ExamFox

Privacy policy

Last updated 19 September 2026

ExamFox (“ExamFox”, “we”, “us”) helps GCSE students in England, Wales and Northern Ireland plan their revision. This policy explains what personal data we collect, why, and what rights you have over it, in line with the UK GDPR and the Data Protection Act 2018.

ExamFox is aimed at students aged 13 and over. If you are under 13, please do not use ExamFox or give us your personal data. If you are 13–17, we still recommend you show this policy to a parent or guardian before signing up.

The data controller is ExamFox, contactable at thomas@jeremylab.uk. That is also the address to use for any privacy question, complaint, or rights request under this policy.

1. What we collect

We collect only what the planner needs to work:

  • Account details — your name, email address, and a profile photo, if your Google account provides one, when you sign in.
  • Study details — the exam board, subjects, school, and year group you tell us, and the revision plan and calendar you build from them.
  • Practice activity — photos of handwritten answers you upload for marking, and the verdicts and annotations we generate against them.
  • Usage data — basic technical logs (device type, browser, approximate location from IP address, and pages visited) needed to keep the service secure and working.

We do not use third-party analytics or advertising trackers inside the signed-in app, and we never sell your data.

2. How we use it

  • To create and run your account and revision plan.
  • To mark practice answers you submit — this is the only place in ExamFox where an AI model reads your content, and it only sees the answer photo and the relevant mark scheme, never your name.
  • To keep the service secure, diagnose faults, and prevent abuse.
  • To send you service messages (for example, a reminder about a revision session you scheduled). We do not send marketing email.

3. Our legal basis

  • Contract — running your account, your plan, and marking your practice answers is how we deliver the service you signed up for.
  • Legitimate interests — keeping ExamFox secure and working reliably, which we judge does not override your own rights and interests as a young person.
  • Consent — where we ask for it separately, for example before turning on an optional feature.

4. Sharing your data

We do not sell personal data. We share it only with:

  • Supabase, who host our database, file storage, and sign-in on our behalf, under a data processing agreement.
  • Google, because that is how you sign in — they act as your identity provider, not as a processor of ours.
  • An AI provider, solely to read an answer photo you submit for marking and to return a mark and feedback. No other part of ExamFox sends your data to an AI model.
  • A regulator or law enforcement body, if we are legally required to.

We never store or reproduce exam board question papers or mark schemes ourselves — that content stays with the exam boards (AQA, Pearson Edexcel, OCR, WJEC and Eduqas). ExamFox links to a board’s own materials rather than copying them.

5. Where your data is stored

Your data is stored and processed in the UK/EU. Where a provider transfers data outside the UK, we rely on that provider’s UK International Data Transfer Agreement or equivalent safeguard.

6. How long we keep it

  • Account and plan data is kept for as long as your account is active, and deleted within 30 days of you closing it.
  • Answer photos are kept only for a short period after marking, then deleted automatically — we do not build up an archive of your handwriting or answers.
  • Security logs are kept for a limited period, then deleted or anonymised.

7. Your rights

Under UK data protection law, you can ask us to:

  • show you the personal data we hold about you;
  • correct it, if it is wrong or out of date;
  • delete your account and personal data;
  • export your data in a portable format;
  • restrict or object to certain uses of your data.

You can delete your own account and data at any time from Settings in the app. For anything else, email thomas@jeremylab.uk and we will respond within one month. If you are not satisfied with our response, you can complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator.

8. Keeping your data safe

Every table that holds your data is protected by row-level security, so ExamFox only ever shows you your own information. Access to production data is restricted, and photos you submit for marking are deleted on a short schedule rather than kept indefinitely.

9. Cookies

ExamFox uses only the cookies needed to keep you signed in and to remember basic preferences. We do not use advertising or cross-site tracking cookies.

10. Changes to this policy

If we make a material change, we will let you know in the app before it takes effect. The date at the top of this page shows when it was last updated.

11. Contact us

Questions about this policy or your data: thomas@jeremylab.uk.