Privacy Policy

1. Introduction & Overview

ExamMark ("we", "our", or "us"), a MyMegam product, is committed to safeguarding the privacy and personal data of students, parents, tutors, and teachers who use our educational AI marking platform.

This Privacy Policy explains what information we collect when you visit exammark.ai or exammark.com, how we process exam uploads and personal data, and the strict safeguards we employ in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

• Account Information: Name, email address, school/institution (optional), and exam board preferences when you register via NextAuth (Google, Microsoft Entra, or email authentication).
• Exam Papers & Worksheets: Photos, PDF scans, and handwritten responses you upload to receive marks, feedback, and gap diagnostics.
• Assessment Diagnostics: Generated marks, diagnostic comments, knowledge gap flags, and performance trends over time.
• Payment Data: Token transaction histories and Stripe checkout session identifiers. We never store complete credit or debit card numbers on our servers; payments are processed securely by Stripe.
• Usage & Technical Analytics: Anonymized interaction telemetry, device info, browser type, and Google Analytics identifiers to diagnose performance and maintain service reliability.

3. How We Use Student Data & AI Processing

We use collected data solely to deliver examiner-grade feedback and accelerate your revision:

• Performing Optical Character Recognition (OCR) and handwriting transcription.
• Evaluating answers against official mark schemes (AQA, Edexcel, OCR) and generating grade estimations.
• Creating personalized revision packs and identifying syllabus weaknesses.
• Facilitating secure result sharing between students, teachers, and tutors at your explicit direction.

4. Data Storage, Security & Retention

All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption within Google Cloud Platform (GCP) European regions (London, UK / Frankfurt, EU).

Uploaded exam papers and marked evaluations are retained in your private dashboard for the duration of your active account so you can track revision progress. You may permanently delete any marked paper or request account deletion at any time directly through your dashboard settings.

5. Your Legal Rights (UK GDPR)

Under UK data protection laws, you retain the right to:

• Access: Request a copy of all personal data and marked scripts held about you.
• Rectification: Request correction of inaccurate information.
• Erasure: Request permanent deletion of your account and all stored exam papers.
• Data Portability: Export your assessment history and marked result summaries.
• Withdraw Consent: Revoke sharing permissions or opt out of non-essential communications at any time.

6. Cookies & Tracking

We use strictly necessary session cookies to maintain your login status and security tokens. We also use privacy-conscious analytics cookies (Google Analytics 4) to understand how students navigate the app and optimize mobile scanning usability. You can adjust your browser cookie settings at any time.

7. Contact & Data Protection Officer

If you have questions about this Privacy Policy, wish to exercise your data rights, or need assistance, contact our Data Protection Team at: