Privacy Policy

Examly is an online exam platform that enables educators to create and share multiple-choice question tests with their students. When we say "Examly", "we", "us", or "our" in this policy, we mean the team that operates Examly. Our contact email for privacy matters is: privacy@examly.io

When you sign in with Google, we receive your name, email address, and profile picture from Google. We use this to create and identify your account. We do not receive your Google password. When you use Examly as a teacher, we store: your academy name, exam category, tagline, the questions you upload, and the tests you create. When you use Examly as a student, we store: your test attempts, answers submitted, scores, and the academies you have joined. We also collect standard server logs — IP addresses, browser type, pages visited — for security and performance monitoring. These are not linked to your identity for marketing purposes.

We use your information only to provide and improve the Examly service: • To create and maintain your account • To display your name and profile in the platform • To record test attempts and results so you can review them • To let teachers see which students have joined their academy and how they performed • To send you transactional emails (account notifications, if any) • To monitor for abuse and ensure platform security We do not use your information for advertising. We do not sell your data to any third party.

Examly uses Google OAuth 2.0 for authentication, provided by Supabase. When you click "Continue with Google", you are redirected to Google's own sign-in screen. Google authenticates you and sends us a secure token confirming your identity. We never see your Google password. You can revoke Examly's access to your Google account at any time via your Google Account settings at myaccount.google.com/permissions.

Your data is stored in Supabase — a secure, GDPR-compliant cloud database platform. Data is encrypted at rest and in transit using TLS 1.2 or higher. Access to production data is restricted to authorised team members only. We do not share database credentials with contractors or third parties. For more details on our security practices, see our Security page.

We use a small number of cookies and similar technologies to keep you signed in and remember your preferences. We do not use advertising cookies or tracking pixels. For full details, see our Cookie Policy.

We keep your account data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it by law. Test results associated with a teacher's academy may be retained in anonymised or aggregate form for platform analytics.

You have the right to: • Access the personal data we hold about you • Correct inaccurate data • Request deletion of your account and associated data • Withdraw consent at any time (by deleting your account) • Receive a copy of your data in a portable format To exercise any of these rights, email us at privacy@examly.io. We will respond within 30 days.

Examly is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, please contact us at privacy@examly.io and we will delete the account promptly.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting a notice on the platform or sending an email to the address on your account. Continued use of Examly after the change constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or how we handle your data, contact us at privacy@examly.io or use the Contact page.