1. Introduction
Examon AI is operated by EXAMON PTE. LTD. ("Examon," "we," "us," or "our"), a company incorporated in Singapore under the Accounting and Corporate Regulatory Authority (ACRA). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website at examon.ai, our web application, and all related services (collectively, the "Service"). This Privacy Policy forms part of our Terms and Conditions.
By using our Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this policy, please do not use our Service.
2. Information We Collect
Information You Provide
When you register for an account or use our Service, you may provide us with:
- Name or username
- Email address
- Password (stored securely via our authentication provider)
- Educational institution and course information
- Academic content you upload, such as answers, essays, documents, and images
- Messages and inputs to AI features (the AI tutor, marking, content generation)
- Links to external websites you provide for content extraction
- Feedback, support requests, and other communications with us
Information Collected Automatically
When you use our Service, we may automatically collect:
- Device information (browser type, operating system, screen resolution)
- IP address and approximate location (city or country level)
- Pages visited, features used, and time spent on the platform
- Referral source (how you found Examon)
3. Legal Basis for Processing
We process your personal information under the following legal bases, in accordance with Singapore's Personal Data Protection Act (PDPA) and applicable international data protection standards:
- Consent: You provide consent when you create an account, accept this Privacy Policy, and opt in to analytics cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
- Contractual necessity: Processing required to deliver the Service you have signed up for, including account management, AI-powered marking, tutoring, and content generation.
- Legitimate interest: Processing necessary for our legitimate business interests, such as improving the Service, preventing fraud, and ensuring platform security. We balance these interests against your rights and freedoms.
- Legal obligation: Processing required to comply with applicable laws, regulations, or lawful government requests, including Singapore's PDPA.
4. How We Use Your Information
We use the information we collect to:
- Provide and operate the Service: Create and manage your account, deliver AI-powered marking, tutoring, flashcard generation, and other educational features.
- Process AI features: When you use AI-powered features such as answer marking, the AI tutor, or content generation, your academic content is sent to third-party AI providers (including OpenAI, Google, and Anthropic) to generate responses. These providers process your content solely to fulfil your request and are contractually prohibited from retaining your data for their own model training.
- Process external content: When you provide links to external websites, our Service may extract text and images from those websites to generate educational materials. Images may be re-hosted on our servers (Amazon S3) to ensure consistent availability. Generated materials include source attribution linking back to the original website.
- Personalize your experience: Remember your preferences, track your study progress, and tailor recommendations.
- Improve the Service: Analyze usage patterns to fix issues, develop new features, and improve existing ones.
- Communicate with you: Send service-related updates, respond to support requests, and notify you of important changes to our Service or policies.
- Ensure security: Detect and prevent fraud, abuse, and unauthorized access.
- Comply with legal obligations: Meet requirements under applicable laws, including Singapore's Personal Data Protection Act (PDPA).
We do not use identifiable user content or personal information to train AI models. We do not sell your personal information.
5. Cookies and Analytics
Essential Cookies
We use essential cookies that are required for the Service to function. These include authentication cookies (provided by Clerk, our authentication service) that keep you logged in. These cookies cannot be disabled.
Analytics Cookies (Opt-In Only)
We operate on an opt-in consent model. When you first visit our website, you will see a consent banner. No analytics cookies are placed on your device until you explicitly accept. If you decline, analytics cookies will not be used.
With your consent, we use the following analytics tools:
- PostHog: A product analytics platform that collects page views, feature interactions, device and browser information, and JavaScript errors. With your consent, PostHog may also record your browsing session (mouse movements, clicks, and scrolling) to help us identify usability issues. Sensitive input fields such as passwords are automatically excluded from recordings. PostHog processes this data on our behalf and does not use it for independent purposes.
- Google Analytics 4 (via Google Tag Manager): Used to understand which channels and campaigns drive visitors to our website. Google Analytics collects anonymized usage data and is subject to Google's own privacy policy.
Managing Your Cookie Preferences
You can update your analytics cookie preferences at any time using the cookie consent banner, which can be reopened from the footer of any page. You may also clear cookies through your browser settings. Changing your preference to decline will stop future analytics data collection but will not delete data already collected.
Do Not Track Signals
Our Service does not currently respond to "Do Not Track" (DNT) browser signals. However, because we use an opt-in consent model for analytics cookies, no tracking cookies are placed unless you explicitly accept them.
Local Storage
We use local storage on your device to remember preferences such as your analytics consent choice. This data is stored on your device and is not transmitted to our servers.
Vercel Analytics
We use Vercel Analytics to monitor website performance metrics such as page load times and Web Vitals. This data is collected automatically and does not require cookie consent as it does not use cookies or track individual users across sessions.
Server-Side Analytics
Regardless of your cookie consent preference, Examon collects server-side usage data as part of normal platform operation. This includes which features you use (such as marking answers, creating study sets, or using the AI tutor), your subscription status, and when you last accessed the platform. This data is not tied to browser cookies. It is used for platform improvements, troubleshooting, and aggregate analytics.
6. How We Share Your Information
We share your information only as necessary to provide the Service and as described below:
- AI providers (OpenAI, Google, Anthropic): Your academic content is sent to AI providers when you use marking, tutoring, or generation features. These providers process content solely to generate responses and do not retain your data for model training.
- Authentication (Clerk): Manages your login credentials and account authentication.
- Payment processing (Stripe): Handles all payment transactions. We do not store your credit card details on our servers. Stripe processes your payment information in accordance with its own privacy policy.
- Cloud hosting (Vercel): Hosts our application and processes requests on our behalf. Vercel may process your IP address and request metadata as part of delivering the Service.
- Cloud storage (Amazon Web Services): Stores uploaded files and images securely.
