Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

By using Examly, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address — used for authentication and account recovery
• Display name — optional, used for personalization
• School system and level — used to adapt AI question difficulty to your educational level
• Authentication provider — whether you signed in with Email, Google, or Apple

If you sign in with Apple, Apple may provide a private relay email address. If you sign in with Google, we receive your name and email from Google.

2.2 Usage Data

We collect anonymized usage data to improve the app, including:

• Exam sessions started and completed (subject, number of questions, difficulty level)
• Final grades (score out of 10)
• Flashcard sessions started and completed (percentage of cards known)
• Features used (document upload type, school level set)
• In-app purchase events (subscription type)
• Paywall views and interactions

This data is collected via Firebase Analytics and is anonymized — it cannot be used to identify you personally.

2.3 Crash Reports

We collect crash reports via Firebase Crashlytics to identify and fix bugs. Crash reports may include device model, iOS version, and the state of the app at the time of the crash.

2.4 Study Statistics

We store the following statistics in our cloud database (Firebase Firestore) to power your progress charts:

• Total number of exam sessions
• Average grade and best grade
• Study streak (consecutive days of study)
• Per-subject statistics (session count, average grade)

These statistics are associated with your user ID and stored securely on Firebase.

3. Data Stored Locally on Your Device

• Study documents — text extracted from PDFs, photos (OCR), or manually entered text
• Subjects and topics — the organizational structure you create
• Flashcards — generated by AI and saved locally for offline use
• Exam session details — questions asked, your answers, per-question feedback

This data is stored in the app's private container on your device and is not accessible to other apps. It is deleted if you uninstall the app or use the "Delete All Data" feature in Settings.

Subjects (materie) names and identifiers are stored in Firebase Firestore (cloud) so they can be organized and referenced across features, but the content of your documents is never uploaded.

4. How We Use Your Information

5. Third-Party Services

Examly uses the following third-party services. Each has its own privacy policy:

All Firebase services are subject to Google's Privacy Policy: policies.google.com/privacy

Anthropic's Privacy Policy: anthropic.com/privacy

RevenueCat's Privacy Policy: revenuecat.com/privacy

6. Advertising & Tracking

6.1 Advertising (Free Users Only)

If you use Examly without a Premium subscription, we may show advertisements powered by Google AdMob. These include:

• Interstitial ads — shown after completing an exam session
• Rewarded ads — optional ads you can watch to unlock additional exam or flashcard sessions

Premium subscribers never see advertisements.

6.2 App Tracking Transparency (ATT)

On iOS 14 and later, we request your permission through Apple's App Tracking Transparency (ATT) framework before accessing your device's advertising identifier (IDFA). This is shown when you first open the app.

• If you allow tracking, we use your advertising ID to show personalized ads and measure their effectiveness
• If you deny tracking, we show non-personalized ads only. The app functions identically either way.

6.3 GDPR Consent (European Users)

If you are located in the European Economic Area (EEA), we use Google's User Messaging Platform (UMP) to obtain your consent before processing your data for advertising purposes. You can withdraw or modify your consent at any time by going to:

Profile → Ad Preferences

6.4 Changing Your Preferences

You can manage advertising preferences at any time:

• iOS Settings → Privacy & Security → Tracking — to revoke ATT permission
• Examly → Profile → Ad Preferences — to update GDPR consent
• Upgrade to Premium — to remove all advertising permanently

7. Artificial Intelligence (Claude API)

Examly uses Anthropic's Claude API to generate exam questions, evaluate your answers, and create flashcards from your study material.

7.1 What is sent to Claude

When you start an exam session or generate flashcards, the following is sent to the Claude API via our secure backend (Firebase Cloud Functions):

• The text content of your study documents
• Your spoken/typed answers (for evaluation)
• Your school level and subject (for context)

7.2 How Claude processes your data

7.3 Speech Recognition (STT) and Text-to-Speech (TTS)

Examly uses Apple's native SFSpeechRecognizer for speech-to-text and AVSpeechSynthesizer for text-to-speech. These operate entirely on-device and do not send your voice data to external servers.

7.4 Photo OCR

When you photograph handwritten notes, Examly uses Apple's native Vision framework to extract text. OCR processing happens entirely on-device — your photos are never uploaded to any server.

8. Children's Privacy

Examly is designed for students, including minors. We take children's privacy seriously.

• Examly does not knowingly collect personal data from children under 13 without parental consent
• Users under 13 should have a parent or guardian review and consent to this Privacy Policy
• Advertising is shown to Free users; parents can prevent advertising exposure by purchasing a Premium subscription
• We do not show behavioral advertising to users who indicate they are under the age of consent in their region
• If you are a parent and believe your child has provided personal data without your consent, please contact us at support@examly.app and we will delete the data promptly

9. Data Retention

Deleting Your Data

You can delete your data at any time from within the app:

• Profile → Reset Statistics — deletes all exam history and progress charts
• Profile → Delete All Data — deletes all local data (documents, flashcards, sessions) and cloud statistics
• To permanently delete your account, contact us at support@examly.app

10. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

To exercise any of these rights, contact us at support@examly.app. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete it, and the right to opt-out of the sale of personal information. We do not sell your personal information.

11. Security

We implement industry-standard security measures to protect your data:

• Encryption in transit — all communications between the app and our servers use HTTPS/TLS encryption
• Firebase Security Rules — strict rules ensure users can only access their own data
• API key protection — the Anthropic API key is stored exclusively on our secure backend (Firebase Cloud Functions) and never exposed to the app
• Authentication — Firebase Authentication manages secure login with industry-standard OAuth 2.0
• Local data isolation — study documents are stored in the app's private CoreData container, inaccessible to other apps

Despite our best efforts, no method of electronic transmission or storage is 100% secure. If you discover a security vulnerability, please report it responsibly to support@examly.app.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any significant changes by:

• Updating the "Last updated" date at the top of this page
• Showing an in-app notification for material changes

Your continued use of Examly after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: