ExamATPBack to ExamATP

Privacy notice

Effective 27 October 2026.

What ExamATP collects, how we use it to provide educational assistance, who receives it, and how to exercise your privacy rights.

1. Who is responsible

ReplorAI (Pty) Ltd, trading as ExamATP, is the responsible party. Our physical address is 297 Mountbatten Drive, Reservoir Hills, Durban, KwaZulu-Natal, 4090, South Africa. Our Information Officer is Ashik Sewpersad. Contact support@examatp.com or +27 76 589 5533. See also Contact and our PAIA manual.

2. Information, sources and purposes

  • Sign-in and account: Google or Microsoft shares your email, name and provider identifier. We do not save or display your provider profile picture. We also keep linked-account authentication information, which can include provider tokens, and session records such as IP address and browser information. These allow us to authenticate you and secure access. We do not ask for your Google or Microsoft password.
  • Age and agreements: you or the adult completing the process declares whether the learner is 18 or older or aged 13 to 17. The US eligibility rule requires 18 or older; elsewhere accounts for children under 13 are not permitted. Where the teen path is available, we collect the guardian's name, email and declaration. We keep agreement and consent records, related purchase references, guardian notices and withdrawal or closure requests. These are declarations, not verified age or identity. We do not collect a date of birth or identity document in the ordinary signup flow.
  • Connection country and eligibility: our hosting provider may supply an approximate country from your IP address. We use this with your age declaration to apply the age rules. We record the country, when available, and whether an adult declaration is required with your agreement. If the country is unavailable, we require an adult declaration without treating the location as US. A detected US connection can also mark your account as subject to the US restriction; changing connections does not automatically remove that record. This is not verified residence or age. We do not ask for your home country or state, request device GPS access or request additional Google or Microsoft permissions for this check. Contact us about an incorrect restriction.
  • Study content: you provide questions, chat messages, papers, images and feedback. We store these with generated answers, lessons, diagrams and extracted document text. We process relevant content with AI services to produce the work you request.
  • Payments and allowances: we send checkout details to Yoco and receive payment and refund confirmations. We also review dispute information from the payment provider when needed. We keep references, products, amounts, status, access dates, balances and usage or cost records. We do not receive full payment-card numbers or card security codes. Yoco processes payment details under its own privacy notice.
  • Invitations and support: if you use an invitation, we associate the code with the relevant accounts and qualifying reward. If you contact us, we use the information you send to investigate and respond. Avoid sending unnecessary private information in support requests.
  • Technical and security data: hosting, authentication and security systems process request times, IP addresses, browser or device details, error information and service identifiers. Visiting the app can create a guest identifier and session before you sign in. Legal pages and the sign-in page can be read without an account.

An email and provider identity, the required age and consent declarations and a valid account agreement are necessary for interactive study use. Guardian details and consent are required where an account is available to a learner aged 13 to 17. Payment information is required when buying; a study question is required to get an answer. Uploading a paper and using an invitation are optional. Without an upload we cannot help with its contents, but you can ask a text-based educational question.

Remove unnecessary names, student numbers, signatures and other people's information from study files. ExamATP does not need identity documents, private medical information or payment credentials in a chat.

3. Reasons permitted by POPIA

We process necessary account, study and payment information to provide and administer the service you request. We use proportionate security, error and fraud information for our legitimate interest in protecting the service and its users, and retain records where law requires this. For children's ordinary account and study processing we rely on prior consent from a competent person, normally the parent or legal guardian. Consent can be withdrawn; mandatory legal recordkeeping may continue.

We advertise ExamATP on services such as Facebook and TikTok. We do not sell personal information or use your study conversations and uploaded work to target advertising. Those platforms handle information about your activity on their services under their own privacy policies. Our website analytics and browser storage are described below.

AI generates educational content; it does not award official grades or decide admission to an institution. Automated controls can restrict access when an allowance, payment or security check fails. You can ask us to review an apparent error.

