Privacy Policy

RealExams (“RealExams”, “we”) provides online exam authoring, delivery, scoring, and behavioral learning-analytics software used by schools, tutoring academies, and individual teachers (each, a “Workspace”). This policy explains what personal data we process, why, and the choices available to you.

Who controls your data

If you were invited into a Workspace by a school, academy, or teacher, that Workspace decides what data is collected and how it’s used — RealExams acts as a data processor, on the Workspace’s instructions. Start any access, correction, or deletion request with your Workspace administrator. If you signed up for RealExams directly (no inviting Workspace), RealExams is the controller of your data.

Information we collect

• Account & identity — name, email address, and, if you sign in with Google, the identifiers that Google shares with us to verify your identity. Passwords are stored as one-way hashes; we never see your Google password.
• Exam content & responses — the tests, questions, answers, essays, and recordings (e.g. IELTS Speaking audio) you or your Workspace create or submit, plus computed scores.
• Mock certificate details — when a Workspace issues a practice-result certificate, it may add the learner’s date of birth, sex, nationality, first language, and candidate identifiers. We retain the issued record and integrity hashes for verification and revocation; preview PDFs, downloaded PDFs, and bulk ZIP files are generated on demand and are not retained.
• Behavioral & usage signals — timing, navigation, and interaction data captured during a test attempt (pauses, section timing, answer-revision patterns) that power the analytics your teacher or academy sees.
• Payment data — when you buy Pro, Expert marking or the Teacher plan, you pay on Payme’s or Click’s own page. We keep the order (what you bought, the amount in so’m, when) and the provider’s transaction reference and status. RealExams never receives or stores your card number. Learning-centre plans are invoiced directly.
• Technical data — IP address, browser/device information, and standard server logs.

How we use this information

• to authenticate you and run the exam experience (delivery, timing, autosave, scoring);
• to generate the behavioral/performance analytics shown to teachers and academy admins;
• to send operational email, like a sign-in link, via our email provider, Resend;
• to secure the service (abuse and fraud prevention, rate limiting) and fix bugs;
• to take payments in so’m through Payme and Click, and to give access to what you paid for;
• to have your Writing marked when you send it for Expert marking.

We do not sell personal data, and we do not use exam content or behavioral data to serve third-party advertising.

Who we share it with

• Google — sign-in verification (Google Identity Services), and, for teachers using the AI test-import feature, the uploaded materials sent to Google’s Gemini API for parsing.
• Payme and Click — payment processing in Uzbekistan. They receive the order number and the amount, and Payme also a short description of what you are buying for your receipt. Your card or wallet details go to them directly, never to us.
• Expert examiners — when you send Writing for Expert marking, the qualified IELTS examiner who marks it sees your answer and the task it responds to.
• Resend — delivery of transactional email such as sign-in links.
• Hetzner Online GmbH — our infrastructure host (Germany).

Each provider only receives what it needs to do its job, under its own privacy and security terms.

Children’s data

Many RealExams users are students under 18, invited by their school or teacher. Where a Workspace invites a student, that Workspace is responsible for any parental or guardian notice or consent required by the laws that apply to it — RealExams processes that student’s data on the Workspace’s instructions, as its service provider.

Data retention

We retain account and exam data for as long as the Workspace stays active, plus a reasonable period afterward to resolve disputes or meet legal obligations. A Workspace admin can request deletion of their Workspace’s data, or an individual can request deletion of their own account, by contacting us below.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. Contact your Workspace administrator if you were invited, or reach us directly (below) and we’ll route the request appropriately.

Security

We use encryption in transit (HTTPS), hashed passwords, and access controls scoped per Workspace. No method of transmission or storage is 100% secure.

Changes to this policy

We’ll update the “Last updated” date above whenever this policy changes, and post material changes here.

Contact

Questions about this policy: [email protected].