Privacy Policy
Last Updated: September 2026 · Effective Immediately
Our Core Privacy Commitments
1. Introduction & Scope
ExamGlow (“we”, “us”, or “our”) is dedicated to safeguarding the privacy and personal data of our learners, parents, and educators. This Privacy Policy outlines how we collect, store, utilize, and protect your information when you access or interact with our learning management platform, study materials, interactive AI tools, and payment services (collectively, the “Service”).
We adhere strictly to internationally recognized student data protection standards, including the General Data Protection Regulation (GDPR), the Children's Online Privacy Protection Act (COPPA) guidelines, and Family Educational Rights and Privacy Act (FERPA) best practices.
2. Information We Collect
We limit data collection exclusively to information required to provide you with an exceptional, personalized, and secure educational experience:
A. Google Account Identity
When you sign in using Google Single Sign-On (OAuth 2.0), we receive your verified Google email address, display name, user identifier (sub), and profile photo URL. We use this information to create your account profile and verify your active subscription status across any device or browser.
B. Academic Preferences & Study Progress
We maintain your chosen curriculum (such as Cambridge IGCSE, Edexcel, or AQA), target examination dates, enrolled subjects, completed notes, quiz answers, bookmark collections, and flashcard performance to track your revision trajectory.
C. Billing & Transaction Identifiers
When subscribing to Weekly ($2.00/wk), 3 Months ($14.99/3mo), or 1 Year ($39.99/yr), payment processing is handled exclusively by certified payment processors (PayPal, Stripe). We receive a secure transaction ID, renewal timestamp, and billing country to unlock your access. We never capture, store, or have access to your full payment card numbers or bank credentials.
D. Interactive AI Tutor (Yumna) Conversations
When you ask questions, request detailed 20-minute audio explanations, or generate practice questions, your queries are processed in real-time to generate educational answers. Conversations are linked to your study session to maintain context.
3. How We Use Your Information
Your personal data is used solely for educational and service fulfillment purposes:
- To provide seamless, uninterrupted access to revision notes, past papers, mark schemes, and flashcards.
- To lock in and verify your paid Pro status on our high-speed Cloudflare global network whenever you log in with your Google Account.
- To personalize AI explanations based on your target syllabus, difficulty level, and study goals.
- To notify you about important account updates, curriculum revisions, or subscription renewal receipts.
- To detect and prevent fraudulent access, unauthorized account sharing, or abusive automation.
4. Cross-Device Google Account Lock-In & Storage
To ensure you can study without friction across your phone, tablet, laptop, and school computers:
When an account upgraded to Pro (Weekly, 3 Months, or 1 Year) is associated with a verified Google Account, our backend securely registers your unique account identifier and expiration date in our distributed Cloudflare Key-Value (KV) database. Whenever you log in with that Google Account on any browser or device, your Pro status is instantly restored until your active period expires.
No browser fingerprinting, cross-site trackers, or invasive telemetry tools are utilized to enforce this feature.
5. AI Processing & Data Confidentiality
Our automated AI tutor, Yumna, leverages cutting-edge artificial intelligence and high-fidelity speech synthesis to teach notes, explain complex exam concepts, and provide audio walkthroughs.
Data Confidentiality: Your prompts and questions are transmitted over encrypted TLS 1.3 connections. We do not sell student prompts to third-party data brokers, nor are student questions used to train public, open-source foundational models without explicit educational consent.
6. Information Sharing & Third Parties
ExamGlow does not sell, rent, lease, or monetize your personal data. We only share necessary operational data with vetted infrastructure partners who adhere to strict data protection standards:
- Cloudflare: Secure global content delivery network (CDN), serverless computing, and edge database storage with ISO 27001 and SOC 2 Type II certifications.
- Google Identity Services: Secure OAuth 2.0 authentication protocols for user identity verification.
- PayPal & Payment Processors: Tokenized payment processing adhering to Tier 1 PCI-DSS compliance standards.
- Legal Obligations: We may disclose information if required by law, subpoena, court order, or to protect the vital safety of students or platform integrity.
7. Data Security & Encryption
We implement comprehensive organizational and technical security measures to protect student records:
- End-to-End Encryption: All data in transit is encrypted using Modern TLS 1.3 encryption protocols. Data at rest is encrypted using AES-256 standards.
- Access Control: Administrative access to user databases is restricted on a strict least-privilege basis with multi-factor authentication.
- DDoS & Threat Protection: Cloudflare edge security actively blocks malicious bots, SQL injection, and unauthorized data scraping attempts.
8. Student & Children Privacy (COPPA / GDPR-K)
ExamGlow is committed to student safety. If a student is under the age of digital consent in their jurisdiction (e.g., under 13 in the United States or under 16 in certain EU member states), registration and subscription purchases should be executed with the guidance or consent of a parent or guardian.
We do not knowingly collect personal contact information from children beyond what is necessary to administer their educational account and learning features. Parents or guardians may contact us at any time to review, modify, or delete their child's stored data.
9. Your Rights: Data Retention & Deletion
Regardless of your location, we believe every student should have full control over their personal data:
You have the right to request the permanent deletion of your account, profile, study progress, and chat history. You can initiate an account reset or deletion directly within your Account Settings or by emailing our data protection team.
Upon verified request, all personal identifiers and study logs are purged from our live database within thirty (30) business days, retaining only anonymized transaction records required by financial and tax regulations.
10. Changes to this Privacy Policy
We may update this Privacy Policy periodically to reflect enhancements in our learning features, new legal requirements, or technological updates. Any material changes will be announced with an updated revision date at the top of this page and, where appropriate, via an in-app notice or email notification.
Contact Our Privacy Team
If you have any questions, privacy concerns, or requests regarding the processing of your personal information, our dedicated Data Protection Officer is ready to assist you:
© 2026 ExamGlow. All rights reserved.