1. Scope and role
EXERON is an AI-powered learning, practice, assessment and performance platform for educational institutions. This Policy applies to the EXERON website, platform and related support communications.
Schools and other educational institutions administer the student, staff and academic information they submit to EXERON. EXERON processes that information to provide and operate the platform for the institution.
2. Information schools and users provide
We process information provided when an institution registers, configures its account, creates or manages users, creates learning or assessment content, uses practice or AI-assisted features, contacts support, or otherwise uses EXERON.
- School and account information, such as school name, School ID, administrator name, email address, mobile number, board type and account settings.
- Administrator, teacher and student profile information, where provided, such as name, email address, phone number, username, class, section, roll or admission number, date of birth, gender, and optional guardian contact information.
- Learning, practice, assessment and performance information, such as courses, learning content, course progress, practice sessions and answers, questions, exams, instructions, responses, timing, results, analytics, XP, rewards and leaderboard information.
- AI-feature information, where an AI-assisted feature is used, such as question-generation inputs and outputs, image context, Tutor conversation messages, relevant educational context and usage metadata.
- Communications and support information, including information sent in emails or support requests.
3. Authentication and operational information
We process information needed to authenticate users, secure accounts and operate EXERON. This may include login history, IP address, user-agent and device information, screen resolution, token or session records, and password hashes. Passwords are stored as hashes rather than in readable form.
4. Examination monitoring signals
For examinations using monitoring features, EXERON records operational signals associated with the examination session. These may include IP address, user agent, screen resolution, tab or focus changes, fullscreen exits, copy or paste attempts, and developer-tools signals.
EXERON does not capture webcam, microphone, audio, video or geolocation data through the current implementation. Monitoring signals are indicators for the School to review; they are not conclusive determinations of misconduct.
5. Payments and subscriptions
We process subscription, plan, billing-cycle, payment-order, invoice and payment-provider reference information to administer subscriptions and verify payments. Payment card and bank credentials are handled by the payment provider and are not stored by EXERON.
6. AI-assisted features
EXERON uses third-party artificial intelligence services for AI-assisted functionality, including question generation, learning explanations and EXERON Tutor. Depending on the feature used, inputs sent to an AI provider may include prompts, question or image context, Tutor conversation messages, and limited learning, course, practice or released-performance context needed for the request.
AI output may be incomplete, inaccurate or unsuitable for a particular educational use. Schools and users remain responsible for reviewing AI-generated content before relying on, publishing or using it in learning or assessment activities.
This Policy does not make a provider-specific claim about model training, international transfers or retention by an AI provider. Those matters require verification against the applicable provider arrangement and terms.
7. How we use information
We use information to provide, maintain and improve EXERON; authenticate users; manage institution, staff and student accounts; deliver courses and learning content; support practice; conduct assessments; save responses; generate results, progress views and analytics; operate monitoring, XP, rewards and leaderboards; provide AI-assisted features; administer subscriptions and payments; provide support and service communications; protect the platform; and investigate misuse or technical issues.
8. School-controlled student data
Educational institutions are responsible for the student information and educational content they submit to EXERON. Each institution must ensure it has the appropriate authority, notices, permissions and lawful basis required to provide student information and direct EXERON to process it for the institution’s use of the platform.
Where a request concerns student information, EXERON may direct the request to the relevant institution or work with the institution to address it, as appropriate.
9. Service Providers
We use third-party service providers to support the operation and delivery of EXERON, including providers for payment processing, email and communication services, cloud infrastructure, application functionality, and artificial intelligence services.
A provider may process the information needed to perform its service. Provider-specific processing, retention, international transfer and AI-model-training terms depend on the applicable provider arrangement and require legal or provider verification.
10. Cookies and browser storage
EXERON uses essential authentication and session cookies to support sign-in, session continuity and platform security. These authentication cookies are configured as HTTP-only.
EXERON also uses browser localStorage and sessionStorage for application and session state. We do not describe performance or advertising cookies because no analytics or advertising tracking implementation was identified in the current platform.
11. Security
We use measures designed to protect information, including role-based access controls, tenant scoping, password hashing, HTTP-only authentication cookies, rate limiting and security headers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Retention
We retain information for as long as reasonably necessary to provide the service, maintain records, resolve disputes, meet applicable obligations, protect the platform, or otherwise fulfil legitimate operational purposes, subject to applicable law and actual deletion practices. We do not state fixed retention periods where none have been established.
13. Access, correction and deletion requests
Schools and authorised administrators may contact EXERON at contact@exeron.app regarding appropriate access, correction or deletion requests. Requests are considered in light of the institution’s administration of student data, applicable requirements, platform records and operational needs. This Policy does not promise a particular deletion outcome or timeframe.
14. Student and minor information
EXERON is intended for use by educational institutions and may process student information. Institutions are responsible for ensuring any required authorization, notice or consent is obtained before student information is submitted to or used through EXERON. This Policy does not represent a certification of compliance with any specific privacy or education law.
15. Changes to this Policy
We may update this Privacy Policy from time to time. The current version will be posted on this page with an updated effective date.
16. Contact
For privacy questions or requests, contact EXERON at contact@exeron.app.