Privacy Policy

1. Introduction

Welcome to AI-Exams. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we collect, use, and protect your personal information when you use our AI-powered exam creation and grading platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and password when you create an account
• Exam Content: Questions, answers, grading criteria, and study materials you create
• Student Information: Names and email addresses of students taking exams (when provided)
• Exam Responses: Student answers and submissions

2.2 Information Automatically Collected

• Usage Data: How you interact with our platform, including pages visited and features used
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP addresses, access times, and error logs

2.3 Exam Monitoring Data (When Proctoring is Enabled)

• Camera Data: Face detection data processed locally in the browser using MediaPipe technology
• Focus Events: Records of tab switches and window focus changes during exams
• Monitoring Logs: Events such as looking away, no face detected, or camera issues

Important: We do NOT record, store, or transmit any video or audio from your camera. All camera processing is done locally in your browser, and only anonymized event logs are stored.

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain our exam creation and grading services
• Process and grade student submissions using AI technology
• Generate analytics and insights about exam performance
• Monitor exam integrity through proctoring features (when enabled by teachers)
• Communicate with you about your account and service updates
• Improve and optimize our platform functionality
• Prevent fraud and ensure platform security
• Comply with legal obligations

4. AI and Data Processing

We use Google Gemini AI to provide automated grading and question generation features. When you use these features:

• Exam questions, answers, and student responses may be sent to Google's AI services for processing
• AI processing is used solely to provide grading feedback and generate exam content
• Google's AI services are subject to their own privacy policies and data handling practices
• We implement security measures to protect data during transmission to AI services

5. Data Storage and Security

We use Supabase (PostgreSQL database) to store your data securely. We implement industry-standard security measures including:

• Encryption of data in transit and at rest
• Secure authentication and authorization protocols
• Regular security audits and updates
• Access controls and monitoring
• Backup and disaster recovery procedures

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information only in the following circumstances:

• Service Providers: Third-party services like Supabase (hosting) and Google (AI processing) that help us operate our platform
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In connection with a merger, sale, or acquisition of our business
• With Your Consent: When you explicitly authorize us to share your information

7. Your Rights and Choices

You have the following rights regarding your personal data:

• Access: Request access to your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Export: Download your exam data in CSV or PDF format
• Opt-Out: Disable camera proctoring features (teachers only)
• Object: Object to certain processing of your data

To exercise these rights, please contact us at kallossoft@gmail.com.

8. Student Privacy

We take student privacy seriously. Students do not need to create accounts to take exams. When students provide their names and email addresses:

• This information is used only to identify their exam submissions
• Teachers have access to their students' exam responses and performance data
• Students can request deletion of their exam data by contacting the teacher or us directly
• Proctoring features require student consent and can be disabled by teachers
• Camera data is processed locally and never recorded or stored

9. Camera and Proctoring Privacy

When camera proctoring is enabled for an exam:

• Students must explicitly consent before camera access is requested
• Students can view exactly what is being monitored before starting the exam
• All face detection processing happens locally in the student's browser using MediaPipe
• No video or images are ever transmitted, recorded, or stored
• Only behavioral event logs (e.g., "looked away at timestamp X") are stored
• Teachers can view aggregated proctoring events but never access camera feeds or recordings
• Students can refuse consent, though the teacher may not allow them to take the exam without proctoring

10. Cookies and Tracking

We use cookies and similar tracking technologies to maintain user sessions and improve user experience. These include:

• Essential Cookies: Required for authentication and core platform functionality
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how users interact with our platform

You can control cookies through your browser settings, but disabling certain cookies may limit platform functionality.

11. Data Retention

We retain your data for as long as your account is active or as needed to provide our services:

• Account Data: Retained until you delete your account
• Exam Content: Retained until you delete individual exams
• Student Submissions: Retained as long as the associated exam exists
• Logs and Analytics: Typically retained for 90 days

After deletion, we may retain certain data for legal compliance, dispute resolution, and platform security purposes.

12. Children's Privacy

Our platform is designed for teachers to create exams. Students of any age may take exams, but:

• We do not knowingly collect personal information from children under 13 without parental consent
• Teachers are responsible for obtaining appropriate consent when using our platform with minors
• Parents can contact us to review or delete their child's exam data

13. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.

14. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by:

• Posting the updated policy on our platform
• Updating the "Last Updated" date at the top of this policy
• Sending an email notification for material changes (to registered teachers)

Your continued use of the platform after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this privacy policy or your personal data, please contact us: