Privacy Policy

1. Introduction

examPattern ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights in relation to it. By creating an account or using our platform, you agree to the practices described in this policy.

2. Information We Collect

2.1 Account Information

When you register, we collect your name, email address, and a hashed password.

2.2 Profile Information

You may optionally upload a profile photo and provide additional details such as your institution or course of study.

2.3 Test & Attempt Data

We store every test attempt including your selected answers, open-text responses, time spent per question, scores, and evaluation results (including OCR-processed answer images you upload).

2.4 Usage Data

We automatically collect browser type, IP address, device information, pages visited, and interaction timestamps to improve platform performance and detect abuse.

2.5 Session Data

We use server-side sessions to maintain your login state. Session keys are stored securely and invalidated on logout.

3. How We Use Your Information

  • To create and manage your account.
  • To deliver, score, and evaluate your test attempts.
  • To generate result reports and allow PDF downloads.
  • To send transactional emails (e.g., password reset).
  • To analyse aggregate usage patterns and improve the platform.
  • To prevent fraud, cheating, and unauthorised access.
  • To comply with legal obligations.

We do not sell or rent your personal data to third parties for marketing purposes.

4. Data Storage & Security

Your data is stored on secured cloud servers. We implement industry-standard measures including:

  • Hashed and salted passwords (never stored in plaintext).
  • HTTPS encryption for all data in transit.
  • Restricted database access with role-based permissions.
  • Regular security reviews and dependency updates.

No system is 100% secure. In the event of a data breach that affects your personal information, we will notify you in accordance with applicable law.

5. Cookies & Local Storage

We use essential cookies to maintain your login session. We do not currently use third-party advertising cookies. You may disable cookies in your browser, but this will prevent you from logging in to the platform.

6. Sharing of Information

We may share your information with:

  • Service providers — cloud hosting and infrastructure providers who process data solely on our behalf and are bound by data-processing agreements.
  • Educational institutions — if you access examPattern through an institution's subscription, your results may be shared with authorised staff of that institution.
  • Legal authorities — when required by applicable law, court order, or government authority.

7. Data Retention

We retain your account data for as long as your account is active. Test attempts and results are retained for a minimum of two years to support performance analysis. You may request deletion of your account at any time; upon deletion all personal data is removed within 30 days, except where retention is required by law.

8. Your Rights

Depending on your jurisdiction you may have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate personal data.
  • Erase your data ("right to be forgotten").
  • Restrict or object to certain processing.
  • Data portability — receive your data in a structured, machine-readable format.
  • Withdraw consent at any time where processing is based on consent.

9. Children's Privacy

examPattern is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users of material changes by email or a prominent notice on the platform at least 14 days before the change takes effect. Continued use of the platform after that date constitutes acceptance of the revised policy.