
How Qwizflow Works: Architecture, Journeys & Security Visualised
By Qwizflow Team
17 April 2026
· 10 min read
Qwizflow is not just a quiz app — it is a multi-layered AI learning platform serving four distinct roles with enterprise-grade security and Australian data residency. This guide walks through how every piece fits together.
1. Platform Architecture
Every interaction follows the same secure pipeline — from the button you tap to the AI that responds.
- Your Dashboard — the React app in your browser
- Secure Gateway — auth token plus consent check
- Learning Engine — business logic and mastery scoring
- Database — Melbourne, Australia
- AI Providers — PII-scrubbed prompts only
The whole path is TLS 1.3 encrypted, rate-limited to 100 requests per minute per user, protected by a 7-day recovery window, and no PII is ever sent to AI.
1b. The Owl Tutor — One Chat Front Door
Layer 1 used to mean "pick the right AI tool from a menu". With the Owl Tutor that step is gone — students describe what they want in plain language and the right tool just happens inside the same chat.
- You Ask — speak or type into the Owl chat
- Owl Reads Intent — decides which tool fits
- Same Consent and Caps — the per-feature gate still applies
- Tool Runs In-Chat — cards, quizzes, voice
- It Remembers — cross-session memory, 90-day history
The chat is grounded in the same single, living learner picture every other surface reads from — content level, interests, outstanding misconceptions, recent topic summaries, durable notes from parents and teachers — so whatever tool the Owl spins up sounds like "the same tutor" instead of starting from scratch. If your ask needs a feature your parent hasn't approved yet, the chat shows a one-tap bundle approval right there instead of dead-ending you. Conversations are saved for 90 days so you can pick up where you left off; older history quietly auto-expires. Voice in and voice out, camera-to-chat, per-feature consent unchanged.
2. Feature Map by Role
Every user sees a different experience. Students unlock 130+ features across Learn, Practice, AI Tutors, Create, Compete, Customise, Wellness, Life Skills, Social and Transparency. Parents get 22+ features across Monitor and Track, AI Insights, Family Hub, Consent Controls and Annotations. Teachers get 40+ features across Classroom Management, Analytics, Teaching Tools, AI Assistants, Help Queue, Heatmap, Safety and Communication. School Admins get 15+ features across School Management, Compliance, AI Budgets, Monitoring and Analytics.
Student feature categories, expanded:
- Learn (10) — Paths, Curriculum, Study Guides, Concept Graph, Doc Scanner
- Practice (12) — Adaptive Quiz, CAT, Diagnostic, Micro-Quiz, Exam Prep, Hints
- AI Tutors (12) — Socratic Tutor, Homework Helper, Owl Chat, Explain Like...
- Create (10) — Stories, Debate, Roleplay, Comics, Podcasts, Code, Projects
- Compete (15) — Battles, Duels, Leagues, Streaks, Trophies, Team Quests
- Customise (6) — Themes, Seasonal events, Study Pass, Settings preferences
- Wellness (10) — Mood, Focus, Frustration Support, Finance, Career, AI Lit
- Social (5) — Study Rooms, Buddies, Messaging, Showcase, Portfolio
The Unified Learner Picture
Every student on Qwizflow has a single, living learner picture that the whole platform shares. When the AI Tutor answers a question, the Story Writer continues a chapter, or the Debate Arena responds to an argument, it is all reading from the same profile — so you get a consistent experience instead of starting from scratch every time. It holds:
- Mastery Rollup — strengths, struggles, recent topic summaries
- Reading Level — per-subject target reading level plus confidence
- Pace Signature — how long you study and when you peak
- Affective Rollup — confidence, frustration, mood trend
- Mode Weights — visual / audio / interactive / text preferences
- Goals — targets with countdowns and linked subjects
- Error Taxonomy — slip / procedural / conceptual / vocab / prereq
- Tone Preference — too dry / just right / too babyish signal
- Annotations — durable notes from parents and teachers
Plus a rolling 60-minute working memory that remembers what you just did across features, so the AI can hand off naturally when you jump from a quiz to a tutor to a story. You see your own learner picture on your profile. A linked parent can see their child's. Teachers do not read the raw picture — they see aggregated classroom analytics. No AI provider ever receives names, emails, or other identifying information alongside this context.
3. Student Journey: Quiz and Mastery
- Choose Your Curriculum — select from Australian Curriculum, IB, or custom pathways, pick your year level and subjects, and the AI generates a personalised learning path with 5–7 topics sequenced from foundational to advanced.
- AI Generates Your Quiz — an adaptive quiz calibrated to your level; a consent check ensures you have opted in to AI quiz generation, with an inline prompt if not.
- Answer with Live Feedback — a live mastery bar tracks your estimated score in real time; use progressive hints or request an easier question variant when stuck.
- Mastery Score Calculated — answers are scored across 5 weighted dimensions: Accuracy 50%, Calibration 20%, Concepts 15%, Effort 10%, Retention 5%.
- Three-Way Decision — score 0.75 or above passes the topic and earns a trophy; 0.5–0.74 goes to remediation with a targeted study guide and up to 2 retry attempts; below 0.5 the topic is blocked and the AI generates a misconception lesson.
- Earn Trophies and Progress — bronze, silver, gold and platinum trophies; the path updates, the next topic unlocks, and spaced repetition schedules future reviews.
4. Student Journey: Misconception Remediation
- Topic Blocked — a Misconception Alert banner explains which concept is blocking progress.
- AI Generates a Personalised Lesson — targeted at your exact misconception, with worked examples and visual explanations.
- 3-Question Retest — server-graded, with a 30-minute session limit and a maximum of 3 sessions per hour.
- Misconception Resolved, Topic Unblocked — pass and your mastery updates; fail and the AI generates a new lesson targeting where you went wrong this time.
5. Parent Journey: Monitor and Support
- View Linked Children — each card shows streak, active subjects, and a mastery snapshot.
- Review Progress and Weekly Digest — mastery per subject, quiz completion, time spent, week-over-week trends, and a plain-language digest.
- Get AI-Powered Insights — the Enhanced Digest identifies patterns, Help Tonight suggests dinner-table conversation starters, and the AI Coach answers questions about your child's learning.
- Manage AI Consent and Review Transparency — toggle individual features in the AI Consent Centre, with age-appropriate "Explain this toggle" tooltips, a Recent Activity view (last 10 interactions per feature), Transparency Cards, a timestamped Consent Audit Log, and the AI Transparency Ledger with one-click erase and JSON export.
- Family Hub and Caregivers — invite co-parents, grandparents, or tutors with per-caregiver permissions; when two parents are linked, the most restrictive AI consent setting always wins and the other parent is notified of any change.
6. Teacher Journey: Classroom Command Centre
- Create and Manage Classrooms — unique join codes, CSV bulk import, classroom-level AI policies and active hours.
- View Student Analytics — the Knowledge Heatmap shows mastered (green), learning (amber), and not started (grey) concepts, with drill-down student reports.
- AI Detects At-Risk Students — declining accuracy, fewer logins, or rising frustration signals each trigger an alert with a recommended intervention.
- Launch a Live Quiz — Kahoot-style with join codes, a real-time leaderboard, and exportable results.
- Monitor Students Live — see who is answering, who is idle, who just had a breakthrough; one-click nudge; the AI Monitor shows aggregated AI usage patterns.
7. School Admin Journey: Governance and Oversight
- School Overview — students, teachers, classrooms, engagement, AI adoption, compliance status.
- Approve Teachers — teachers register with a secure invite code (TCH-xxxxx) and wait in your approval queue.
- Set School-Wide Policies — policies cascade to all classrooms; teachers can further restrict but cannot override you to enable a feature you disabled.
- Monitor Usage and Generate Reports — usage analytics, AI health, and one-click compliance reports covering data residency, consent management, the sub-processor register, and incident response evidence.
8. Consent Architecture
Age tier determines who manages consent: under 13, AI is blocked until a parent consents (parent only); ages 13–15, AI is available if a parent approves (parent only); ages 16–17, the student can self-consent with parental override; 18+ has full autonomy.
