Privacy Policy

Introduction

Welcome to ExamReady.ai ("we", "us", or "our"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our AI-powered exam preparation platform.

ExamReady.ai is operated from the United Kingdom and is designed to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact: If you have questions about this policy or your data, email us at hello@examready.ai

1. Information We Collect

1.1 Account Information

When you create an account using OAuth providers, we collect:

• Your email address
• Your name (from Google, Microsoft, or Apple)
• Profile picture (if provided by OAuth provider)
• OAuth provider user ID

1.2 Usage Data

When you use our service, we collect:

• Practice session data (questions attempted, answers submitted)
• AI marking results and feedback
• Progress tracking information (scores, topic performance)
• Papers and topics you've practiced
• Question suitability flags you set

1.3 Technical Data

With your consent, we collect analytics data via Google Analytics to improve our service:

• IP address (anonymized)
• Browser type and version
• Device information
• Operating system
• Referral source
• Pages visited and time spent
• User interactions (button clicks, feature usage)

This data is collected only after you accept analytics cookies via our cookie consent banner.

1.4 Cookies and Local Storage

We use essential cookies for authentication and session management. We also use browser local storage to save draft answers before you submit them for marking. This allows you to continue your work if you close your browser.

Analytics Cookies (Requires Consent):

• Google Analytics cookies (_ga, _gid): Track website usage to help us understand how users interact with our platform and identify areas for improvement
• Purpose: Measure page views, user sessions, feature usage, and navigation patterns
• Retention: Analytics data is retained for 14 months in compliance with GDPR data minimization principles
• Control: You can accept or decline analytics cookies via our cookie consent banner. You can withdraw consent at any time.

For more information about Google Analytics cookies, see Google's Cookie Policy.

We do not use advertising cookies or sell your data to third parties.

2. How We Use Your Data

We use your personal data for the following purposes:

• Provide the service: Store your practice attempts, track your progress, and manage your account
• AI marking: Send your answers to Anthropic's Claude API for automated marking and feedback
• Service improvement: Analyze usage patterns to improve our platform (aggregated and anonymized)
• Communication: Send important service updates (account issues, policy changes) if necessary
• Legal compliance: Comply with legal obligations and enforce our terms

Legal basis: We process your data based on (1) contract performance (to provide the service you signed up for), (2) legitimate interests (to improve our service and ensure security), and (3) legal obligations.

3. AI Processing Disclosure

• What we send: Your answer text, question metadata (marks available, marking criteria), and general marking instructions
• What we don't send: The actual exam question content (we only reference it by ID)
• Purpose: To generate educational feedback comparing your answer to official mark schemes
• Anthropic's policy: According to Anthropic's data usage policy, API inputs are retained for 30 days for trust and safety purposes, then deleted. Your data is not used to train Anthropic's models.
• Data location: Anthropic processes data in the United States. We rely on standard contractual clauses for this transfer.

For more information, see Anthropic's Privacy Policy.

4. Third-Party Services

We share your data with the following third-party service providers who help us operate our platform:

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

5. Your Rights Under GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

6. Data Retention

We retain your personal data for as long as necessary to provide our service:

• Account data: Until you delete your account
• Practice attempts and progress: Until you delete your account or request deletion
• Backups: Up to 30 days after deletion (then permanently removed)
• Legal requirements: Some data may be retained longer if required by law

7. International Data Transfers

Your data may be transferred to and processed in countries outside the UK, specifically:

• United States: Anthropic (AI marking) and Vercel (hosting) process data in the US
• European Union: Supabase may process data in EU data centers

When we transfer data internationally, we ensure adequate safeguards are in place through standard contractual clauses, adequacy decisions, or other approved mechanisms under UK GDPR.

8. Children's Privacy

Our service is used by students preparing for GCSE and A-Level exams, which typically includes users under 18 years old.

Under UK GDPR, users under 13 years old require parental consent to use online services. Users aged 13-17 may use our service, but we encourage parents and guardians to supervise their child's use of ExamReady.ai.

If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us at hello@examready.ai and we will delete the information.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption in transit (HTTPS/TLS) and at rest
• Access controls and authentication
• Regular security audits and monitoring
• Secure API communication with third-party services
• Regular backups with encryption

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Updating the "Last updated" date at the top of this page
• Sending an email notification if the changes are significant
• Displaying a prominent notice on our website

Your continued use of ExamReady.ai after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: