Data Safety Policy

Effective date: 24 June 2026

ExamiAI handles sensitive student learning data. This Data Safety Policy describes the technical and organisational measures we use to protect it.

1. Our commitment

We design ExamiAI with privacy-first principles: collect only what we need, protect it with reasonable safeguards, and use it solely to improve your preparation experience — not to sell to third parties.

2. Data we protect

  • Login credentials and session tokens
  • Profile and exam preference data
  • Question attempts, bookmarks, mock results, and revision history
  • Preparation Index, Exam GPS routes, and analytics derived from your activity
  • Support tickets, complaints, and deletion requests

3. Security measures

  • Encrypted sessions: Authenticated sessions use secure, server-validated tokens.
  • Access controls: Admin and database access is restricted to authorised personnel only.
  • Input validation: User inputs are sanitised to reduce injection and abuse risks.
  • CSRF protection: State-changing requests from the student app use anti-forgery tokens.
  • Activity logging: Security-relevant events are logged for investigation.
  • Secure hosting: Application and database servers use industry-standard configurations.

4. How analytics are used

Your attempt data powers features such as:

  • Difficulty and importance labels on questions
  • Weak topic detection and smart practice recommendations
  • Preparation Index and personal growth charts
  • Exam GPS route recalculation
  • Privacy-safe leaderboard bands (Top % ranges, not raw user counts)

Aggregated analytics may be used to improve question quality and platform performance without identifying individual users in public reports.

5. Third-party services

We may use trusted providers for hosting, email delivery, payment processing, and error monitoring. These providers are bound by confidentiality obligations and receive only the data necessary for their function.

6. Your responsibilities

  • Use a strong, unique password and do not share login details.
  • Log out on shared devices.
  • Report suspicious activity to support@examiai.com immediately.

7. Data breach response

In the unlikely event of a data breach affecting personal information, we will investigate promptly, mitigate harm, and notify affected users and authorities as required by applicable law.

8. Data deletion

You may delete your account from Settings or our deletion page. See the Account Deletion Policy for details on what is removed and what may be retained legally.

9. Contact

Data safety questions: support@examiai.com