Consent is granular per feature — Quiz Generation, Socratic Tutor, Homework Helper, Story Writer, Debate Arena, Roleplay, Owl Chat, Study Guides, Creative Tools, Voice Features, Adaptive Learning, Teacher AI, Parent Coach — and enforced by a two-sided gate: the frontend checks consent before showing any AI UI (an inline prompt appears if consent is missing), and every AI request is re-checked server-side, which cannot be bypassed from the browser. Multi-parent rule: the most restrictive setting wins, and the other parent is notified on change.
9. Role-Based Access Control (RBAC)
Authentication flows from Google Sign-In (OAuth 2.0) to a signed, short-lived JWT, a server-assigned role check, and finally role-scoped data access. Students see their own data only (invite code CLS-xxxxx). Parents see linked children only — progress summaries, consent settings, AI insights, never raw transcripts (PAR-xxxxx). Teachers see their own classrooms only — aggregated analytics and safety flags, never raw AI conversations (TCH-xxxxx). School admins get school-wide oversight (isSchoolAdmin flag). Ownership is enforced: no horizontal privilege escalation.
The Talking 3D AI Character Pipeline
Every voice surface — Live Tutor, Discussion Mode, Read Aloud — is fronted by a 3D character whose mouth shapes are aligned with the audio in real time. Five layers compose every frame: amplitude-driven jaw movement, precise viseme blendshapes from the synthesised speech, mood-driven facial expression, idle / talk / listen / think pose, and head-tracking. How a spoken word reaches the screen: the AI composes a reply anchored to the learner profile, cloud TTS renders it with an HD voice and mood preset, a viseme timeline maps 15 mouth shapes per word, the 3D character plays lip-sync plus mood and pose, and the voice budget debits seconds atomically. Five voice personas, adaptive mood, ARKit lip-sync, edge caching, and a reduced-motion path.
AI Usage Budget — You Can See It
Every account has a daily AI usage budget keyed to its cohort (under-13 / 13-15 / 16+ / teacher / parent). Students see a battery chip in their hub showing how much of today is left. The budget covers three pools with one visible meter: Text (tutor, Owl, story and roleplay messages), Image (quiz images, blog images), and Voice (live tutor plus Read Aloud drawing from unified seconds). When the budget runs out, the platform offers offline alternatives instead of a brick wall. Under-13 students get the most conservative voice budget, caps reset at midnight Australia/Melbourne local time, and school admins can adjust caps without a deployment.
10. Platform at a Glance
200+ total features: 130+ for students, 22+ for parents, 40+ for teachers, 15+ for admins, plus 30+ public pages. 20+ AI tools, 14 consent gates, 4 user roles, 10 student categories, 100% free, with AU data residency. TLS 1.3 encryption, a 7-day recovery window, daily auto backups, a 100-requests-per-minute rate limit, and zero PII sent to AI.
FAQ
Is Qwizflow free to use?
Yes — Qwizflow is 100% free, offering 200+ features across the student, parent, teacher and school admin roles, including 20+ AI tools.
Where is Qwizflow student data stored?
All data lives in Australia — the database layer sits in Melbourne — protected by TLS 1.3 encryption, daily automated backups and a 7-day point-in-time recovery window. Prompts sent to AI providers are PII-scrubbed first.
How does Qwizflow decide when a topic is mastered?
Quiz answers are scored across five weighted dimensions — accuracy (50%), calibration (20%), concepts (15%), effort (10%) and retention (5%). A score of 0.75 or above passes the topic, 0.5–0.74 triggers remediation with up to 2 retries, and below 0.5 generates a targeted misconception lesson with a 3-question retest.
Who manages AI consent for a child on Qwizflow?
It depends on age: under-13 accounts have AI blocked until a parent consents, ages 13–15 need parental approval, ages 16–17 can self-consent with parental override, and 18+ has full autonomy. Consent is per-feature and enforced on both the frontend and the backend.
What happens when a student runs out of daily AI budget?
Every account has a cohort-keyed daily AI budget shown as a battery chip in the hub. When it runs out, the platform offers offline alternatives instead of a brick wall, and caps reset at midnight Australia/Melbourne local time.