Privacy Policy

Effective Date: June 24, 2025

Welcome to AIExamify ("we," "our," "us"), owned and operated by Techify Solutions Ltd, a company registered in England and Wales (Company number: 16515642). This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when using our website, mobile applications, or services (collectively, the “Platform”). By accessing or using the Platform, you consent to the practices described in this policy. If you do not agree, please do not use the Platform.

1. Introduction

Techify Solutions Ltd is committed to safeguarding your personal data in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable laws. This policy provides transparency about our data practices, your rights, and how we protect your information while delivering educational services, including AI-generated lessons and quizzes based on Cambridge past papers.

2. Information We Collect

2.1 Data You Submit

We collect the following personal information to provide our services:

Data Type	Purpose
Username	Account identification and personalization
Email Address	Account management, verification, notifications
Password Hash	Secure authentication
First Name, Surname	Personalization and account management
Year of Birth	Age verification, parental consent compliance
Country	Regional customization, anonymized analytics
Exams	Tailoring educational content
Payment Information	Processed via Stripe for subscriptions
Subscription Details	Service delivery (subjects, promo codes)
Promo Code Redemptions	Track promotional benefits
Uploaded Images	Quiz grading, deleted post-processing
Mailing List Email	Marketing communications (optional)

2.2 Automatically Collected Data

We use third-party services (e.g., Google Analytics) to collect anonymized data, including:

• IP address (anonymized)
• Browser type and version
• Device type and operating system
• General geographic location (non-specific, anonymized)
• Pages visited and time spent on the Platform

2.3 Special Category Data

We do not collect special category data (e.g., health, racial or ethnic origins, political opinions) unless explicitly required for educational purposes and with your express consent. Year of birth is collected solely for age verification.

3. Lawful Basis for Processing

We process personal data based on the following lawful bases under UK GDPR:

Basis	Purpose
Consent	Marketing emails, parental consent for users under 16, cookie usage
Contract	Fulfilling subscription agreements, delivering educational services
Legal Obligation	Compliance with laws (e.g., data breach notifications, tax reporting)
Legitimate Interests	Analytics, fraud prevention, service improvement (where your rights are not overridden)

4. How We Use Your Data

We use your personal data solely for the following purposes:

• Provide and personalize educational services, including AI-generated lessons, quizzes, and instant feedback.
• Process payments securely via Stripe.
• Send account-related notifications (e.g., email verification, password resets, subscription updates) and optional marketing emails via SendGrid, with unsubscribe options.
• Administer promotional offers, such as the promo codes.
• Analyze anonymized usage patterns to improve the Platform’s functionality and user experience.
• Verify age and obtain parental consent for users under 16.
• Comply with legal and regulatory obligations, such as tax reporting or data breach notifications.
• Prevent fraud, abuse, or unauthorized access to the Platform.

We adhere to data minimization principles, collecting only what is necessary for these purposes. We will never sell, rent, or share your personal data with third parties for marketing purposes.

5. Data Retention and Storage

Personal data is retained only as long as necessary to provide services, fulfill contractual obligations, or comply with legal requirements. Uploaded images for quiz grading are deleted immediately after processing. Anonymized analytics data is subject to third-party retention policies.

Data Type	Retention Period
Account Information (e.g., email, username, first name)	Duration of active account or until deletion requested, subject to legal obligations
Payment Information	Processed by Stripe; not stored locally except for stripe_customer_id and stripe_subscription_id
Uploaded Images	Deleted immediately after quiz grading
Subscription Details	Duration of subscription or until account deletion
Promo Code Redemptions	Until promotional campaign ends or account deletion
Mailing List Email	Until you unsubscribe or request deletion
Analytics Data	Per third-party policies (e.g., Google Analytics, typically 26 months)

Upon account deletion, we retain minimal data (e.g., email hash for fraud prevention) only as required by law or for legitimate interests, typically for up to 7 years for tax purposes.

6. Third-Party Services

We engage the following trusted third-party services to operate the Platform:

Service	Purpose	Privacy Policy
Stripe	Secure payment processing	Stripe Privacy Policy
SendGrid	Email notifications	SendGrid Privacy Policy
Google Analytics	Anonymized usage analytics	Google Privacy Policy

These providers may process your data according to their privacy policies. We ensure they comply with UK GDPR through contractual safeguards, such as Data Processing Agreements.

