Privacy for parents

The short version of our Privacy page, for parents and guardians. ExamUp is free, shows no ads and sells nothing, and many of the people who use it are children, so we keep as little as we can.

What do you keep about my child?

• Their account: name, state or territory, year level, the profile symbol they pick (one of our drawings, never a photo), and an email address only if they sign in on their own (their own, or one you give them on your family account).
• Their exams: which exams they sat, their answers and marks, how far through an exam they are, and when they last used the site.
• Small things they do: exams saved for later, exams they ask us to add, how many simpler explanations they asked for today, and any problem they report on a question, with the note they wrote.
• Quick practice (the year, subject and topic, and which answers were right) and, if they make one, their study plan (the exam they are working towards and its date). Quick practice done without an account keeps nothing about who did it.
• Their password only in scrambled form, which nobody can read, us included. If they continue with Google, only their name, email address and Google’s ID number for the account.
• A student in Years 3 to 9 can only make their own account when a parent or guardian agrees at sign-up.

Who can see my child’s results?

Your child, and you if they are on your family account: you can see their results, follow an exam live while they sit it, and open their account from yours. Your child is told on the exam page when a parent can follow along, and a child with their own account can leave the family at any time. Anyone your child gives a progress link to can see what that link shows. We do not share results with schools or anyone else.

Do you use cookies, or show my child ads?

• One cookie keeps someone signed in. It lasts 30 days and holds only a random code.
• We show no ads on ExamUp. We do advertise ExamUp itself on Google, and Google’s measurement cookies are set only if someone taps “Allow” in our cookie notice. Until then, and after “No”, no Google cookies are set.
• That measurement is never used to show you or your child ads, or to personalise ads: ad personalisation is always switched off. Google receives the page visited, the click ID of the ad, and whether an account was made, never names, email addresses, answers or results.
• You can change the choice at any time with the button on our Privacy page.

Where is it stored, and who else sees it?

• On a computer we run in Victoria, Australia, reached over an encrypted connection, with a nightly backup (the newest seven copies are kept).
• These services outside Australia handle some of it: Cloudflare carries the site’s traffic (data centres around the world, including Australia); Google handles Continue with Google and our fonts, and, only if you allow it, measures our ads (United States); Mailjet delivers our emails (European Union); Anthropic and OpenAI (United States) write simpler explanations.
• The AI providers receive only a question, its answer and the exam’s own explanation: never your child’s name, answers or details.
• We give information to nobody else, unless the law requires it, and we never sell it.

Do you use AI with my child’s information?

No. Our practice questions are written and checked with the help of AI, without any student information. When a student asks for a simpler explanation, only the question, its answer and the exam’s own explanation go to the AI. We do not use your child’s answers or details to train AI.

How do I see or delete my child’s information?

• You can see your child’s results in My family, and open their account from there to see and change their details in My progress.
• You can delete a profile you made for your child from My family: it goes with its exams and results. Deleting your own account in My progress deletes every profile you made too; a child who has their own account keeps it and is simply unlinked.
• To ask what we keep about your child, to correct it or to delete it, email [email protected]. We check it is really you first.

How long do you keep it?

• An account and everything in it: until it is deleted, or until it has not been used for 24 months. About 30 days before then we email the account’s address once, and signing in keeps it. A profile you made counts as used whenever your account is, and is deleted with it.
• Guest accounts (no name or email): 30 days without use. Quick practice done without an account: 30 days.
• Problem reports: 12 months after we mark them as dealt with, or 12 months after they were sent if they never were.
• The record of each email we send: 30 days. Nightly backups: about a week. Google’s measurement cookies, only if allowed: up to 90 days.

Who do I contact?

Email [email protected]: it goes to the person who runs ExamUp, an individual in Victoria, Australia. We acknowledge a complaint within a few days and answer within 30 days. If you are not happy with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.