
  • Your store’s name and email, and the address you choose for Teacup’s emails, to send you usage notices and the weekly report.
  • Your quizzes and settings. Quizzes are saved in your own Shopify store (app data), not on our servers.
  • Your plan and the subscription Shopify bills you for. We never see payment card details: Shopify handles billing.
  • If you connect Klaviyo or Omnisend, its API key (or, for Klaviyo’s one-click connect, its access tokens and account name), stored encrypted.

To show your products in quizzes, the app reads your products and collections through the Shopify API. It changes them only if you turn on “Good for” in Integrations (AI shopping agents): then it writes one product field, teacup.good_for, and removes it when you turn it off.

What we collect from shoppers

  • Quiz activity, without identifying anyone: each quiz run, under a random ID the shopper’s browser makes for that run: the answers chosen, the results shown, whether it was finished, the products added to the cart, the orders that followed, whether it was on a phone or a computer, the site or campaign the shopper came from, and the store language. Also daily counts per quiz of views, starts, completions, answers and add-to-carts. None of this contains names, emails, IP addresses or device identifiers.
  • Orders that came from a quiz: when a shopper buys products they added from a quiz, the app’s web pixel reports the order’s ID, currency, which quizzes’ products it contained, the quiz run they came from, and their value. No name, address or contact details.
  • Emails, only if the store asks for them: if a quiz has an email step and the shopper fills it in, we store the email (and phone number, if given), the shopper’s answers and whether they agreed to marketing. The store sees these on its Emails page and can export them. The email (and phone number) is also added to the store’s own Shopify customers, tagged with the quiz and the shopper’s result, and subscribed to the store’s email marketing only if the shopper ticked the box. If the store connected Klaviyo or Omnisend, they are sent to the store’s account there.
  • In the shopper’s browser: the quiz keeps the shopper’s progress in session storage, so a page reload doesn’t lose their answers, remembers that a popup was already shown, and, while the store runs an A/B test, which of the two quizzes this browser got (in local storage, under teacup:test:<test>), so a shopper keeps seeing the same one, and the questions and answers of the last quiz they finished (in local storage, under teacup:answers, unless they decline preference cookies), so the store’s own pages can use them; these never leave the browser. When the shopper allows analytics, one first-party cookie, teacup_ref, keeps the quiz they took, the numbers of the products it recommended and the quiz run’s random ID for 7 days, so the store’s Teacup web pixel can count an order of those products placed outside the quiz. It holds nothing about the shopper.

To protect stores from abuse, our server briefly keeps request counts per IP address (or network) in memory. They are never written to disk.

Early access sign-ups

If you ask for early access on our website, we keep your email and, if you give it, your store’s address, only to tell you when Teacup Quiz is available and to help you set it up. Write to us and we delete them.

Quiz previews on our website

When you ask for a quiz preview on our website, we read the store’s public product list and store details (the ones any visitor’s browser can read), have AI draft a quiz from them, and keep the preview for 30 days at its own link. We keep nothing about the person who asked.

How we use it

Only to run Teacup Quiz for the store: to show quizzes and recommendations, show the store its analytics and emails, add quiz emails to the store’s Shopify customers, send data to the store’s Klaviyo or Omnisend account when it asks us to, apply its plan, and keep the service secure. We do not sell data, use it for advertising, or combine data across stores.

Who processes it

  • Shopify, which hosts the app inside your admin and your store and handles billing.
  • Render (United States), which hosts our servers and database.
  • Anthropic, when a merchant asks the app to draft or translate a quiz with AI, or asks for a quiz preview on our website: we send product details (titles, descriptions, types, tags, prices, options), the quiz’s texts and the merchant’s note. And when a quiz lets shoppers answer in their own words, the words they type and the question’s answers, to pick the answers that fit; we don’t store those words, and under its commercial terms Anthropic doesn’t train on them. Never names, emails or other shopper details.
  • Klaviyo or Omnisend, only for stores that connect their own account.
  • Resend (United States), which delivers our emails to merchants. Never shopper data.
  • Crisp (France), our support chat, when a merchant writes to us: the messages, the store’s address and plan, and anything the merchant shares in the chat. Never shopper data.

How long we keep it

While the app is installed. When a store uninstalls Teacup Quiz, Shopify asks us to delete the store’s data and we delete everything we hold for it: emails, analytics, settings and keys. We keep only the store’s address, the date its free trial started, so a store gets one free trial, and whether it’s a founding store, so it keeps its discount. A record of its installs, uninstalls and plan changes stays, without the store’s address, for 13 months. If “Good for” was on when the store uninstalled, that field stays on its products until the merchant deletes it (turning “Good for” off before uninstalling removes it). When Shopify forwards a shopper’s deletion request, we delete that shopper’s emails and answers, with the quiz runs their emails came from and the quiz orders Shopify names in the request. Quiz runs and the orders that came from quizzes are deleted after 13 months, and emails after 24 months.

Your rights

Shoppers can ask the store they bought from to see, correct or delete their data, under laws like the GDPR and the CCPA; Shopify passes those requests to us and we act on them. Merchants can write to us about their own data at support@teacuphq.com.

Security

All traffic is encrypted (HTTPS). Klaviyo and Omnisend keys and tokens are encrypted at rest. Requests from stores are verified with Shopify’s signatures, and access to our systems is limited to the people who run Teacup Quiz.

Changes

If we change this policy, we update this page and the date at the top.