7. Security Measures

We implement industry-standard security measures to protect your data, including:

• Encrypted data transmission using SSL/TLS protocols.
• Secure storage of password hashes using bcrypt.
• Access controls to restrict unauthorized access to our systems.
• Regular security audits and vulnerability assessments.
• Immediate deletion of uploaded images after quiz grading.
• Secure storage of sensitive data (e.g., email_hex, stripe_customer_id).

Despite these measures, no system is completely secure. In the event of a data breach, we will notify affected users within 72 hours, as required by UK GDPR, and take immediate steps to mitigate harm. We are not liable for damages resulting from breaches beyond our reasonable control (see Terms of Service).

8. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:

Right	Description
Access	Request a copy of your personal data
Rectification	Correct inaccurate or incomplete data
Erasure	Request deletion of your data, subject to legal obligations
Restriction	Limit how we process your data
Portability	Receive your data in a structured, machine-readable format
Objection	Object to processing based on legitimate interests or for marketing
Withdraw Consent	Revoke consent for processing (e.g., marketing emails)

To exercise these rights, contact us at aiexamify@gmail.com. We will respond within one month, as required by law, or sooner if feasible. You may also lodge a complaint with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk.

9. Children's Privacy

The Platform is intended for users aged 16 and above. Users under 16 must have verifiable parental consent, collected via a registration checkbox and potentially verified through parental email confirmation. We do not knowingly collect personal data from children under 16 without such consent. If we discover such data, we will delete it promptly. Parents or guardians may contact us at aiexamify@gmail.com to review or delete their child’s data.

10. International Data Transfers

Your data may be processed outside the UK or European Economic Area (EEA) by third-party services (e.g., Stripe, SendGrid). We ensure compliance with UK GDPR through safeguards, including:

• Standard Contractual Clauses (SCCs) approved by the UK ICO.
• Adequacy decisions where applicable.
• Binding Corporate Rules for intra-group transfers, if relevant.

For details on specific transfers, contact us at aiexamify@gmail.com.

11. Cookies and Tracking Technologies

We use cookies and similar technologies (e.g., pixels, local storage) for essential functions and performance optimization:

Cookie Type	Purpose	Duration
Session Cookies	Maintain user sessions for login and navigation	Session duration
Analytics Cookies	Track anonymized usage for platform improvement	Up to 26 months (Google Analytics)

By using the Platform, you consent to our use of cookies. You can manage cookie preferences via your browser settings or our cookie consent tool (if implemented). Disabling cookies may affect Platform functionality.

12. Data Breach Notification

In the unlikely event of a data breach, we will:

• Notify affected users within 72 hours, as required by UK GDPR, via email or Platform announcements.
• Inform the UK Information Commissioner’s Office (ICO) within 72 hours if the breach is likely to result in a risk to your rights and freedoms.
• Take immediate steps to mitigate harm, such as securing affected systems and preventing further breaches.

We are not liable for damages resulting from data breaches beyond our reasonable control, as outlined in our Terms of Service.

13. Compliance with Educational Privacy Laws

For users in jurisdictions with specific educational privacy laws, such as the Family Educational Rights and Privacy Act (FERPA) in the United States, we comply with applicable requirements when processing educational records. We act as a “school official” under FERPA, using data solely for legitimate educational purposes with appropriate safeguards. For details, contact us at aiexamify@gmail.com.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or Platform features. Updates will be posted on this page with a revised “Effective Date.” We will notify you of significant changes via email or Platform announcements. Continued use of the Platform after changes constitutes acceptance of the updated policy.

15. Accessibility of This Policy

This Privacy Policy is available in accessible formats upon request. Contact us at aiexamify@gmail.com for assistance.

16. Contact Information

For questions, concerns, or to exercise your data protection rights, contact us at:

Email: aiexamify@gmail.com
Company name: Techify Solutions Ltd
Company number: 16515642
Registered Office Address: 234a Upper Richmond Road, London, SW15 6TG, United Kingdom

You may also contact the UK Information Commissioner’s Office (ICO) at www.ico.org.uk or by phone at +44 303 123 1113 if you have concerns about our data practices.