Privacy policy
Last updated: August 11, 2026
AceUrExam (“we”, “us”, “the service”) is a study platform at aceurexam.com that helps students prepare for Cambridge (CAIE), Pearson Edexcel, and AQA exams with topical past-paper packs, AI mock papers, and study tools. This policy explains what data we collect, why, and what control you have over it.
Questions about this policy can be sent to mhamzashoaibkhan@gmail.com or through the feedback page.
Account data. When you sign in with Google, we receive your name, email address, and profile photo from your Google account. Authentication is handled by Google Firebase Authentication; we never see or store your Google password.
Study data. Content you create while using the service is saved to your account so it syncs across devices: saved topical packs, flashcard decks, study planner entries, notes, XP and learning progress, and your subscription status.
Uploaded files. Some tools let you upload a PDF or a photo of a question — the visual explainer and paper walkthroughs, for example. Those files are processed in your browser or held only for the length of the request, and are not kept afterwards.
Feedback and ratings. If you submit feedback or rate a generated pack, we store the text you write and the rating, together with your account email if you are signed in.
Usage and access data. So we can run and support the service, we record when you were last active, and the approximate location (country and city) and device type your browser reports when it connects. The location is derived from your network connection at city level — it is never an exact position, and we do not store your IP address.
Payment data. Payments are processed by Ziina, a third-party payment provider. Your card details go directly to Ziina and never touch our servers — we only record whether your subscription is active and when it expires.
We use the data above only to run the service:
We do not sell your data, show you third-party advertising, or use your data for marketing profiles.
The mock paper builder, topical pack generator, notes generator, and study assistant are powered by OpenAI’s API. When you use these features, the relevant content — the topics you request, or the question you ask — is sent to OpenAI for processing and handled under OpenAI’s API data usage policies. We do not send your name, email, or account details with these requests.
Account and study data are stored in Google Firebase (Firestore and Cloud Storage), and the site is hosted on Vercel. Both providers store data on secured infrastructure that may be located outside your country. Access to stored data is restricted to what the service needs to function. Usage analytics are held separately, in the United States — see section 6 for what that covers and the safeguards that apply.
To find the parts of the app that confuse or frustrate students, we record how the app is used — which features are opened, when a pack is built, whether it succeeded, failed, or came back empty, and how long it took. This is processed by PostHog, on servers in the United States. These requests are sent to aceurexam.com first and passed on to PostHog from there, so your browser only ever talks to us directly.
If you are in the UK, the EU, or Switzerland, that means this data is transferred outside your country. PostHog is certified under the EU-U.S. Data Privacy Framework (including the UK Extension and the Swiss-U.S. Framework), and the transfer is also covered by the Standard Contractual Clauses approved by the European Commission and the UK Government, under a data processing agreement we hold with them.
We do not send your name or email address to our analytics provider. Your activity is linked only to the anonymous account identifier your sign-in already uses.
We also record how the page was used during your visit — clicks, scrolling, and mouse movement — so we can see where people get stuck. These recordings are masked before they leave your browser: every piece of text on the page, and everything you type into any box, is replaced with blocks before anything is sent. We can see that you clicked a button or gave up on a form; we cannot read the topic you searched for, the notes you wrote, or anything else you typed. Nothing you enter into an input is ever recorded.
Recording is switched off entirely on the admin pages, and analytics is disabled during local development and on test builds of the site.
Opting out. We honour your browser’s “Do Not Track” setting. You can also ask us to exclude your account entirely by emailing mhamzashoaibkhan@gmail.com, and we will delete any recordings already held for you.
We use browser storage (cookies and localStorage) to keep you signed in and to cache your study data on your device so the app loads quickly. Our analytics provider (see section 6) also sets a cookie so that repeat visits from the same browser can be recognised as the same person. We do not use advertising cookies, and we do not sell or share this data with advertisers.
You can:
The service is intended for students preparing for AS & A-Level and equivalent exams. If you are under the age of digital consent in your country, please use the service with the involvement of a parent or guardian.
If we change this policy in a way that matters, we will update the date at the top of this page. Continued use of the service after a change means you accept the updated policy.