ExamHatch · Legal
Privacy Policy
This page explains the information ExamHatch processes to provide learning diagnosis, study records, recommendations and weekly reviews, and how you can manage that information.
Privacy by design
- ExamHatch minimises identity information that is not needed for learning features. The core learning model can operate with a pseudonymous username and permanent Learner ID without requiring an additional real-world identity profile for Learning Diagnosis.
- A personal display name is optional and user-controlled. A school may separately provide a roster name and school student identifier; those school-owned roster fields do not overwrite the learner’s personal display name. School membership, professional roles and access to private learning records are separate controls. Appearing on a school roster does not, by itself, open a learner’s private learning records.
- School pilots and cohort reporting can use participant codes and de-identified group data when the question can be answered at cohort level.
Information we process
- Account information such as login email and user identifier.
- Learning profile information you provide, such as stage, subjects, goals and current challenges.
- Learning activity such as study duration, focus, completion, diagnosis results and weekly reviews.
- Necessary technical and visit data, such as access time, page path, referrer, device and browser type, IP address for security and traffic analysis, and approximate country/region and city-level location derived from the public IP address. This is not GPS or a precise address, and VPNs, corporate networks or mobile-carrier routing can affect the result. Raw IP addresses and full user-agent strings are retained for no more than 30 days; city, region and map-coordinate fields are retained for no more than 90 days, after which country-level information, a one-way hash and aggregated statistics may be retained.
How we use information
- Build and update your personal learning profile.
- Generate learning-method recommendations, Today guidance and weekly reviews.
- Maintain account security, access control and product reliability.
- Analyse overall traffic, feature use and product performance to improve ExamHatch. Technical visit data is not used as a scoring input for a student's learning profile.
Storage and service providers
- ExamHatch currently uses Supabase for authentication and database services and may use a deployment provider for hosting and operational logs.
- Storage locations and retention periods depend in part on the configuration of those providers.
Your choices and rights
- You can update learning-profile and account information within the product.
- You can request access to, correction of, or deletion of personal data associated with you.
- Where applicable under EU/EEA data-protection law, additional rights may include restriction, portability and objection.
Younger learners
- Where applicable law, school rules or the learner's circumstances require parent, guardian or school authorisation before using ExamHatch, that authorisation should be obtained first.
- School roster membership is not treated by ExamHatch as parent or guardian consent and does not automatically open a learner's private learning records.
Contact
- For privacy or data requests, use ExamHatch's official support/contact channel. Submit privacy or data requests through the official support or contact channel shown within ExamHatch.