Privacy Policy

Last Updated: January 23, 2026

1. Introduction

Welcome to ExamVerse AI ("we," "our," "us," or the "Company"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, applications, and services (collectively, the "Service").

By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

We collect several types of information to provide and improve our Service:

2.1 Information You Provide Directly

• Account Information: When you register, we collect your name, email address, and password (securely hashed). If you sign up using Google or another third-party provider, we receive your name, email address, and profile picture as permitted by that provider's settings.
• Profile Information: You may optionally provide additional information such as your target exam, test date, target score, educational background, and profile photo.
• Payment Information: When you subscribe to our Pro plan, payment processing is handled by Stripe. We do not store your full credit card number. We receive limited information from Stripe such as the last four digits of your card, card type, and billing address for record-keeping purposes.
• User-Generated Content: We collect content you create or upload, including essays, practice responses, study notes, AI chat messages, uploaded documents/images, and any other content you submit to the Service.
• Communications: When you contact us for support or feedback, we collect your name, email address, and the contents of your message. We also collect messages you send through Study Rooms and other communication features.

2.2 Information Collected Automatically

• Usage Data: We collect information about how you interact with our Service, including pages visited, features used, time spent on pages, practice questions answered, scores achieved, and learning progress.
• Device Information: We collect device information such as your IP address, browser type and version, operating system, device type, and screen resolution.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze usage patterns. See Section 7 for more details.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and Maintain the Service: To create and manage your account, authenticate your identity, and deliver the features you request.
• Personalize Your Experience: To create adaptive study plans, provide predictive score analytics, recommend content, and tailor feedback based on your performance and goals.
• Process AI Features: To send your content to AI service providers for essay grading, tutoring, content generation, and other AI-powered features.
• Process Payments: To facilitate subscription payments and manage your billing through our payment processor.
• Communicate With You: To send service-related announcements, respond to your inquiries, and provide customer support.
• Improve Our Service: To analyze usage patterns, identify bugs, develop new features, and enhance overall platform performance.
• Ensure Security: To detect and prevent fraud, abuse, and unauthorized access to protect our users and platform.
• Comply With Legal Obligations: To meet our legal and regulatory requirements.

4. Sharing Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

• AI Service Providers: To power our AI features, we send your content (such as essays, questions, and chat messages) to third-party AI providers, primarily Google (Gemini). This content is processed to generate responses and feedback. We do not include your personal identification information (like email) with these requests unless you explicitly include it in your input.
• Payment Processor: We use Stripe to process payments. When you make a purchase, your payment information is shared directly with Stripe in accordance with their Privacy Policy.
• Infrastructure Providers: We use Firebase (Google Cloud) for hosting, database, authentication, and storage services. Your data is stored on their secure servers.
• Other Users: Certain information is visible to other users based on your use of social features:
  • Leaderboards display your name, profile picture, and score/rank.
  • Study Rooms show your name and profile picture to room participants.
  • Community content you share publicly is visible to all users.
  • Discussion posts display your name and profile picture.
• Legal Requirements: We may disclose your information if required by law, court order, or governmental request, or to protect our rights, property, or safety.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Service. Specifically:

• Account Data: Retained until you delete your account.
• Usage and Performance Data: Retained for the lifetime of your account to maintain your progress and analytics.
• Payment Records: Retained for 7 years to comply with tax and accounting requirements.
• Support Communications: Retained for 3 years after resolution.

When you delete your account, we will delete or anonymize your personal information within 30 days, except for data we are required to retain for legal or legitimate business purposes.

6. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS/SSL. Sensitive data is encrypted at rest.
• Authentication: Passwords are securely hashed using industry-standard algorithms. We support secure authentication through Google OAuth.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis.
• Infrastructure Security: Our infrastructure is hosted on Google Cloud/Firebase, which maintains SOC 2, ISO 27001, and other security certifications.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

• Essential Cookies: Required for the Service to function, including authentication and session management. These cannot be disabled.
• Preference Cookies: Remember your settings and preferences (e.g., theme, language).
• Analytics Cookies: Help us understand how users interact with our Service to improve functionality and user experience.

You can control cookies through your browser settings. However, disabling essential cookies may prevent you from using certain features of the Service.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Update or correct inaccurate personal information through your Profile and Settings pages.
• Deletion: Request deletion of your account and personal data through the Settings page or by contacting us.
• Data Portability: Request a copy of your data in a portable format.
• Opt-Out: Unsubscribe from marketing communications using the link in our emails or through your Settings.
• Restrict Processing: Request that we limit processing of your personal information in certain circumstances.

To exercise any of these rights, please contact us at examverseai@gmail.com. We will respond to your request within 30 days.

9. International Data Transfers

ExamVerse AI is operated from the United States. If you are accessing our Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using our Service, you consent to this transfer.

We ensure that any international transfers of personal data are conducted in compliance with applicable data protection laws, using appropriate safeguards such as Standard Contractual Clauses where required.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
• No Sale of Personal Information: We do not sell personal information as defined by the CCPA.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your data based on: (a) your consent, (b) performance of a contract with you, (c) our legitimate interests, or (d) compliance with legal obligations.
• Data Subject Rights: You have the right to access, rectify, erase, restrict processing, object to processing, and data portability.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
• Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority.

12. Children's Privacy

Our Service is not intended for children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children under this age. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

13. Third-Party Links

Our Service may contain links to third-party websites or services that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification for significant changes (if you have an account)

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days.