Privacy Policy

Effective Date: 13 October 2026

Updated October 2026: We now list every service that handles your data, including OpenAI (which marks answers) and Google (which sends our emails, not SendGrid as this policy said before). We also explain our own login and page-visit records, the Try AI Marking demo, signing in with Google, schools and tutoring organisations, when our staff can view an account, and the cookies we use. Google Analytics now only runs if you agree to it in our cookie banner, and we list Sentry, which we use to find and fix errors.

Updated June 2026: Added exam board independence disclaimer, institutional eligibility clause, copyright complaints procedure, and AI training data clarification.

Welcome to AIExamify ("we," "our," "us"), owned and operated by Techify Solutions Ltd, a company registered in England and Wales (Company number: 16515642). This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when using our website, mobile applications, or services (collectively, the “Platform”). By accessing or using the Platform, you consent to the practices described in this policy. If you do not agree, please do not use the Platform.

1. Introduction

Techify Solutions Ltd is committed to safeguarding your personal data in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable laws. This policy provides transparency about our data practices, your rights, and how we protect your information while delivering educational services, including AI-generated lessons and quizzes based on Cambridge past papers.

2. Information We Collect

2.1 Data You Submit

We collect the following personal information to provide our services:

Data Type	Purpose
Username	Account identification and personalization
Email Address	Account management, verification, notifications
Password Hash	Secure authentication
First Name, Surname	Personalization and account management
Year of Birth	Age verification, parental consent compliance
Country	Regional customization, anonymized analytics
Exams	Tailoring educational content
Answers to the set-up questions after signing up (for example your level and exam board, or for teachers the levels and subjects you teach)	Tailoring the Platform to you
Your name and email address from Google, if you choose to sign in with Google	Creating your account and logging you in. We don't receive your Google password
Payment Information	Processed via Stripe for subscriptions
Subscription Details	Service delivery (subjects, promo codes)
Promo Code Redemptions	Track promotional benefits
Canvas Answer Images	Marking your answers (they are sent to our AI marking provider, OpenAI) and showing your work in your progress
Try AI Marking demo (no account needed): your email address and the answer you write	Marking your answer and showing your feedback, and sending you occasional revision tips unless you tick "Don't send me revision tips"
Mailing List Email	Occasional revision tips and news about AI Examify. When you sign up or try the demo we send these unless you tick "Don't send me revision tips", and every email has an unsubscribe link. We never send them to under-13s
Parent or Guardian Email (students under 16 who sign up themselves)	Letting a parent or guardian know their child has created an account. Never used for marketing
Progress Reminder Settings	Occasional reminders to subscribers who haven't used the site for a while (each email has a link to switch them off)
Classroom membership & join links	Enable teachers/tutors to create classrooms and add students
Quiz/assignment submissions made inside a classroom	Allow the teacher/tutor (and, where applicable, organization administrators) to view classroom results, answers, and working
Optional “Progress Access” consent granted to a specific teacher/tutor or organization admin	Allow that approved person to view all of your past and future quiz/test results across all subjects and subscriptions
Membership of a school or tutoring organisation on the Platform	Letting that organisation's administrators see your name, email address, classes and results, and manage your membership

2.2 Automatically Collected Data

Our own records. When you are logged in, we record when you log in and which pages you visit, with the time, your IP address and your browser type. We use these records to keep accounts secure, to help when you contact us for support, and to see how the Platform is used so we can improve it.

Google Analytics. If you agree to analytics cookies, we also use Google Analytics to measure how the Platform is used. It collects anonymized data, including:

• IP address (anonymized)
• Browser type and version
• Device type and operating system
• General geographic location (non-specific, anonymized)
• Pages visited and time spent on the Platform

2.3 Special Category Data

We do not collect special category data (e.g., health, racial or ethnic origins, political opinions) unless explicitly required for educational purposes and with your express consent. Year of birth is collected solely for age verification.

3. Lawful Basis for Processing

We process personal data based on the following lawful bases under UK GDPR:

Basis	Purpose
Consent	Marketing emails you asked for through our mailing list page, parental consent for users under 16, analytics cookies
Contract	Fulfilling subscription agreements, delivering educational services
Legal Obligation	Compliance with laws (e.g., data breach notifications, tax reporting)
Legitimate Interests	Our own login and page-visit records, error monitoring, fraud prevention, service improvement, and revision tips to people who signed up or tried the demo (the UK "soft opt-in" rule; you can opt out at any time) (where your rights are not overridden)

4. How We Use Your Data

We use your personal data solely for the following purposes:

• Provide and personalize educational services, including AI-generated lessons, quizzes, and instant feedback.
• Mark your answers with AI: the question, the mark scheme and your answer (including the image of your working) are sent to OpenAI, which returns the marks and feedback. Under OpenAI's terms for businesses, this data is not used to train their models.
• Process payments securely via Stripe.
• Send account-related notifications (e.g., email verification, password resets, subscription updates) and reminders before a free trial ends, and optional marketing emails, sent through Google's email service (Gmail), with unsubscribe options.
• Administer promotional offers, such as the promo codes.
• Analyze anonymized usage patterns to improve the Platform’s functionality and user experience.
• Verify age and obtain parental consent for users under 16.
• Comply with legal and regulatory obligations, such as tax reporting or data breach notifications.
• Prevent fraud, abuse, or unauthorized access to the Platform.
• Help with support requests and fix problems: a small number of authorised AI Examify staff can view your account as you see it. Each time this happens it is recorded.
• Share your classroom submissions, quiz results, answers, and working with the teacher/tutor who created the classroom you joined (and, where applicable, organization administrators), and (if you explicitly grant “Progress Access”) share all of your quiz/test results with that specific approved teacher/tutor or organization admin.

AI Training Data: We do not use student quiz submissions, answers, or personal data to train, fine-tune, or improve any AI model without explicit consent. All AI functionality is powered by third-party models (such as OpenAI). Student data is used solely to deliver the educational service described in these Terms.

Teacher/Tutor Access to Student Data

When you join a classroom using a link shared by a teacher or tutor, that teacher/tutor (and, where applicable, organization administrators for that classroom) automatically becomes a joint data controller with us for the personal data contained in the quizzes, assignments, and results you submit within that classroom. If you additionally grant “Progress Access” to an approved teacher/tutor or organization admin, they also become a joint data controller for all of your quiz and test results across the entire Platform. You can revoke either type of access at any time in your account settings, and we will immediately stop sharing new data with them (historical data they already viewed may remain in their account until they delete it).

We adhere to data minimization principles, collecting only what is necessary for these purposes. We will never sell, rent, or share your personal data with third parties for marketing purposes.

5. Data Retention and Storage

Personal data is retained only as long as necessary to provide services, fulfill contractual obligations, or comply with legal requirements. Answer images uploaded for marking are kept with your results, so you and your teacher can see the work that was marked, until your account is deleted. Anonymized analytics data is subject to third-party retention policies.

Data Type	Retention Period
Account Information (e.g., email, username, first name)	Duration of active account or until deletion requested, subject to legal obligations
Payment Information	Processed by Stripe; not stored locally except for stripe_customer_id and stripe_subscription_id
Canvas Answer Images	Retained for progress tracking until account deletion, if applicable
Subscription Details	Duration of subscription or until account deletion
Promo Code Redemptions	Until promotional campaign ends or account deletion
Mailing List Email	Until you unsubscribe or request deletion
Analytics Data	Per third-party policies (e.g., Google Analytics, typically 26 months)
Login and page-visit records	While your account is open
Try AI Marking demo answers and email address	Kept so we can check the quality of our marking, until you ask us to delete them

Upon account deletion, we retain minimal data (e.g., email hash for fraud prevention) only as required by law or for legitimate interests, typically for up to 7 years for tax purposes.

6. Third-Party Services

Teachers and tutors who create classrooms or receive “Progress Access” are considered recipients of personal data under UK GDPR. Our Terms of Service require them to keep student data confidential and to use it only for educational purposes.

We engage the following trusted third-party services to operate the Platform:

Service	Purpose	Privacy Policy
Stripe	Secure payment processing	Stripe Privacy Policy
OpenAI	AI marking of answers and the feedback you see	OpenAI Privacy Policy
Google (Gmail)	Sending emails (account, reminders and marketing)	Google Privacy Policy
Google sign-in	Optional sign-in with your Google account	Google Privacy Policy
Sentry	Error monitoring: when something goes wrong on our servers, technical details of the error are sent to Sentry so we can fix it. These can include the page involved and, occasionally, account details such as your user ID or email address	Sentry Privacy Policy
Google Analytics	Anonymized usage analytics, only if you agree to analytics cookies	Google Privacy Policy

These providers may process your data according to their privacy policies. We ensure they comply with UK GDPR through contractual safeguards, such as Data Processing Agreements.

7. Security Measures

We implement industry-standard security measures to protect your data, including:

• Encrypted data transmission using SSL/TLS protocols.
• Secure storage of password hashes using bcrypt.
• Access controls to restrict unauthorized access to our systems.
• Keeping the software we use up to date with security updates, and reviewing our security from time to time.
• Answer images are only shown to the student, their teacher and, where applicable, their school or organisation's administrators, and to authorised AI Examify staff when needed for support or to check marking quality.
• Secure storage of sensitive data (e.g., email_hex, stripe_customer_id).

