Privacy Policy

1. Who controls your data

Exam Coach AI is the data controller for the personal data described here. We are based in the United Kingdom and process personal data in line with the UK GDPR and the Data Protection Act 2018. Contact us at ahmadali_75@outlook.com.

2. What we collect

• Account data: your email address, name if you provide one, and how you signed in (email or Google).
• Study data: your onboarding answers (level, exam board, subjects, exam dates, target grades), notes, uploaded documents and photos, past paper scans, video links you import, flashcard and quiz results, and messages you send to the AI tutor.
• Payment data: subscription status, plan and billing history. Card details are handled directly by Stripe — we never see or store your full card number.
• Technical data: device and browser information, language preference, and error logs needed to keep the service working.

3. Why we use it, and our legal basis

• To provide the service — generating plans, study sets and marked feedback (performance of our contract with you).
• To take payment and manage subscriptions (performance of contract, legal obligation).
• To keep the service secure, debug faults and prevent abuse (our legitimate interests).
• To send service emails such as reminders or billing notices (contract, and consent where the message is marketing).

You can withdraw consent for marketing at any time without affecting your subscription.

4. Who we share it with

We use a small number of processors, each bound by contract to use your data only on our instructions:

• Our cloud database, authentication and file storage provider (hosting in the EU/UK).
• AI model providers, which receive the content you submit in order to generate notes, questions, feedback and audio. Providers are contractually prevented from using your content to train their models.
• Stripe, for payment processing and fraud prevention.

We do not sell your personal data. We only disclose it otherwise where the law requires it.

5. International transfers

Some providers process data outside the UK. Where they do, transfers are protected by UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses.

6. How long we keep it

We keep your account and study data for as long as your account is open, and for 30 days after you delete it so that accidental deletions can be reversed. Billing records are kept for six years to meet UK tax law. Anonymous, aggregated statistics may be kept indefinitely.

7. Your rights

You have the right to access your data, correct it, delete it, restrict or object to processing, and receive a portable copy. Email us and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.

8. Children

The service is intended for students aged 13 and over. If you believe a younger child has given us personal data, contact us and we will delete it.

9. Cookies and local storage

We use only the cookies and browser storage needed to keep you signed in, remember your language choice and keep the service secure. We do not use advertising cookies or cross-site tracking.

10. Changes

If we make a material change to this policy we will tell you by email or in the app before it takes effect.

This document is a general template. Before taking real payments at scale, have it reviewed by a solicitor and insert your registered company name, company number and trading address.