In plain English
- We collect your name, email address, exam question and exam paper responses, and photos of your handwritten answers. That's it.
- We never sell your data, share your email address, or show you adverts.
- We only ever email you about your account: things like verification, password resets, or important updates. We won't send marketing or promotional emails, and we won't sign you up for surveys.
- We use AI to mark your answers. We delete photos of your work the moment marking is done. The AI doesn't learn from your work.
- We share your data with the handful of services that keep the platform running: Stripe for payments, Resend for email, our AI provider, and Hetzner for hosting. None of them can use it for anything else.
- You can delete your account and everything in it any time you like, from Settings → Danger zone. It happens instantly.
Privacy Policy
1. Who we are
ExamPass.ai is operated by AJKB Solutions Ltd, the data controller for all personal data processed through this platform.
If you have any questions about this policy or how we handle your data, please contact us at [email protected].
We are registered with the UK Information Commissioner's Office (ICO). ICO registration number: ZC153875.
2. What information we collect
Information you give us
- Name and email address — when you create an account
- Password — stored as a one-way cryptographic hash; we can never read your actual password
- Exam question and exam paper responses — your answers, got it / missed it choices, and exam question history
- Photos of handwritten answers — uploaded by you for AI marking
- Curriculum and syllabus selections — the exam year you're sitting your exams, and (for subjects where your school or exam board offers a choice, e.g. which set text or case study you study) the specific options you select, so we generate content that matches what you're actually studying
Information we receive from third parties
- Payment confirmation — Stripe tells us when a payment succeeds so we can credit your account. We never receive or store your card details.
Information collected automatically
- Technical logs — IP address and browser type, collected by our hosting provider (Hetzner) for security and to keep the service running reliably
- Session cookies — used to keep you signed in (see Section 10)
3. How we use your information
| Information | Why we use it | Legal basis |
|---|---|---|
| Name and email | Create and manage your account; send verification and password reset emails | Contract — necessary to provide the service |
| Password hash | Authenticate you securely when you sign in | Contract — necessary to provide the service |
| Exam question and exam paper responses | Generate your "Topics to revisit" list; show your history and scores on the dashboard | Contract — this is the core feature you signed up for |
| Photos of handwritten answers | Extract your written text and mark it against the mark scheme using AI | Contract — necessary to deliver AI marking |
| Payment confirmation (from Stripe) | Add the correct credits or subscription entitlements to your account after purchase | Contract — necessary to fulfil your purchase |
| Technical logs | Protect the service from abuse and diagnose technical problems | Legitimate interest — keeping the service secure and stable |
| Inactivity data (last login date) | Send a warning before deleting inactive accounts, and delete them after 6 months of inactivity | Legitimate interest — managing data we no longer need to hold |
| Curriculum and syllabus selections (exam year, set text/case study choices) | Generate exam questions and exam papers that match your specific exam year and the syllabus content your school or exam board has assigned you, instead of generic or mismatched content | Contract — necessary to provide accurate revision content |
We do not use your information for advertising, profiling, or any purpose not listed above.
We only ever use your email address for transactional messages directly related to your account — verification, password reset, inactivity warnings, and important service updates. We will never send you marketing, promotional, or survey emails.
4. AI marking — how it works
When you upload a photo of your handwritten answers, here is exactly what happens:
- We send your image to an AI model which reads your handwriting and converts it to text.
- We show you the extracted text before marking begins, so you can check it was read correctly.
- The extracted text is sent to the AI, together with the mark scheme, so it can award a mark and produce written feedback. The text is stored alongside your result so you can review it on the paper page. It is automatically cleared after 1 year.
- Your image is automatically deleted within 7 days of upload. We keep it briefly rather than deleting it the moment marking finishes so that, if you report a problem with your marking, we can look into it using the original image.
Important: AI marking is not perfect. The AI may occasionally misread handwriting or give a mark that differs from what a human examiner would give. Marks are a revision guide, not an official grade. Always review the extracted text before accepting the mark, and discuss any concerns with your teacher.
The AI does not learn from your work, store your answers beyond the marking process, or use your data to train future models. Our AI provider acts as a data processor under our instructions only — see Section 5.
AI is also used to generate exam questions and exam papers. No personal information is included in those generation calls — only the subject, exam board, and topic you selected.
5. Who we share your information with
We do not sell your data. We do not share your email address with anyone. We share information only with the following trusted service providers, and only to the extent needed to run the platform:
Stripe
Handles payment processing. When you make a purchase, you are taken to Stripe's secure checkout. We receive only a payment confirmation — we never see your card number or bank details. Stripe's privacy policy is at stripe.com/gb/privacy.
