Privacy Notice
Last updated 11 September 2026
Nathan Mercieca, trading as ExamAI, is the data controller for the personal data described here. This notice explains what we collect, why, who we share it with and what rights you have. Contact us at support@examhelpai.lovable.app.
Data we collect and why
- Account data (name, email, password hash, role, school membership) — to create and secure your account and provide the service. Legal basis: performance of our contract with you.
- Study content (uploaded notes and past papers, quiz answers, tutor questions, revision plans, progress data) — to generate questions, mark work and show progress. Legal basis: performance of our contract.
- Usage and technical data (pages viewed, feature usage, device and browser information, IP address, error logs) — to keep the service secure, prevent abuse and improve the product. Legal basis: our legitimate interests in security and improvement.
- Support messages — to answer your questions. Legal basis: legitimate interests.
- Marketing and product emails (welcome message, exam countdown reminders) — Legal basis: consent, or legitimate interests for service-related messages. You can unsubscribe at any time.
Payment card details are collected and processed by Paddle, not by us. We never see or store your card number.
AI processing
To generate questions, marking and analysis we send relevant extracts of your uploaded material and your questions to our AI model provider through Lovable's AI gateway. This is done to deliver the feature you requested. We do not sell your content, and we do not use it to train public models.
Who we share data with
- Hosting, database, storage and error-monitoring providers who run ExamAI for us;
- AI model providers, for the processing described above;
- Paddle.com, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance and invoicing;
- Email delivery providers, for account and reminder emails;
- Your school, where you join a school account — admins can see your membership status;
- Professional advisers, and authorities where the law requires it.
International transfers
Some providers process data outside the UK/EEA. Where that happens we rely on adequacy decisions or Standard Contractual Clauses to protect your data.
How long we keep data
We keep account and study data while your account is active and for up to 12 months after you close it, unless you ask us to delete it sooner. Billing records are kept for as long as tax law requires. After that data is deleted or anonymised.
Your rights
You have the right to access, correct, delete, restrict or object to our use of your personal data, to receive a portable copy, and to withdraw consent at any time. Email support@examhelpai.lovable.app and we will respond within one month. If you are in the UK/EEA you can also complain to your local data protection authority.
Security
Data is encrypted in transit, access to your files and results is restricted to your own account through database-level access rules, and administrative access is limited to what is needed to run the service.
Cookies
We use essential cookies and local storage to keep you signed in and to remember your preferences. Our payment provider sets cookies during checkout. We do not use advertising cookies. You can clear or block cookies in your browser, though sign-in will stop working.
Children
ExamAI is intended for exam-age students. Where a student is below the age of digital consent in their country, an adult or the student's school must set up and supervise the account.