Privacy Policy

Information we collect

Account information. If you create an account, we process your name, email address, user identifier, authentication provider, and sign-in information. Authentication is provided by Supabase and may use email and password, Google, or Sign in with Apple. ExamMate does not receive your Google or Apple password. Sign-in session credentials are stored in the iOS Keychain on your device.

Study information. The app stores courses, exam dates and types, study materials, generated exams, answers, grading results, and weak topics on your device. If you choose the manual cloud backup feature, course details and study-material titles, text, source type, and original file names are uploaded to Supabase. The current backup feature does not upload exams, answers, grading results, or weak topics.

AI requests. When you give permission and request AI generation or grading, ExamMate sends the selected notes, course name, practice topics, questions, answer keys, and written answers needed for that request through an ExamMate backend hosted by Supabase to OpenAI. AI output, including generated questions, scores, and feedback, is returned to the app and stored with your local study data. The backend stores short-lived abuse-prevention records containing your account identifier, request identifier, a one-way hash of the request, operation type, timestamps, and completion status; it does not store the note or answer text in those records.

Website and support information. If you join the website waitlist, we collect your email address, selected exam system, submission source, and submission time. If you contact support, we receive the information you include in your message.

Purchase information. Apple processes App Store payments. ExamMate receives StoreKit transaction and entitlement information, such as the product purchased, purchase status, transaction identifier, and applicable expiration or revocation date. We do not receive or store your full payment card details.

How we use information

We use information to:

• create and secure accounts, restore sessions, and provide password recovery;
• save, back up, restore, and display study materials at your request;
• generate practice exams, grade written answers, provide feedback, and identify weak topics;
• verify purchases and provide the access you bought;
• prevent duplicate or abusive AI requests and control service costs;
• operate the waitlist, respond to support requests, and maintain the service; and
• comply with legal obligations and protect users, ExamMate, and our service providers.

Service providers and sharing

We share information only as needed to operate ExamMate, comply with law, or protect rights and safety. Current providers include Supabase for authentication, database, and backend functions; OpenAI for AI-assisted exam generation and grading; Apple for App Store purchases and Sign in with Apple; Google when you choose Google sign-in; and Vercel for website hosting. These providers process information under their own terms, privacy policies, and our applicable service arrangements.

ExamMate does not currently include third-party advertising or behavioral analytics SDKs. The app's “progress analytics” are calculated from your study activity for your own use and are stored with your local app data. Hosting and infrastructure providers may process ordinary network and diagnostic data, such as IP address, device or browser information, request time, and error logs, to deliver and secure their services.

Your choices and controls

You can use supported local study features without an account. Cloud backup is manual. AI processing requires an account and your permission, and you can withdraw that permission in Settings to stop future AI requests. You can remove local courses and related study data with Reset All Data.

You may request access to, correction of, or deletion of information associated with you by contacting us. These rights can vary by location, and we may need to verify your identity before completing a request.

Retention and account deletion

Local study data remains on your device until you delete it, delete your account from the app, uninstall the app, or erase the device. Logging out does not remove local study data. Cloud account and backup data is kept while your account exists or as needed to provide the service, handle disputes, enforce agreements, or meet legal obligations. AI abuse-prevention records are pruned after approximately two days. Waitlist and support records are retained while they are needed for those purposes.

You can delete your account in ExamMate under Settings. The app deletes the Supabase authentication account and associated ExamMate cloud data, attempts to revoke linked Sign in with Apple authorization, and then removes local ExamMate study data. If local deletion fails after cloud deletion succeeds, the app tells you to use Reset All Data. You may also request help at support.exammate@gmail.com.

Security

We use reasonable technical and organizational measures intended to protect information, including authenticated service requests, access controls for cloud records, bounded request sizes, and secure device storage for sign-in sessions. No storage or transmission method is completely secure, so we cannot guarantee absolute security. Do not include passwords, payment-card details, or unnecessary sensitive personal information in study materials or support messages.

Students and minors

ExamMate is a study tool and may be used by students. If the law where you live requires consent from a parent or guardian for a minor to use online account or AI features, that consent must be obtained before using those features. If you believe a child provided personal information without required permission, contact us so we can review and, where appropriate, delete it.

International processing

Our service providers may process information in countries other than the country where you live. Their privacy policies describe where and how they process information and the safeguards they apply.

Changes and contact

We may update this policy as ExamMate changes or legal requirements develop. We will post the revised policy here and update the date below. For privacy questions or requests, email support.exammate@gmail.com.

Last updated: September 7, 2026.