Privacy Policy

Overview

Examevo Ltd ("Examevo", "we", "us") provides AI-assisted exam marking and revision tools for students, parents, and schools. This Privacy Policy explains what personal data we collect, why we use it, and your rights under UK GDPR and the Data Protection Act 2018.

By using Examevo you agree to this policy. If you do not agree, please do not use the service.

Data we collect

We collect the following categories of data:

• Account data: name, email address, password hash, role (student, parent, teacher), school affiliation.
• Academic data: study level, subjects, target grades, uploaded exam scripts and photos, marking results, syllabus progress.
• Usage data: pages visited, feature usage, device/browser type, approximate location from IP (for security).
• Payment data: processed by our payment provider; we store subscription tier and billing status, not full card numbers.
• Communications: support emails and optional marketing preferences.

How we use your data

We use personal data to:

• Mark uploaded papers and return feedback aligned to published mark schemes.
• Show progress, predictions, and syllabus tracking on your dashboard.
• Operate school class features (join codes, teacher analytics).
• Process subscriptions and prevent fraud or abuse.
• Improve accuracy, reliability, and security of the platform.
• Send service emails (account, marking complete, school invites) and optional product updates where permitted.

Legal bases (UK GDPR)

Depending on the activity, we rely on:

• Contract — to provide the service you signed up for.
• Legitimate interests — security, product improvement, and analytics in ways that do not override your rights.
• Consent — optional marketing or non-essential cookies where required.
• Legal obligation — where we must retain or disclose data by law.

AI marking & uploaded scripts

When you upload a handwritten or typed script, we process images and extracted text to generate marks and feedback. This may involve third-party AI and OCR providers under strict data-processing terms.

We do not sell your scripts. We do not use your identifiable exam answers to train public models without your explicit consent. Aggregated, anonymised statistics may be used to improve marking quality.

You are responsible for ensuring you have the right to upload content (e.g. your own work or school-authorised mocks).

Data retention

We keep account and marking data while your account is active and for a reasonable period afterwards so you can access history.

Typical retention: account data up to 3 years after last login unless you request deletion sooner; billing records up to 7 years for tax/legal compliance; security logs up to 12 months.

You may request deletion of your account and associated scripts subject to legal holds or school contractual requirements.

Who we share data with

We share data only as needed with:

• Infrastructure providers (hosting, database, authentication).
• AI/OCR subprocessors for marking (under DPAs).
• Payment processors for subscriptions.
• Schools: teachers may see data for students enrolled in their classes.
• Parents: linked parent accounts may see their child's progress where enabled.
• Authorities when required by law.

International transfers

Some subprocessors may process data outside the UK/EEA. Where this occurs we use appropriate safeguards such as UK IDTA/SCCs or equivalent mechanisms.

Children & schools

Examevo is used by students aged 13+. Where users are under 18, schools or parents should ensure appropriate consent. Schools acting as data controllers for their pupils remain responsible for their own compliance when using class features.

Your rights

You may have the right to:

• Access, rectify, or erase your personal data.
• Restrict or object to certain processing.
• Data portability where applicable.
• Withdraw consent for optional processing.
• Complain to the UK ICO (ico.org.uk).

Contact

Data controller: Examevo Ltd. Email: hello@examevo.com for privacy requests. We aim to respond within 30 days.