In plain English
- We collect your name and email address, your answers to exam questions and exam papers, photos of your handwritten work, and the basic technical logs every website keeps.
- We never sell your data or show you adverts.
- We only ever email you about your account: things like verification, password resets, or important updates. We won't send marketing or promotional emails, and we won't sign you up for surveys.
- We use AI to mark your answers. We delete photos of your work within 7 days of upload. The AI doesn't learn from your work.
- We share your data only with the service providers needed to run the platform: our payment provider, our email provider, our AI provider, and our hosting and storage providers. Each receives only what it needs for its job, and none may use it for anything else.
- You can delete your account and everything in it any time you like, from Settings → Danger zone. It happens instantly.
Privacy Policy
Jump to a section
- 1. Who we are
- 2. What information we collect
- 3. How we use your information
- 4. AI marking — how it works
- 5. Who we share your information with
- 6. How long we keep your information
- 7. Where your information is stored
- 8. Your rights
- 9. Children and young people
- 10. Cookies
- 11. Changes to this policy
- 12. Contact us
1. Who we are
ExamPass.ai is operated by AJKB Solutions Ltd, the data controller for all personal data processed through this platform.
If you have any questions about this policy or how we handle your data, please contact us at [email protected].
We are registered with the UK Information Commissioner's Office (ICO). ICO registration number: ZC153875.
2. What information we collect
Information you give us
- Name and email address — when you create an account
- Password — stored as a one-way cryptographic hash; we can never read your actual password
- Exam question and exam paper responses — your answers, got it / missed it choices, and exam question history
- Photos of handwritten answers — uploaded by you for AI marking
- Curriculum and syllabus selections — the exam year you're sitting your exams, and (for subjects where your school or exam board offers a choice, e.g. which set text or case study you study) the specific options you select, so we generate content that matches what you're actually studying
Information we receive from third parties
- Payment confirmation — our payment provider tells us when a payment succeeds so we can credit your account. We never receive or store your card details.
Information collected automatically
- Technical logs — IP address and browser type, collected by our hosting and network providers for security and to keep the service running reliably
- Session cookies — used to keep you signed in (see Section 10)
- How you found us — some links to ExamPass carry short labels saying where the link was posted and which topic it was about. If you arrive through one of those links and create an account, we save the labels with it, so we can see which of our posts are useful. They say nothing about you or about what you do on other websites.
3. How we use your information
| Information | Why we use it | Legal basis |
|---|---|---|
| Name and email | Create and manage your account; send verification and password reset emails | Contract — necessary to provide the service |
| Password hash | Authenticate you securely when you sign in | Contract — necessary to provide the service |
| Exam question and exam paper responses | Generate your "Topics to revisit" list; show your history and scores on the dashboard | Contract — this is the core feature you signed up for |
| Photos of handwritten answers | Extract your written text and mark it against the mark scheme using AI | Contract — necessary to deliver AI marking |
| Payment confirmation (from our payment provider) | Add the correct credits or subscription entitlements to your account after purchase | Contract — necessary to fulfil your purchase |
| Technical logs | Protect the service from abuse and diagnose technical problems | Legitimate interest — keeping the service secure and stable |
| Inactivity data (last login date) | Send a warning before deleting inactive accounts, and delete them after 6 months of inactivity | Legitimate interest — managing data we no longer need to hold |
| Curriculum and syllabus selections (exam year, set text/case study choices) | Generate exam questions and exam papers that match your specific exam year and the syllabus content your school or exam board has assigned you, instead of generic or mismatched content | Contract — necessary to provide accurate revision content |
| How you found us (link labels) | See which of our posts and pages bring students to ExamPass, so we put effort where it helps | Legitimate interest — understanding how people find the service |
We do not use your information for advertising, profiling, or any purpose not listed above.
We only ever use your email address for transactional messages directly related to your account — verification, password reset, inactivity warnings, and important service updates. We will never send you marketing, promotional, or survey emails.
4. AI marking — how it works
When you upload a photo of your handwritten answers, here is exactly what happens:
- We send your image to an AI model which reads your handwriting and converts it to text.
- We show you the extracted text before marking begins, so you can check it was read correctly.
- The extracted text is sent to the AI, together with the mark scheme, so it can award a mark and produce written feedback. The text is stored alongside your result so you can review it on the paper page. It is automatically cleared after 1 year.
- Your image is automatically deleted within 7 days of upload. We keep it briefly rather than deleting it the moment marking finishes so that, if you report a problem with your marking, we can look into it using the original image.
The AI does not learn from your work, store your answers beyond the marking process, or use your data to train future models. Our AI provider acts as a data processor under our instructions only — see Section 5.
AI is also used to generate exam questions and exam papers. No personal information is included in those generation calls — only the subject, exam board, and topic you selected.
5. Who we share your information with
We do not sell your data. We share information only with the service providers below, and only as far as each needs it to do its job. Each acts on our instructions and is not permitted to use your data for its own purposes. You can ask us for the current list of providers at any time.
Payment provider
Handles payments. When you buy something you are taken to its secure checkout. It receives your name and email address so the purchase is attached to your account. We receive only a payment confirmation and never see your card number or bank details.