4. Who receives information

  • Google or Microsoft handles your chosen login and its own authentication records. Its privacy terms also apply to your account with it.
  • Cloud hosting, database, storage and security providers include Vercel for hosting and Supabase for database and file storage. They process account, study, billing and technical data.
  • Vercel AI Gateway and its AI providers receive relevant messages, conversation context, document text or images needed for a task, including services from OpenAI or Microsoft Azure. We do not use your study content to train our own models. AI providers may retain information for their own security and abuse monitoring.
  • Yoco and its payment partners process payments, fraud checks, refunds and disputes. They may have independent legal duties to retain transaction information.
  • Transactional email providers, including Resend, deliver guardian account notices and other service messages. A guardian notice contains the learner's name and account email, the guardian's contact details, and a private account-management link. Keep the link private. It does not give access to the learner's conversations.
  • PDFShift receives temporary access to the lesson when it converts a requested PDF download. The app may keep a copy of the generated PDF with your saved learning material.
  • Authorised support personnel and professional advisers may access relevant records when necessary to investigate a problem, administer the business or meet a legal obligation. We may disclose information to an authority where required or lawfully justified.

Your own conversations are private to your account; the app does not offer public chat sharing. A separate example conversation selected by us is readable by visitors. We do not make your work an example merely because you upload it.

5. Where information is processed

We operate and handle support from South Africa. Our application server is configured to run in the European Union. AI and other provider processing may occur in the United States and other countries. This can include your study content, account information and support records. If you use ExamATP from Australia or another country, your information is processed outside your country; we do not promise local data residency.

International transfers must meet applicable legal requirements, including POPIA's requirements for protection under applicable law or binding agreements, or another permitted basis. Children's information may require additional authorisation. Contact our Information Officer for the recipients and safeguards relevant to your information.

6. Retention and deletion

  • Uploads: papers and images are scheduled for removal 30 days after upload or their last use in a study request. Unfinished uploads are scheduled for removal after one day. Copies included in chats or lessons follow the retention rules for that material.
  • Chats and lessons: ordinarily kept for your continuing use until you delete them or your account. Download work you want to keep. Deleting a chat and deleting an independently saved lesson are separate actions.
  • Account closure: Settings, under Account, starts deletion of your profile, sign-in methods, chats, saved learning material and uploaded files. A limited closure record is scheduled for deletion after 12 months: your email address, when the account was opened and closed, what it paid and its last plan - to deal with payments, refunds or disputes that come after closure, and to see who leaves ExamATP. Only the owner can see it, and it is never used for marketing. File removal can take additional time, and backups or provider records may remain for their separate retention periods.
  • Information extracted from files: document text and descriptions may remain while needed by retained study material or another uploaded copy of the same paper. You can request correction or deletion of personal information in this material.
  • Financial and agreement records: payment references, amounts, allowances, usage and consent records, including the connection country and age eligibility decision, may remain after closure for accounting, disputes and evidence of transactions and permissions. Guardian name and email are removed when the account is deleted. Retained payment references may still identify a transaction through the payment provider.
  • Legal retention periods: applicable tax records are generally required for five years from filing the relevant return, or the applicable tax-period end where no return is required. Company records may have longer requirements, and a dispute, audit or other legal hold may require further retention.
  • Security logs, backups and provider copies: these have separate operational retention. The applicable period depends on the service and record. Ask the Information Officer for the period applying to a particular record or deletion request.

7. Age limits and guardian permission

People who live in or access ExamATP from the United States or its territories must be 18 or older to create an account, use interactive study features or buy a plan. Guardian permission cannot override this rule. Elsewhere, accounts and interactive study features are for people aged 13 or older. For an eligible learner aged 13 to 17, a parent or legal guardian with authority to consent must complete the declarations personally before account sign-in and use. We record the declaration with the account.

If the connection country is unavailable, an adult declaration is required until the location issue is resolved. Approximate location can be wrong, including when travelling or using a VPN; it does not replace the eligibility rules or your responsibility to give accurate age information. Contact us about an incorrect restriction.

We also send a guardian account notice with a private link to request closure. Permission must be given before use; an unanswered notice does not give permission. The Parents and guardians notice explains the processing and how to withdraw permission. Contact us if a learner does not meet the applicable age requirement or used the service without valid permission.

8. Cookies and browser storage

The free first-answer offer uses a signed browser cookie, lasting up to 400 days, to limit repeat claims on the same browser. We keep keyed hashes of the verified email and browser identifier with the claim for the account’s lifetime and for 12 months after closure. A keyed network-address hash helps limit bursts of claims and is removed after 30 days. These records support abuse prevention, not advertising. Signing out or deleting a chat does not reset the offer. Browsers do not give us a guaranteed physical-device identity.

We use cookies and browser storage for sign-in, security and consent declarations, and to remember your study and display settings. An invitation link may set a referral cookie. We do not use advertising cookies. Blocking necessary cookies can prevent sign-in or payment-return features from working.

We use Vercel Web Analytics to count visits and page views and understand broad trends in referring websites, approximate country, device and browser. It does not use analytics cookies. We remove page query strings and replace private page identifiers before sending page views, and exclude pages containing private access or payment references. We do not send chat content, uploaded work, account email addresses or payment details as analytics events. Visitor counts are estimates, rather than a list of named people.

The owner also uses a private internal dashboard to review account activity, payments, usage, service costs and errors using the operational records described in this notice. This helps us run and support ExamATP; it is separate from advertising tracking.

Our website does not use advertising pixels or enable advertising networks to track you across websites. Browser Do Not Track signals do not change the sign-in, security and aggregate analytics functions described above. External advertising, sign-in and payment services have their own privacy notices and controls for activity on their services.

9. Security and incidents

We use access checks, private file storage and time-limited file access links to limit access to study material. Online service connections use encryption. Access links should be treated as private. No service can guarantee that unauthorised access will never occur. We will notify affected people and relevant authorities of a security compromise where applicable law requires it, within the required timeframes. Under POPIA, this includes notifying the Information Regulator and affected people as soon as reasonably possible, subject to lawful restrictions or delays.

10. Your rights and complaints

You may ask us, free of charge, to confirm whether we hold your personal information. You may request access, ask for correction or deletion where appropriate, object to processing on applicable grounds, or withdraw consent. We must stop processing that depends on withdrawn consent; withdrawal does not undo lawful processing already completed. If the information is necessary to provide your account, we may need to restrict or close it. We may retain only records with a continuing lawful basis, such as required legal records. Any permitted access or reproduction fee will be explained before it is charged.

Contact support@examatp.com. We may ask for proportionate evidence of identity or authority before releasing or changing information. We will explain any lawful reason for refusing a request. See our PAIA manual for formal access requests. You may complain directly to the Information Regulator without first obtaining our permission:

You may also have rights under the privacy laws applicable to you and may contact a competent privacy authority. If Australia's Privacy Act applies to our handling of your information, you may complain to the Office of the Australian Information Commissioner. Contact us to request access or correction or to raise a privacy complaint; we will respond within any applicable legal timeframe. Our South African location does not remove rights that apply to you elsewhere.

11. Changes to this notice

We notify readers of updates by publishing them on this page with a new effective date and a description of material changes. Earlier editions remain in our legal archive. If a change requires renewed account agreement, we present the updated agreement in the app before further study use. Where a new purpose needs your consent, we will ask before processing starts. You may save or print this notice.

This edition introduces the US adult-only eligibility rule and an approximate connection-country check, with adult access required when the country is unavailable. Existing account holders must confirm their age and accept the updated terms before further study or purchases. It does not introduce advertising tracking or new uses of study content. The previous edition remains available, and earlier purchase records keep their original edition.