Privacy Policy

1. Information We Collect

We collect the following types of information when you use Exams OS:

• Account Information: Full name, email address, role (student/tutor/proctor/admin), and optional institution name.
• Exam Data: Answers submitted, scores, time spent, and exam session metadata.
• Proctoring Data: Camera snapshots (face detection only - not stored), tab-switch events, copy/paste attempts, and other integrity signals during proctored exams.
• Usage Data: Pages visited, features used, browser type, and device information collected automatically.

2. How We Use Your Information

• To provide and maintain the examination and learning platform.
• To authenticate your identity and enforce role-based access control.
• To generate AI-powered practice questions tailored to your performance.
• To monitor exam integrity during proctored sessions.
• To provide analytics and performance insights to tutors and administrators.
• To communicate important updates about your account or the Platform.

3. Proctoring & Camera Data

During proctored exams, the Platform uses your device camera for face detection to verify your presence. Camera frames are processed locally in the browser for face detection and are not stored on our servers. Only proctoring event metadata (e.g., "face not detected at timestamp") is recorded and stored for review by authorized proctors.

4. Data Storage & Security

Your data is stored securely in Supabase (PostgreSQL) with row-level security policies. Authentication is handled by Supabase Auth with encrypted credentials. All data is transmitted over HTTPS. We implement industry-standard security practices but cannot guarantee absolute security.

5. Third-Party Services

Exams OS integrates with the following third-party services:

• Supabase: Database, authentication, and storage.
• Google Gemini API: AI question generation and explanations (course content may be sent to Google's API).
• DevCycle: Feature flag management (anonymous usage data only).
• Vercel: Web hosting and edge functions.

Each service has its own privacy policy. We encourage you to review them.

6. Data Sharing

We do not sell your personal data. We may share data only in the following circumstances:

• With tutors and proctors who need access to your exam performance and proctoring events.
• With institution administrators if your account is linked to an institution.
• When required by law or to protect the safety and security of our users.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Withdraw consent for camera access at any time (this may prevent you from taking proctored exams).

To exercise these rights, contact us at info@joyadevu.link.

8. Data Retention

We retain your account data for as long as your account is active. Exam results and analytics are retained for the duration of the academic period. Proctoring event logs are retained for 90 days after the exam session. You may request deletion of your data at any time.

9. Children's Privacy

Exams OS is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the Platform after changes constitutes acceptance of the revised policy.

11. Contact

If you have questions or concerns about this Privacy Policy, contact us at info@joyadevu.link.