How ExamPass uses data.
Last updated: 31 August 2026
Who is responsible
Kalco is responsible for the personal data described here. Contact details are provided on the support page.
Data we collect
We may collect account details such as name, email address and syllabus preference; revision activity such as answers, marks and progress; written responses submitted for feedback; support messages; subscription status; and limited technical information needed for security and operation.
Why we use it
We use this data to provide accounts, save progress, mark answers, personalise revision, operate subscriptions, prevent misuse, respond to support requests, and improve the reliability of the service.
AI-assisted feedback
Written answers may be sent to an AI service provider solely to generate the requested marking and feedback. Do not include names, contact details, or other unnecessary personal information in an answer.
Service providers
ExamPass uses specialist providers for hosting, authentication and data storage, payment processing, and AI-assisted feedback. Payment-card details are entered with the payment provider and are not stored in the ExamPass application.
Browser storage and cookies
The site uses essential browser storage and authentication cookies to keep you signed in, retain draft work, and preserve a fallback copy of revision progress. Any optional analytics or advertising technology must be disclosed and consented to separately before it is enabled.
Retention and security
We retain account and learning data while the account is active and as reasonably needed for support, security, legal, and accounting purposes. Access is restricted and reasonable technical safeguards are used, but no online service can promise absolute security.
Your choices and rights
You may ask for access, correction, deletion, or export of your personal data, subject to applicable law and necessary identity checks. You can also cancel a subscription without deleting the learning account.
Children and school use
Where a parent, guardian, or school is legally required to authorise a student’s use, they should review this policy and the school’s own privacy responsibilities before creating or assigning accounts.
Contact and changes
Send privacy requests through the support page. We will update the date above when this policy materially changes.