Email provider
Sends our account emails: verification, password reset, and inactivity warnings. It receives your email address for this purpose only.
AI provider
Processes your uploaded answer images and generates exam questions and exam papers. Our AI provider acts as a data processor under our instructions and is contractually prohibited from using your data for their own purposes, including to train their models. Your data may be processed on servers outside the UK, covered by Standard Contractual Clauses to ensure UK GDPR protections apply.
Hosting and network providers
Run the servers the platform lives on, in the EU, and carry traffic between you and the platform. Photos of your answers are held in EU storage and deleted automatically within 7 days of upload.
We may disclose your information if required to do so by law or in response to a valid request from a law enforcement authority.
6. How long we keep your information
| Data | How long we keep it |
|---|---|
| Uploaded answer photos | Deleted automatically within 7 days of upload — kept briefly rather than deleted the moment marking finishes, so we can help resolve any support issue you raise about your marking |
| Account data (name, email, exam question/exam paper history) | While your account is active. If your account is inactive for 6 months, we send a warning email. If you don't sign in within 30 days of that warning, we delete your account and all associated data. |
| Curriculum and syllabus selections (exam year, set text/case study choices) | While your account is active — deleted along with the rest of your account data on the same inactivity schedule above. You can change a selection at any time it's shown to you when generating exam questions or an exam paper. |
| Payment records | 7 years from the date of purchase — required by UK tax law |
| Extracted text (transcription of your handwritten answers) | Kept for 1 year from the date of submission, then automatically cleared. Your marks, scores, and feedback are not affected — only the raw transcription is removed. |
| AI usage log (internal records of AI calls) | The full prompt and AI response (which include the mark scheme, your extracted answers, and any marking feedback) are automatically cleared after 12 months. Summary analytics (token counts, timing, subject, exam board) are retained for capacity planning and do not contain your personal answers. |
| Technical logs and diagnostic data | Up to 6 months, then deleted automatically |
You can request deletion of your account at any time — see Section 8.
7. Where your information is stored
The ExamPass.ai application and database run on servers in the EU (Germany). Uploaded answer images are held temporarily in object storage in the EU and automatically deleted within 7 days of upload. All locations satisfy UK GDPR requirements for data storage.
When your answers are processed for AI marking, data is sent to our AI provider for processing. They have signed a Data Processing Agreement with us and are covered by Standard Contractual Clauses, which apply the same protections as UK GDPR.
8. Your rights
Under UK GDPR, you have the following rights. You can exercise any of them by emailing [email protected].
- Access: You can ask us for a copy of all personal data we hold about you.
- Correction: You can ask us to correct inaccurate information.
- Deletion: Delete your account and all associated data instantly from Settings → Danger zone. Some records are retained where required by law (e.g. payment records for 7 years).
- Objection: You can object to processing based on legitimate interest (technical logs and inactivity tracking).
- Portability: You can ask for your data in a structured, machine-readable format.
- Restriction: You can ask us to pause processing your data while a dispute is resolved.
We will respond to all requests within one month. If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or by calling 0303 123 1113.
9. Children and young people
ExamPass.ai is designed for students aged 13 and over. We do not knowingly collect personal data from children under 13 without a parent or guardian creating the account on their behalf.
We collect only the minimum data needed to provide the service. We do not use your data for advertising, behavioural profiling, or any purpose beyond delivering the revision tools you signed up for.
If you are a parent and believe your child under 13 has created an account without your knowledge, please contact us at [email protected] and we will delete the account promptly.
This policy is written to be readable by students aged 13 and above. If anything is unclear, please email us and we will explain it in simpler terms.
10. Cookies
We use the following cookies:
Session cookie
An essential cookie that keeps you signed in while you use the platform. Without it the service cannot function. It does not track you across other websites.
Sign-in with another account
If you choose to sign in using an account from another provider, three short-lived cookies keep that sign-in secure while it completes. They hold no personal information and expire within 10 minutes.
Theme preference cookie
Remembers whether you chose the light or dark theme, so pages open in your theme before they finish loading. It holds nothing else and lasts a year.
Sign-up source cookie
If you arrive through one of our labelled links, this cookie remembers the link's labels until you create an account, and is then deleted. If you never sign up it expires after 30 days. It holds nothing else and is not shared with anyone.
Analytics cookie
We use our analytics provider to collect anonymous usage statistics — for example, which pages are visited most. This helps us improve the platform. Our analytics provider sets cookies on your device to do this. We do not share your name or email with our analytics provider, and we do not use this data to identify you personally. You can turn this off at any time: (also in Settings). Your choice is stored in a cookie named analytics_off.
Analytics choice cookie
Set only if you turn analytics off, so it stays off on this device. It holds nothing else and lasts a year.
We do not use advertising cookies or tracking pixels.
11. Changes to this policy
If we make significant changes to this policy — for example, if we start using a new data processor or change how long we keep your data — we will notify you before the change takes effect.
Minor changes (such as clarifications) will be updated here with a revised date. The current version is always available at exampass.ai/privacy.
12. Contact us
For any privacy-related questions, data requests, or complaints:
AJKB Solutions Ltd (trading as ExamPass.ai)
Email: [email protected]
We aim to respond to all enquiries within 5 working days.