Privacy Policy | LumiExams

LumiExams ("we", "us") runs lumiexams.com, a free study resource for exam preparation. This policy explains what information we collect, why, and the choices you have. We try to collect only what we need to run the site and to send the updates you opt in to.

What we collect

Email address - only if you choose to subscribe (for example, "Get early access" or "Stay updated"). We also record where the sign-up happened (which page) and the approximate location (country, region, city and time zone) that our hosting provider derives from your connection, so we can understand interest. We also check that the address's domain can receive email.
Free account - only if you create one. We store your email address, when you created the account and last used it, that you confirmed your age (and the wording you agreed to), and your first answer to each question you check on our ESAT practice page while signed in (which question, whether you got it right, and when). Sign-in codes are stored only in scrambled form and stop working after 10 minutes.
Usage analytics - we use Google Analytics to see which pages are used and how the site performs, but only if you accept analytics cookies in the cookie banner; you can change your choice at any time with "Cookie settings" at the bottom of every page that uses it. If you accept, Google Analytics counts visits and sets a cookie, which can last more than a year, so it can tell returning visitors apart. We do not use it to identify you personally. Cloudflare, which hosts the site, also counts page views with Cloudflare Web Analytics.
Exam Hub - the papers you open in Exam Hub are saved only in your browser. When you open a question paper, its pages (up to 20) are sent as images through our server to Google's Gemini AI service so an experimental feature can read the questions; we do not keep the images, but Google may keep and use them under its own terms. An experimental AI explanation option, switched off by default, sends a question with part of the mark-scheme and examiner-report text the same way, and we keep the AI's answers to reuse. When the AI is used, we keep a scrambled form of your IP address with a count of uses for 2 days, to limit use.
Server logs - our host (Cloudflare) processes standard request data (such as IP address) to deliver and protect the site.

We do not ask for, or store, payment details, passwords, or sensitive personal data.

How we use it

To send you the updates you asked for (for example, a launch notice and any early-access discount).
If you have an account: to sign you in, and to show you which practice topics you lose marks on.
To understand which content is useful and improve the site.
To keep the site secure and working.

We do not sell, rent, or trade your email address or personal information. We show no ads, and we do not use your answers to build profiles for advertising or marketing; the topic summary on your account page is there only to help you revise.

Where it is stored

Subscriber emails are stored using Cloudflare's storage in our hosting account. Our newsletters are sent through Resend, an email service based in the United States, which keeps a copy of our mailing list and tells us which links each reader clicks. Accounts and saved answers are stored in Cloudflare's database in our hosting account, in the Asia-Pacific region. Sign-in codes are also emailed through Resend, which holds the messages it sends. Analytics data is held by the respective providers (Google, Cloudflare) under their own privacy terms.

Free accounts

Accounts are for students aged 13 or over. If you are under 16, you need a parent or guardian's agreement to create one.
You can download everything we hold about your account, or delete it, at any time from your account page. Deleting removes it at once; copies in our backups are gone within 30 days. The email service may keep its own copy of sign-in emails it has sent, under its own terms.
Accounts not used for 12 months are deleted automatically, with everything saved in them.
To stop abuse of the sign-in form, we keep a scrambled form of your IP address and email address with a count of recent sign-in attempts, normally for up to 2 days.
An account does not sign you up for emails. Our email list is kept separately: unsubscribing does not delete an account, and deleting an account does not remove you from the email list (email us for both).
On a shared or school computer, sign out when you finish.

Cookies

Google Analytics sets cookies only if you accept them in the cookie banner. You can block or delete cookies in your browser settings; the site will still work, but signing in needs cookies. If you sign in, two cookies keep you signed in: one holds a random sign-in token that page scripts cannot read, and the other only says that this browser is signed in. Both last up to 30 days and are removed when you sign out or delete your account. Our pages also keep your progress and settings, such as flashcard ratings, recently viewed pages and your cookie choice, in your browser's storage; that stays on your device.

The questions you answer in our practice tools are checked in your browser and not sent to us, with two exceptions: a test set by a teacher sends your name and answers to us so your teacher can see the results (kept until your teacher or you ask us to delete them), and if you are signed in, your answers on the ESAT practice page are saved to your account. Our account and teacher-test pages do not use Google Analytics, even if you accept it. Our flashcards, revision notes, Exam Hub and some quiz pages also send anonymous counts, such as how often cards in a topic are rated, the sign-up box is shown or Exam Hub is used; they contain nothing that identifies you.

Your choices and rights

Unsubscribe at any time - every newsletter includes an unsubscribe link, or just email us.
Access or delete the data we hold about you - from your account page if you have one, or email us and we will action it.
If you are in the UK/EU, you have rights under the UK GDPR / GDPR, including access, correction, and erasure.

Children

This site is intended for students preparing for exams. We do not knowingly collect more information than described above. If you are under the age required for consent in your country, please subscribe only with a parent or guardian's permission.

Changes

We may update this policy; we will revise the "last updated" date above when we do.

Contact

Questions about this policy, or want your data removed? Email feedback@lumiexams.com. For copyright matters, see copyright@lumiexams.com.