Resend
Sends transactional emails on our behalf — account verification, password reset, and inactivity warnings. Resend receives your email address for this purpose only and cannot use it for any other purpose.
AI provider
Processes your uploaded answer images and generates exam questions and exam papers. Our AI provider acts as a data processor under our instructions and is contractually prohibited from using your data for their own purposes, including to train their models. Your data may be processed on servers outside the UK, covered by Standard Contractual Clauses to ensure UK GDPR protections apply.
Hetzner
Hosts the ExamPass.ai application on servers in the EU (Falkenstein, Germany). Hetzner acts as a data processor under our instructions and cannot use your data for any other purpose. Hetzner's privacy policy is at hetzner.com/legal/privacy-policy.
We may disclose your information if required to do so by law or in response to a valid request from a law enforcement authority.
6. How long we keep your information
| Data | How long we keep it |
|---|---|
| Uploaded answer photos | Deleted automatically within 7 days of upload — kept briefly rather than deleted the moment marking finishes, so we can help resolve any support issue you raise about your marking |
| Account data (name, email, exam question/exam paper history) | While your account is active. If your account is inactive for 6 months, we send a warning email. If you don't sign in within 30 days of that warning, we delete your account and all associated data. |
| Curriculum and syllabus selections (exam year, set text/case study choices) | While your account is active — deleted along with the rest of your account data on the same inactivity schedule above. You can change a selection at any time it's shown to you when generating exam questions or an exam paper. |
| Payment records | 7 years from the date of purchase — required by UK tax law |
| Extracted text (transcription of your handwritten answers) | Kept for 1 year from the date of submission, then automatically cleared. Your marks, scores, and feedback are not affected — only the raw transcription is removed. |
| AI usage log (internal records of AI calls) | The full prompt and AI response (which include the mark scheme, your extracted answers, and any marking feedback) are automatically cleared after 12 months. Summary analytics (token counts, timing, subject, exam board) are retained for capacity planning and do not contain your personal answers. |
| Technical logs | Up to 90 days, then deleted automatically |
You can request deletion of your account at any time — see Section 8.
7. Where your information is stored
The ExamPass.ai application and database both run on Hetzner servers in the EU (Falkenstein, Germany). Uploaded answer images are temporarily held in Cloudflare R2 object storage (EU) and automatically deleted within 7 days of upload. All locations satisfy UK GDPR requirements for data storage.
When your answers are processed for AI marking, data is sent to our AI provider for processing. They have signed a Data Processing Agreement with us and are covered by Standard Contractual Clauses, which apply the same protections as UK GDPR.
8. Your rights
Under UK GDPR, you have the following rights. You can exercise any of them by emailing [email protected].
- Access: You can ask us for a copy of all personal data we hold about you.
- Correction: You can ask us to correct inaccurate information.
- Deletion: Delete your account and all associated data instantly from Settings → Danger zone. Some records are retained where required by law (e.g. payment records for 7 years).
- Objection: You can object to processing based on legitimate interest (technical logs and inactivity tracking).
- Portability: You can ask for your data in a structured, machine-readable format.
- Restriction: You can ask us to pause processing your data while a dispute is resolved.
We will respond to all requests within one month. If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or by calling 0303 123 1113.
9. Children and young people
ExamPass.ai is designed for students aged 13 and over. We do not knowingly collect personal data from children under 13 without a parent or guardian creating the account on their behalf.
We collect only the minimum data needed to provide the service. We do not use your data for advertising, behavioural profiling, or any purpose beyond delivering the revision tools you signed up for.
If you are a parent and believe your child under 13 has created an account without your knowledge, please contact us at [email protected] and we will delete the account promptly.
This policy is written to be readable by students aged 13 and above. If anything is unclear, please email us and we will explain it in simpler terms.
10. Cookies
We use two types of cookie:
Session cookie
An essential cookie that keeps you signed in while you use the platform. Without it the service cannot function. It does not track you across other websites.
Analytics cookie (Google Analytics 4)
We use Google Analytics 4 to collect anonymous usage statistics — for example, which pages are visited most. This helps us improve the platform. Google Analytics sets cookies on your device to do this. We do not share your name or email with Google, and we do not use this data to identify you personally. You can opt out using Google's opt-out tool.
We do not use advertising cookies or tracking pixels.
11. Changes to this policy
If we make significant changes to this policy — for example, if we start using a new data processor or change how long we keep your data — we will notify you before the change takes effect.
Minor changes (such as clarifications) will be updated here with a revised date. The current version is always available at exampass.ai/privacy.
12. Contact us
For any privacy-related questions, data requests, or complaints:
AJKB Solutions Ltd (trading as ExamPass.ai)
Email: [email protected]
We aim to respond to all enquiries within 5 working days.