- Database hosting (MongoDB Atlas): Stores application data, including your account information and academic content, on secure cloud infrastructure.
- Analytics (PostHog, Google Analytics): Processes analytics data as described in Section 5, only with your consent.
- Legal compliance: We may disclose information to government authorities or law enforcement if required by law or to protect the rights, safety, or property of Examon, our users, or others.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. The receiving party will be required to honour the commitments in this Privacy Policy.
We require all service providers to process your data only as necessary to provide their services to us and to maintain appropriate security measures. We enter into data processing agreements with our service providers where required by law.
7. International Data Transfer
Examon is based in Singapore. Your information may be transferred to and processed in countries other than your own, including the United States, through our service providers. These countries may have different data protection laws.
To safeguard your information during international transfers, we take the following measures:
- We enter into data processing agreements with our service providers that include appropriate data protection obligations.
- We select service providers that maintain recognised security certifications (such as SOC 2 or ISO 27001) where available.
- We ensure that transferred data is subject to the same level of protection described in this Privacy Policy.
By using our Service, you consent to the transfer of your information to these countries. If you have questions about our data transfer practices, please contact us at support@examon.ai.
8. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. Specific retention periods are as follows:
- Account data: Retained for the duration of your account. Upon account deletion, personal data is removed from active systems within 30 days.
- Academic content: Retained for the duration of your account. Deleted when you delete a resource or your account.
- AI interaction logs: Retained for up to 12 months for service improvement and troubleshooting, then deleted or anonymized.
- Analytics data: Retained for up to 24 months, then deleted or anonymized.
- Payment records: Retained for up to 7 years as required by Singapore financial regulations.
- Backups: May contain your data for up to 90 days after deletion from active systems.
When your information is no longer required, we will delete it or anonymize it so it can no longer be associated with you.
9. Data Security
We implement technical and organizational measures to protect your personal information, including encryption of data in transit (SSL/TLS), secure access controls, and regular review of our security practices. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
Data Breach Notification
In the event of a data breach that is likely to result in significant harm to affected individuals, we will:
- Complete a notifiability assessment expeditiously (generally within 30 calendar days of discovering the breach) as required by the PDPA. If the breach is determined to be notifiable, notify the Personal Data Protection Commission (PDPC) of Singapore within 3 calendar days of that determination.
- Notify affected individuals as soon as practicable, providing details of the breach, the types of data involved, and the steps we are taking to address it.
- Take immediate steps to contain the breach, assess its impact, and prevent recurrence.
10. Automated Decision-Making
Our Service uses AI-powered systems to provide automated marking and feedback on your academic work. These systems assign marks and generate feedback based on mark schemes, rubrics, and subject-specific criteria.
You should be aware that:
- AI-generated marks and feedback are intended as study aids and practice tools. They are not official exam grades and should not be treated as such.
- Automated marks may not always be accurate. We encourage you to review feedback critically and consult your teachers for official assessments.
- If you believe an automated mark is incorrect, you can re-mark your answer or contact us at support@examon.ai to request a review.
We do not use automated decision-making for purposes that produce legal effects or similarly significant effects on you, such as determining access to educational opportunities or employment.
11. Your Rights
Under Singapore's Personal Data Protection Act (PDPA) and as a matter of best practice, you have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete personal data.
- Deletion: Request deletion of your personal data and account.
- Withdraw consent: Withdraw your consent for analytics cookies or other optional data processing at any time. Withdrawing consent will not affect your ability to use the Service.
- Data portability: Request a copy of your personal data in a commonly used, machine-readable format.
To exercise any of these rights, contact our Data Protection Officer at support@examon.ai. We will acknowledge your request within 5 business days and respond substantively within 30 days.
Additional Rights for International Users
If you are located in the European Economic Area (EEA), United Kingdom, or California, you may have additional rights under your local data protection laws. While Examon is based in Singapore and operates primarily under the PDPA, we respect the following rights as a matter of best practice for all users:
- Right to object: You may object to the processing of your personal data where we rely on legitimate interest as our legal basis.
- Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances, such as while we verify its accuracy.
- Right to lodge a complaint: You have the right to lodge a complaint with your local data protection authority if you believe your data has been processed unlawfully.
- Do Not Sell or Share (California): We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
12. Children and Minors
Examon AI is designed for students aged 13 and above. We do not knowingly collect personal information from anyone under the age of 13. If you are a parent or guardian and believe your child under 13 has provided us with personal data, please contact us at support@examon.ai and we will promptly delete it.
For users aged 13 to 17, we take the following additional steps:
- We use an opt-in consent model for analytics cookies. No analytics data is collected from a user's browser until they explicitly accept.
- We do not serve targeted advertising to any users, including minors.
- We do not sell or share the personal information of minors.
- We encourage users under 18 to review this policy with a parent or guardian before creating an account.
Parents and guardians may contact us at support@examon.ai to request access to, correction of, or deletion of their child's personal data.
13. Third-Party Links and Content
Our Service may contain links to third-party websites, and users may provide links to external websites for content extraction. We are not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to review the privacy policy of any website you visit.
When you provide a link to an external website for content extraction, we access and process publicly available content from that website solely to generate educational materials for your use. We do not collect personal data from those websites on your behalf.
14. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide at least 30 days' notice before the new policy takes effect by updating the "Last Updated" date at the top of this page and notifying you via email or a notice on our Service. Your continued use of the Service after any changes indicates your acceptance of the updated policy.
15. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact our Data Protection Officer:
- Data Protection Officer
- EXAMON PTE. LTD.
- Email: support@examon.ai
- General Support: support@examon.ai
If you are not satisfied with our response to a privacy concern, you may contact the Personal Data Protection Commission (PDPC) of Singapore at www.pdpc.gov.sg.