Despite these measures, no system is completely secure. In the event of a data breach, we will notify affected users within 72 hours, as required by UK GDPR, and take immediate steps to mitigate harm. We are not liable for damages resulting from breaches beyond our reasonable control (see Terms of Service).

8. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:

Right	Description
Access	Request a copy of your personal data
Rectification	Correct inaccurate or incomplete data
Erasure	Request deletion of your data, subject to legal obligations
Restriction	Limit how we process your data
Portability	Receive your data in a structured, machine-readable format
Objection	Object to processing based on legitimate interests or for marketing
Withdraw Consent	Revoke consent for processing (e.g., marketing emails)

To exercise these rights, contact us at aiexamify@gmail.com. We will respond within one month, as required by law, or sooner if feasible. You may also lodge a complaint with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk.

9. Children's Privacy

The Platform is intended for users aged 16 and above. Users under 16 may only register and use the Platform with parental or guardian consent. By creating an account, a user under 16 confirms that they have obtained this consent. If a student under 16 signs up themselves, we ask for a parent or guardian's email address and send them a short email to let them know about the account. We reserve the right to request proof of parental consent at any time and may suspend the account if it is not provided. Joining a classroom or granting “Progress Access” to a teacher/tutor involves sharing the student’s quiz results and answers with that adult. Users under 16 who wish to use these features must confirm again that they have parental permission to share their results with the teacher/tutor. We rely on the original consent given at registration and this additional confirmation. Contact Us : aiexamify@gmail.com.

10. International Data Transfers

Your data may be processed outside the UK or European Economic Area (EEA) by third-party services (e.g., Stripe, Google, OpenAI and Sentry, which may process data in the United States). We ensure compliance with UK GDPR through safeguards, including:

• Standard Contractual Clauses (SCCs) approved by the UK ICO.
• Adequacy decisions where applicable.
• Binding Corporate Rules for intra-group transfers, if relevant.

For details on specific transfers, contact us at aiexamify@gmail.com.

11. Cookies and Tracking Technologies

We use cookies and similar technologies (e.g., pixels, local storage) for essential functions and performance optimization:

Cookie Type	Purpose	Duration
Session Cookies (essential)	Keep you logged in as you move around the Platform, and protect forms against misuse	Until you close your browser
"Remember me" Cookie (essential)	Keeps you logged in when you come back, if you chose to stay logged in or signed in with Google	Up to 1 year, or until you log out
Analytics Cookies (optional)	Google Analytics: measures how the Platform is used, anonymously	Up to 2 years

Essential cookies are needed for logging in, so the Platform can't work without them. Analytics cookies are optional. When you first visit, a banner asks whether you're happy for us to use them, and Google Analytics only runs if you choose "Accept". If you choose "No thanks", we don't load it and remove any analytics cookies already set. You can change your mind at any time with the "Cookie settings" link at the bottom of every page. Your choice is remembered in your browser. You can also block cookies in your browser settings, but blocking essential cookies stops you from being able to log in.

12. Data Breach Notification

In the unlikely event of a data breach, we will:

• Notify affected users within 72 hours, as required by UK GDPR, via email or Platform announcements.
• Inform the UK Information Commissioner’s Office (ICO) within 72 hours if the breach is likely to result in a risk to your rights and freedoms.
• Take immediate steps to mitigate harm, such as securing affected systems and preventing further breaches.

We are not liable for damages resulting from data breaches beyond our reasonable control, as outlined in our Terms of Service.

13. Compliance with Educational Privacy Laws

For users in jurisdictions with specific educational privacy laws, such as the Family Educational Rights and Privacy Act (FERPA) in the United States, we comply with applicable requirements when processing educational records. We act as a “school official” under FERPA, using data solely for legitimate educational purposes with appropriate safeguards. For details, contact us at aiexamify@gmail.com.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or Platform features. Updates will be posted on this page with a revised “Effective Date.” We will notify you of significant changes via email or Platform announcements. Continued use of the Platform after changes constitutes acceptance of the updated policy.

15. Accessibility of This Policy

This Privacy Policy is available in accessible formats upon request. Contact us at aiexamify@gmail.com for assistance.

16. Contact Information

For questions, concerns, or to exercise your data protection rights, contact us at:

Email: aiexamify@gmail.com
Company name: Techify Solutions Ltd
Company number: 16515642
Registered Office Address: 234a Upper Richmond Road, London, SW15 6TG, United Kingdom

You may also contact the UK Information Commissioner’s Office (ICO) at www.ico.org.uk or by phone at +44 303 123 1113 if you have concerns about our data practices.