Privacy Policy

• Account details — your name, email address, and password (stored as a secure hash; we never see the plain password). If you sign in with Google, we receive your name, email, and profile picture from Google.
• Study profile — the exam you are preparing for, your speciality, and your target exam date, used to personalise your practice.
• Practice activity — which questions you attempt, your answers, scores, time taken, bookmarks, streaks, and achievements. This powers your analytics, weak-topic detection, and the leaderboard.
• Technical basics — device type, app version, and approximate region, used for security and to keep the Service working on your device.

We do not collect your contacts, precise location, photos, or anything from other apps on your device.

• To create and secure your account.
• To track your progress and personalise practice — for example, detecting weak topics and generating your AI study plan.
• To show your rank on the leaderboard (display name and score only).
• To send essential service emails such as email verification and password resets. We do not send marketing email without your consent.
• To prevent abuse and keep the Service reliable.

We never sell your personal data. We show no third-party advertising.

Question explanations and study plans are generated with Google Gemini. When we request an explanation, we send the question text and your aggregate performance statistics — never your name or email. AI outputs are cached on our servers so the same question is not re-processed.

We share data only with the service providers that run ExamNexus, under their own security and privacy commitments:

• Supabase — database, authentication, and file storage (servers in Tokyo, Japan).
• Vercel — website hosting and delivery.
• Google — Gemini AI processing (question text only) and optional Google sign-in.
• Resend — transactional email delivery.

We may disclose information if required by law or to protect the rights, safety, or security of ExamNexus and its users.

Your data is kept while your account is active. You can request deletion of your account and all associated personal data at any time by emailing support@examnexus.ai or following the steps on the Delete my account page. We complete deletion requests within 30 days. Anonymised, aggregate statistics (for example, "42% of users answered this question correctly") may be retained as they no longer identify you.

All traffic is encrypted with HTTPS/TLS. Passwords are hashed. Database access is protected by row-level security so each user can only read and write their own records. AI keys and server credentials are never exposed to the browser or apps.

We use only essential cookies and local storage: your sign-in session and your theme preference (dark or light). No advertising or cross-site tracking cookies.

The Service is intended for students and professionals preparing for higher-education and professional examinations and is not directed at children under 13. We do not knowingly collect data from children under 13; if you believe a child has created an account, contact us and we will delete it.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Email support@examnexus.ai to exercise any of these rights — we honour them for all users regardless of location.

We will post any changes on this page and update the "Last updated" date above. For material changes we will notify you in the app or by email before they take effect.

Questions about privacy? Email support@examnexus.ai.