Privacy Policy

Last updated: 18 February 2026

1. Who we are

Examply.AI (“we”, “us”, “our”) is an AI-powered exam practice platform designed for GCSE and A-Level students in the United Kingdom. This privacy policy explains how we collect, use, and protect your personal data when you use our website at examply.ai (the “Service”).

2. What data we collect

We collect the following categories of personal data:

  • Account information: your name and email address, collected when you create an account.
  • Exam responses: the answers you submit during mock exams, along with AI-generated feedback and marks.
  • Usage data: information about how you interact with the Service, such as pages visited, exams completed, and progress data.
  • Payment information: billing details are collected and processed securely by our payment provider, Stripe. We do not store your card details on our servers.

3. How we use your data

We use your data solely to:

  • Provide, operate, and improve the Service.
  • Mark your exam responses and generate personalised feedback.
  • Track your progress and display analytics on your dashboard.
  • Process payments and manage your subscription.
  • Send essential service communications (e.g. subscription confirmations).

We will never sell, rent, or share your personal data with third parties for commercial or marketing purposes.

4. Legal basis for processing (GDPR)

We process your personal data under the following legal bases:

  • Contract: processing is necessary to provide you with the Service you have signed up for.
  • Legitimate interests: to improve the Service and ensure its security.
  • Consent: where we ask for your explicit consent, for example for optional marketing communications.

5. Third-party services

We use a limited number of trusted third-party services to operate the platform:

  • Clerk — for user authentication and account management. Clerk acts as a data processor on our behalf and is fully GDPR-compliant with a Data Processing Agreement (DPA) in place.
  • Stripe — for payment processing. Stripe is PCI DSS Level 1 certified and processes payment data in accordance with GDPR.
  • Render — for application hosting. Our servers are located in Frankfurt, Germany (EU), ensuring your data remains within the European Economic Area.
  • OpenAI / Anthropic — for AI-powered exam marking. Your exam responses are sent to these providers for processing. No personally identifiable information beyond your answers is shared, and data is not used to train their models.

6. Data storage and security

Your data is stored on servers hosted by Render in Frankfurt, Germany (EU). We use industry-standard security measures including encryption in transit (TLS) and at rest to protect your information. Access to personal data is restricted to authorised personnel only.

7. Data retention

We retain your personal data for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it for longer.

8. Your rights

Under the UK GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Rectify any inaccurate or incomplete data.
  • Erase your personal data (“right to be forgotten”).
  • Restrict the processing of your data.
  • Data portability — receive your data in a structured, machine-readable format.
  • Object to processing based on legitimate interests.

To exercise any of these rights, please contact us at gcsetutorai@gmail.com.

9. Children's privacy

Our Service is designed for GCSE and A-Level students, who may be under 18. We do not knowingly collect more data than is necessary to provide the Service. We do not serve advertising or share data with third parties for marketing. If you are a parent or guardian and believe your child has provided us with personal data you are not comfortable with, please contact us and we will promptly delete it.

10. Cookies

We use only essential cookies required for the Service to function (e.g. authentication session cookies). We do not use advertising cookies, tracking cookies, or any third-party analytics cookies.

11. Changes to this policy

We may update this privacy policy from time to time. If we make material changes, we will notify you via the Service or by email. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

12. Contact us

If you have any questions about this privacy policy or how we handle your data, please contact us at: gcsetutorai@gmail.com