Privacy Policy

We collect information in three ways: information you provide directly, academic data generated during study, and technical usage telemetry.

A. Information You Provide Directly

• Student Accounts: Full name, username, email address, password (stored using one-way cryptographic hashing), date of birth, gender, father's name (for verification), school name, class/grade level (Class IX–XII), and chosen study stream (e.g., Pre-Medical, Pre-Engineering, Computer Science, General Science).
• Teacher Accounts: Full name, institutional or work email, school affiliation, subjects taught, classes managed, and examination board focus.
• School Accounts: Institution name, city, official contact person, phone number, address, and estimated student count.

B. Academic & Assessment Records

• Past paper attempts across Paper I (multiple-choice questions) and Paper II (constructed-response and extended-response questions).
• Practice quiz responses, completion timestamps, scores, confidence metrics, and chapter-wise mastery progress.
• Classroom assignment submissions, live challenge participations, milestone achievements, and leaderboard rankings.

C. AI Tutor & Upload Data

• Prompts, academic questions, and conversation messages exchanged with our AI tutor, Nova.
• Uploaded images or scanned handwritten answers submitted for AI optical character recognition (OCR) and rubrics-based grading.

D. Technical & Device Information

• IP address, browser type, device specifications, operating system, and anonymous diagnostic logs to maintain platform availability, prevent fraud, and optimize performance.

We use your information exclusively for legitimate educational and operational purposes, including:

• Delivering Learning Services: Administering interactive past papers, evaluating answers against official board marking schemes, and diagnosing concept weaknesses.
• Personalized Feedback: Providing step-by-step solutions, revision roadmaps, and custom practice papers generated around syllabus areas requiring focus.
• Classroom & Teacher Insights: Enabling authorized teachers and school administrators to view classroom rosters, track student performance, and assign targeted practice.
• Competitive & Motivation Features: Displaying student usernames and points on city-wide and national leaderboards, badges, and milestone trackers.
• Security & Abuse Prevention: Verifying account authenticity, preventing multi-account gaming or spam, and safeguarding student sessions.

Because many of our student learners are minors (under 18 years of age), we collect only the personal information strictly necessary to provide our educational services. Where students register through their schools, the institution acts as an authorized educational partner facilitating account creation. Parents or legal guardians may review or request deletion of their child's personal records at any time by contacting our support team.

Our AI tutor, Nova, and automated assessment grading engines use enterprise-grade, confidential AI processing pipelines.

• No Public Model Training: Your private questions, uploaded handwritten exam sheets, and study queries are not used to train public commercial AI models without explicit institutional or user consent.
• Strict Context Boundaries: Nova operates under strict educational system guardrails aligned with official AKUEB and Sindh Board syllabi and student safety guidelines.
• Human Oversight: AI-generated marks and feedback on Paper II submissions are intended as formative learning diagnostic aids. Teachers and students always have access to full original answer keys and rubric breakdowns.

We do not disclose your personal information to third parties except under the following controlled circumstances:

• With Your School or Teacher: If you join a school-managed classroom or register with an institutional code, your verified teachers and school administrators can view your assignments, mock test attempts, scores, and attendance.
• Public Leaderboards: Only your public screen username, school affiliation, and earned points appear on the public leaderboard. Your email address, phone number, and private account details are never made public.
• Trusted Infrastructure Providers: We work with vetted cloud hosting, database management, and email delivery partners (e.g., secure data centers, transactional mail services) bound by strict confidentiality and data protection agreements.
• Legal & Safety Requirements: We may disclose information if required to comply with a valid legal court order, subpoena, or governmental regulation, or to prevent immediate physical harm or severe platform tampering.

We implement robust technical and organizational security measures to protect your data:

• In-Transit Encryption: All communications between your device and our servers are encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
• At-Rest Protection: Databases and sensitive credentials are encrypted at rest with industry-standard cryptographic primitives. Passwords are never stored in plaintext.
• Access Controls: Access to production databases and student records is restricted strictly to authorized engineering personnel subject to multi-factor authentication and audit logging.

We retain your personal data for as long as your account remains active or as needed to provide you with continuous academic revision records.

You have the following rights at any time:

• Access & Export: Request a summary or copy of your profile and assessment history.
• Rectification: Correct or update inaccurate personal details directly in your account settings or by contacting support.
• Account Deletion: Request permanent deletion of your account and associated personal data. Upon receiving a verified request, we will expunge your records from our active systems within 30 business days, retaining only what is legally required for compliance or fraud prevention.

ExBoard AI uses essential cookies and local storage tokens strictly necessary to maintain your authenticated login session, keep your light/dark theme preference, and preserve offline quiz attempt state. We do not use third-party behavioral advertising cookies to track you across external websites.

We may periodically update this Privacy Policy to reflect enhancements in our educational features, AI capabilities, or applicable regulations. When material modifications occur, we will update the “Last Updated” date at the top of this document and notify active users via in-app banner or email. Your continued use of ExBoard AI following notification signifies acceptance of the revised policy.

If you have questions, feedback, or concerns regarding your privacy, minor safety, or data handling practices, please contact our team: