What is collected, and why
Your name and email address
To have an account and to send you exam and password emails.
Your roll number, if your institution sets one
So a proctor checking your ID card can compare it with something you did not type in on the spot.
A photograph of your face and of your ID card
Only on exams where your institution turns identity checks on. A proctor looks at them to confirm you are the person enrolled.
Flags from your own camera — names and times only
Only on exams where monitoring is turned on. Things like ‘no face visible’ or ‘a second face’ or ‘looking away’, with the moment they happened.
A still picture behind a serious flag — at most ten
Kept only when a phone, a second person, or a covered camera is detected, because those three are the only things that can warn or block you automatically. One frame from your webcam at that moment, so a person can check whether the machine was right. Never continuous, never a recording, and only the first ten in a sitting. A proctor or examiner reviewing your sitting can download this picture to their own device — the same people who could already see it in your monitoring record.
Flags from your own microphone — names and times only
Only on exams where your institution turns the microphone on, and you are asked for it separately from the camera. All that is ever recorded is that a voice was heard and when. Nothing you say is written down, listened to, or sent anywhere — no recording is made, so there is nothing to send.
Whether you are still at your screen
Your browser checks in every few seconds so a proctor can tell somebody who has walked out from somebody who is working.
Your answers, your marks, and when you started and submitted
This is the exam itself.
Photographs of your handwritten answer sheets
Only on exams answered on paper. You or your institution photograph the pages so a teacher can mark them. They are your answers, so they are treated exactly like them.
When AI helps with marking
Only on exams where your institution turns it on. The photographs of your answer sheets, and the questions, are sent to an AI company — OpenAI or Anthropic — which suggests a mark and a reason for each question. A teacher checks and decides every mark; a suggestion is never a mark on its own.
Both companies state that they do not use what we send them to train their models, and that they delete it within 30 days. They are sent nothing else about you — not your email, not your account. Your name reaches them only if it is written on a page that is sent.
What is never collected
- Any video or continuous recording of you during the exam. The detection runs inside your browser, and the only images that leave it are the handful of stills described above — up to ten, each one tied to a specific flag that could otherwise have ended your exam with nothing to show for it.
- Any recording of your voice, and any record of what you said. On exams that use the microphone, your browser listens only for whether a voice is present. Speech is never written down, never stored and never sent — there is no recording made at any point, and nobody can listen back to your exam.
- Your microphone on any exam that did not ask for it. It is a separate permission from the camera, and declining it leaves the rest of the exam working normally.
- Anything about you from outside this system. Your face is never compared against any database, and there is no face recognition here of any kind — the two photographs are looked at by a human proctor and nothing else.
- Anything from your computer beyond the exam page — no files, no other tabs, no keystrokes outside the exam.
How long it is kept
Your two photographs
Deleted when your exam session ends, and again by an automatic sweep once the exam finishes for everyone. Both the image files and the record of them are removed.
Camera and microphone flags, answers, answer-sheet photographs, and results
Kept as part of the exam record, for as long as your institution keeps that exam.
The still pictures behind serious flags
30 days after each one was taken, then deleted automatically — both the file and the record of it. That runs on its own timer, unlike your identity photographs, which go at the end of your session; a picture stays reviewable for the full 30 days even if your exam finished on day one. It is this system’s own copy only: if a proctor downloaded a picture to look into something, that copy is on their device and outside this promise, the same as if they had photographed their screen.
Those pictures, if you were warned or blocked
One year instead of 30 days, and only for the sitting it happened in. If something was actually done to you during an exam, you are the person most likely to want it looked at again — and an appeal or a review can easily take longer than a month to reach anyone. Deleting the evidence at 30 days would remove exactly the pictures that let you argue the machine got it wrong. A year, not forever: long enough to outlast any appeal, and still a limit.
Your account
Kept until your institution removes it.
Who can see what
Your proctor
Your name, roll number, whether you are online, your camera and microphone flags, any still pictures kept behind a serious flag, and — while the exam is running — your two photographs.
Your examiner
Your answers, the photographs of your answer sheets and your marks, to grade written work.
Your institution’s administrator
Accounts, enrolments and results.
Nobody outside your institution sees any of it, apart from the AI company described above, and only when your institution turns AI marking on. Nothing is sold, shared or used for advertising, and none of it trains any model.
If a flag is wrong
It happens — a dark room, a laptop at an angle, somebody walking behind you, a television in the next room. Flags are shown to you during the exam, as they are raised, so nothing about them is a surprise afterwards. A flag is a note for a human being to look at, and a proctor decides what it means. If you think one was wrong, tell your institution: they hold the record and they make the decision.
Your rights
You can ask to see what is held about you, to have it corrected, or to have it deleted. This system is run by your institution, which decides those questions — so those requests go to them, not to us, and they are the people who can act on them.