Privacy Policy
Last updated: 11 September 2026
Exams ITforAll is an independent educational practice-paper service operated under ITforAll.org. This policy explains the information the service processes and the safeguards used to protect it.
Information we process
- Account information: name, email address, password hash, account status and sign-in/security records.
- Optional teacher profile information: school/institution name, city, printed teacher name and WhatsApp/mobile number when you choose to provide them.
- Service activity: generated paper records, selected classes/subjects/syllabus areas, usage counts and question reports.
- Subscription information: plan/access status and payment-provider references when paid plans are activated. Full card or bank credentials are intended to remain with the payment provider.
- Communication records: email verification status, communication preferences, message-delivery status and limited logs used to prevent duplicate or excessive messages.
Optional academic review
Reviewer applications store your stated experience and approved subject scope. Reviews record the reviewer, decision, notes and question version. They are available to authorised service administrators and are used to improve the question bank. Human approval is not required to generate a paper.
Paper identity
If you save a school/institution name or teacher display name, the platform may use those details to personalise question-paper headers. You can control whether the teacher name is shown on newly generated papers. Saved papers retain the question content and header identity captured when they were saved; existing papers are captured as they stand when the beta update is installed. Profile changes apply to future papers.
Email and WhatsApp
Essential account, security, subscription, payment and active reviewer-role communications may be sent when necessary to operate the service. Optional product/news emails require a separate preference. WhatsApp updates are optional and require you to provide a number and opt in. The initial WhatsApp feature is one-click contact initiated by an administrator, not automated bulk messaging.
Educational and AI processing
The platform may use configured AI services to help create and verify question-bank content from official educational sources. Teacher account passwords are never sent to the AI provider. The service is not designed for users to submit student personal data to the AI system.
What users should not upload or enter
Do not enter sensitive personal information about students, medical information, government identifiers, financial credentials or confidential school records into question-generation fields or reports.
Cookies and sessions
The service uses essential session cookies for authentication and security. These are not advertising cookies.
Security
Measures include password hashing, HTTPS session protection, CSRF protection, parameterised database queries, sign-in/password-reset rate limiting, one-time verification/reset tokens and encrypted storage of configured AI API keys. No internet service can guarantee absolute security.
Your choices
You can change optional communication preferences from your profile. You may request correction or deletion of account information subject to legitimate retention requirements. Use the published support contact for privacy requests.
Third-party services
Hosting, email, AI and payment services may process limited data required to provide their functions. Their own terms and privacy policies also apply. The platform aims to minimise personal information sent to such services.
Changes
This policy may be updated as the service, reviewer programme, subscription features or applicable requirements change.