ExamPass.ai is operated by AJKB Solutions Ltd, the data controller for all personal data processed through this platform.
If you have any questions about this policy or how we handle your data, please contact us at [email protected].
We are registered with the UK Information Commissioner's Office (ICO). ICO registration number: ZC153875.
| Information | Why we use it | Legal basis |
|---|---|---|
| Name and email | Create and manage your account; send verification and password reset emails | Contract — necessary to provide the service |
| Password hash | Authenticate you securely when you sign in | Contract — necessary to provide the service |
| Quiz and paper responses | Generate your "Topics to revisit" list; show your history and scores on the dashboard | Contract — this is the core feature you signed up for |
| Photos of handwritten answers | Extract your written text and mark it against the mark scheme using AI | Contract — necessary to deliver AI marking |
| Payment confirmation (from Stripe) | Add the correct credits to your account after purchase | Contract — necessary to fulfil your purchase |
| Technical logs | Protect the service from abuse and diagnose technical problems | Legitimate interest — keeping the service secure and stable |
| Inactivity data (last login date) | Send a warning before deleting inactive accounts, and delete them after 6 months of inactivity | Legitimate interest — managing data we no longer need to hold |
We do not use your information for advertising, profiling, or any purpose not listed above.
When you upload a photo of your handwritten answers, here is exactly what happens:
Important: AI marking is not perfect. The AI may occasionally misread handwriting or give a mark that differs from what a human examiner would give. Marks are a revision guide, not an official grade. Always review the extracted text before accepting the mark, and discuss any concerns with your teacher.
The AI does not learn from your work, store your answers beyond the marking process, or use your data to train future models. Anthropic and Google are data processors acting on our instructions only — see Section 5.
AI is also used to generate quiz questions and mock exam papers. No personal information is included in those generation calls — only the subject, exam board, and topic you selected.
We do not sell your data. We do not share your email address with anyone. We share information only with the following trusted service providers, and only to the extent needed to run the platform:
Handles payment processing. When you buy a credit pack, you are taken to Stripe's secure checkout. We receive only a payment confirmation — we never see your card number or bank details. Stripe's privacy policy is at stripe.com/gb/privacy.
Sends transactional emails on our behalf — account verification, password reset, and inactivity warnings. Resend receives your email address for this purpose only and cannot use it for any other purpose.
Process your uploaded answer images and generate quiz questions and mock papers. They act as data processors under our instructions and are contractually prohibited from using your data for their own purposes, including to train their models. Your data may be processed on servers in the United States, covered by Standard Contractual Clauses to ensure UK GDPR protections apply.
Hosts the ExamPass.ai application on servers in the EU (Falkenstein, Germany). Hetzner acts as a data processor under our instructions and cannot use your data for any other purpose. Hetzner's privacy policy is at hetzner.com/legal/privacy-policy.
We may disclose your information if required to do so by law or in response to a valid request from a law enforcement authority.
| Data | How long we keep it |
|---|---|
| Uploaded answer photos | Deleted within 24 hours of marking being confirmed |
| Account data (name, email, quiz/paper history) | While your account is active. If your account is inactive for 6 months, we send a warning email. If you don't sign in within 30 days of that warning, we delete your account and all associated data. |
| Payment records | 7 years from the date of purchase — required by UK tax law |
| Extracted text (transcription of your handwritten answers) | Kept for 1 year from the date of submission, then automatically cleared. Your marks, scores, and feedback are not affected — only the raw transcription is removed. |
| AI usage log (internal records of AI calls) | The full prompt text (which includes the mark scheme and your extracted answers) is automatically cleared after 90 days. Summary analytics (token counts, timing, subject, exam board) are retained for capacity planning and do not contain your personal answers. |
| Technical logs | Up to 90 days, then deleted automatically |
You can request deletion of your account at any time — see Section 8.
The ExamPass.ai application runs on Hetzner servers located in the EU (Falkenstein, Germany). Your account data and quiz/paper history are stored in a database hosted in the UK (London). Both locations satisfy UK GDPR requirements for data storage.
When your answers are processed for AI marking, data is sent to Anthropic (US) or Google (US/EU). Both providers have signed Data Processing Agreements with us and are covered by Standard Contractual Clauses, which apply the same protections as UK GDPR.
Under UK GDPR, you have the following rights. You can exercise any of them by emailing [email protected].
We will respond to all requests within one month. If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or by calling 0303 123 1113.
ExamPass.ai is designed for students aged 13 and over. We do not knowingly collect personal data from children under 13 without a parent or guardian creating the account on their behalf.
We collect only the minimum data needed to provide the service. We do not use your data for advertising, behavioural profiling, or any purpose beyond delivering the revision tools you signed up for.
If you are a parent and believe your child under 13 has created an account without your knowledge, please contact us at [email protected] and we will delete the account promptly.
This policy is written to be readable by students aged 13 and above. If anything is unclear, please email us and we will explain it in simpler terms.
We use one type of cookie: a session cookie that keeps you signed in while you use the platform. This cookie is essential for the service to work and does not track you across other websites.
We do not use advertising cookies, tracking pixels, or any third-party analytics cookies. We do not use Google Analytics or any similar service.
If we make significant changes to this policy — for example, if we start using a new data processor or change how long we keep your data — we will notify you by email before the change takes effect.
Minor changes (such as clarifications) will be updated here with a revised date. The current version is always available at exampass.ai/privacy.
For any privacy-related questions, data requests, or complaints:
AJKB Solutions Ltd (trading as ExamPass.ai)
Email: [email protected]
We aim to respond to all enquiries within 5 working days.