Privacy Policy

1. Introduction

WitExam ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered exam preparation platform (the "Service").

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

This Privacy Policy applies to all users of the Service, including registered users, visitors, and anyone who interacts with our website or applications.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide to us, including:

Data Type	Examples	Purpose
Account Information	Email address, name, profile picture	Account creation and authentication
Study Materials	PDFs, documents, images, audio files, YouTube links	Content analysis and question generation
Test Responses	Your answers to practice questions, bookmarks, notes	Performance tracking and personalization
Chat Conversations	Questions you ask the AI tutor	Providing AI assistance and improving the service
Preferences	Theme settings, notification preferences, study goals	Customizing your experience

2.2 Information Collected Automatically

When you use the Service, we automatically collect certain information, including:

Device Information: Device type, operating system, browser type and version, unique device identifiers
Usage Information: Pages visited, features used, time spent on the Service, click patterns
Log Data: IP address, access times, referring URLs, error logs
Performance Data: Test scores, study time, progress metrics

2.3 Information from Third Parties

We may receive information from third-party services when you:

Sign in using Google or Apple authentication
Link YouTube videos for analysis
Use payment services for subscriptions

The information we receive depends on the third party's privacy settings and policies.

3. How We Use Your Information

We use your information for the following purposes:

3.1 Providing the Service

Creating and managing your account
Processing and analyzing your uploaded study materials
Generating practice questions and tests
Providing AI-powered tutoring and study assistance
Tracking your learning progress and performance
Personalizing your study recommendations

3.2 Improving the Service

Analyzing usage patterns to improve features
Developing new features and functionality
Training and improving our AI models (using anonymized data)
Conducting research and analytics

3.3 Communications

Sending account-related notifications (e.g., verification codes, security alerts)
Responding to your inquiries and support requests
Sending study reminders and progress reports (if enabled)
Informing you about updates, new features, or changes to our policies

3.4 Legal and Safety

Complying with legal obligations
Enforcing our Terms of Service
Protecting against fraud, abuse, and security threats
Protecting the rights and safety of users and third parties

4. AI Processing and Third-Party Services

4.1 How AI Processes Your Data

Our Service uses artificial intelligence to:

Extract key concepts and information from your uploaded materials
Generate practice questions based on your content
Provide explanations and tutoring assistance
Analyze your performance and provide recommendations

4.2 Third-Party AI Services

We use Google Gemini and other AI services to power our features. When your content is processed by these services:

Your data is transmitted securely to third-party servers for processing
Processing is governed by the third party's privacy policy and terms
We minimize the personal information sent to these services
AI providers may use data to improve their models (subject to their policies)

Note: We recommend not uploading highly sensitive personal information (e.g., social security numbers, financial account details) to the Service. Study materials should contain educational content only.

4.3 Local Processing

Where possible, we perform initial processing locally before sending data to AI services. This includes:

Extracting text from PDFs and documents
Converting audio to text transcripts
Basic content preprocessing and formatting

This approach reduces the amount of data transmitted and improves processing efficiency.

5. Data Sharing and Disclosure

5.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

5.2 When We May Share Data

We may share your information in the following circumstances:

Recipient	Purpose	Data Shared
AI Service Providers (e.g., Google)	Content analysis and question generation	Uploaded content for processing
Cloud Infrastructure (e.g., hosting providers)	Storing and serving the application	All data stored in the Service
Authentication Providers (Google, Apple)	Secure sign-in	Email address, profile information
Payment Processors	Subscription payments	Payment details (not stored by us)
Analytics Services	Understanding usage patterns	Anonymized usage data

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

Valid legal processes (subpoenas, court orders)
Government requests
To protect our rights, property, or safety
To protect the rights, property, or safety of others
To investigate potential violations of our Terms of Service

5.4 Business Transfers

If WitExam is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

6. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy. Specifically:

Data Type	Retention Period
Account Information	Until you delete your account
Study Materials	Until you delete them or your account
Test Results and Progress	Until you delete your account
Chat Conversations	90 days after last activity in that subject
Log and Usage Data	12 months
Anonymized Analytics	Indefinitely (not linked to you)

After account deletion, we may retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention, legal compliance). Backup copies may persist for a limited time before being deleted.

7. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

7.1 Technical Measures

Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS/SSL
Encryption at Rest: Sensitive data is encrypted when stored in our databases
Secure Authentication: We use industry-standard authentication methods, including OTP verification
Access Controls: Access to user data is restricted to authorized personnel only

7.2 Organizational Measures

Regular security assessments and updates
Employee training on data protection
Incident response procedures
Regular backups and disaster recovery planning

7.3 Your Responsibilities

You are responsible for:

Keeping your account credentials secure
Using secure networks when accessing the Service
Logging out of shared devices
Reporting any suspected unauthorized access to your account

Important: No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

8. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

8.1 Access and Portability

You can access most of your personal information through your account settings. You may request a copy of your data in a portable format.

8.2 Correction

You can update your account information at any time through your profile settings. If you believe any information is inaccurate, please contact us.

8.3 Deletion

You can delete your account and associated data through your account settings. Upon request, we will delete your personal information, subject to certain exceptions (e.g., legal requirements, fraud prevention).

8.4 Opt-Out

You can opt out of:

Marketing Communications: Unsubscribe links in emails or notification settings
Study Reminders: Toggle off in your account settings
Cookies: Adjust your browser settings (may affect functionality)

8.5 Additional Rights (Where Applicable)

If you are in the European Union, California, or other jurisdictions with privacy laws, you may have additional rights including:

Right to restrict processing
Right to object to processing
Right to data portability
Right to withdraw consent
Right to lodge a complaint with a supervisory authority

To exercise these rights, please contact us at privacy@witexam.com.

9. Cookies and Tracking

9.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. We use cookies and similar technologies to provide, protect, and improve the Service.

9.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential	Required for the Service to function (authentication, security)	Session to 7 days
Preferences	Remember your settings (theme, language)	1 year
Analytics	Understand how users interact with the Service	Up to 2 years

9.3 Managing Cookies

Most browsers allow you to control cookies through their settings. However, disabling cookies may affect the functionality of the Service.

We do not use cookies for third-party advertising purposes.

10. Children's Privacy

The Service is not intended for children under 13 years of age (or the minimum age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under this age.

If we learn that we have collected personal information from a child under the applicable age, we will take steps to delete that information as quickly as possible.

If you believe a child has provided us with personal information, please contact us at privacy@witexam.com.

Users between 13 and 18 years of age should have parental or guardian consent before using the Service.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your jurisdiction.

When we transfer your information internationally, we take steps to ensure that appropriate safeguards are in place, including:

Standard contractual clauses approved by relevant authorities
Data processing agreements with third-party providers
Compliance with applicable data transfer frameworks

By using the Service, you consent to the transfer of your information to countries outside your country of residence.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes:

We will update the "Last updated" date at the top of this page
For material changes, we will notify you via email or a prominent notice on the Service
Your continued use of the Service after changes constitutes your acceptance of the updated policy

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@witexam.com
General Support: support@witexam.com
Website: witexam.com

We will respond to your inquiry within a reasonable timeframe, typically within 30 days.

Data Protection Officer

For users in the European Union and other jurisdictions that require a Data Protection Officer, you may contact our DPO at dpo@witexam.com.

Legal Basis for Processing (EU Users)

If you are in the European Union, our legal bases for processing your personal information include:

Contract Performance: Processing necessary to provide the Service you requested
Legitimate Interests: Processing for our legitimate business interests (e.g., improving the Service, security), balanced against your rights
Consent: Processing based on your explicit consent (e.g., marketing communications)
Legal Obligations: Processing required to comply with applicable laws

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know: You can request information about the categories and specific pieces of personal information we collect, use, and disclose
Right to Delete: You can request deletion of your personal information, subject to certain exceptions
Right to Opt-Out: You can opt out of the sale of personal information (note: we do not sell personal information)
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights