Privacy
Examber should only use the data needed to run the diagnostic, browser-save, result, and remediation-access flows. Optional account sign-in can reconnect saved progress across browsers.
Last updated: 2026-09-20
Privacy promise
Your study history helps us recommend what to practise next. Optional analytics is a separate choice and is not required to receive those recommendations.
Your study data
Examber is for learners aged 15 and over. We use your answers to find topics to review. Focused practice uses the linked diagnostic and practice history to choose questions and avoid repeats. A study suggestion is not a judgement about your ability or a prediction that you will pass an exam.
Study features are currently limited to people in the UK. Before study starts, we ask you to confirm your age and current UK location and read the free beta terms. We remember age and terms declarations so you do not repeat them at each study step. Current UK location is checked separately. These declarations are separate from analytics consent. You can use privacy support from any country.
You can study with analytics off. Saving progress is your choice. We do not sell your study history or use it for advertising. If something looks wrong, or you want a copy of your data or want it deleted, email privacy@examber.com. You can ask for help yourself; you do not have to ask a parent to contact us for you.
Your choices
A new diagnostic is not a history reset: an unfinished attempt may resume, and restarting or taking a linked retest can use earlier questions to avoid repeats. We do not currently combine all your attempts into a profile across exams. Saved attempts expire after 12 calendar months; see the retention details below.
To ask us to stop using history for recommendations, explain a result, or delete your data, contact privacy@examber.com. You do not have to request deletion to raise an objection. There is currently no self-service history reset or complete personalisation-off mode. If you are unsure, ask us or a trusted adult before starting; you can contact us yourself.
At a glance
Details
Controller: Jack Tam. Privacy contact: privacy@examber.com.
Use this inbox for access, correction, deletion, export, or privacy questions. Respond without undue delay and within one calendar month unless a lawful extension is recorded.
Session ids, answer selections, scoring evidence, result artifacts, remediation attempts, and timestamps used to produce the readiness result and return the learner to the right state later.
If someone saves progress in this browser, the app stores a learner public id, internal browser-save identifier, membership state, and saved return paths. Browser-only save does not collect an email address and cannot recover progress on another browser by itself.
When account sign-in is offered and you choose it, Amazon Cognito authenticates your account. Examber stores the provider and account identifier, email address and its verification status, verified recovery email when supplied, and the time the account was linked. For up to 30 days, we keep encrypted account-provider credentials and sign-in session dates so you can stay signed in. We delete these sessions on sign-out or full backup recovery. After password recovery, Examber sends your entered password securely to Cognito to confirm fresh access; we do not save or log your password. Signing into the same linked account can reopen its saved progress on another browser.
Sign-in uses essential security cookies and does not enable optional analytics. The link timestamp records your account connection; it is separate from analytics consent.
We keep the current age declaration and terms acknowledgement versions and dates with a saved account, for as long as that account is retained. They are included in your data export and removed when the account is deleted. No birth date is collected. On an anonymous browser these declarations are held only in an essential browser-session cookie, with a maximum validity of 30 days if sessions are restored. Use sign-out to clear this browser’s declarations before another person uses it.
If you report a problem with a question, we save the problem type and your description with the exact question version and answer order from your study attempt. We use this information to investigate the report, track a fix and record its resolution. Please leave personal details out of your report. Reports and investigation history are included in your data export and removed when the related attempt is deleted, including through our retention process.
Community study access is free. We use your browser save or linked account to protect and reopen your progress. We do not create paid memberships or temporary premium grants for community access. Historical access records remain subject to the existing retention and deletion rules.
If saving an answer, opening practice or sending a question report fails, we may save a support reference, problem category and time linked to your study attempt. These records help us investigate technical problems. They do not contain passwords, provider credentials or the text of the underlying error, and do not require optional analytics. They are included in your data export and removed with the attempt. Scheduled retention removes records older than 30 days unless a preservation hold applies. Authorized support staff can check saved account, access and progress records after verifying your request; these lookups are audited.
With your existing analytics permission, successfully saved answers help us report daily study activity, completion and later return use. We count observed browsers, not every person, and do not join devices or make analytics a condition of free access.
If someone opts in, the app records pseudonymous funnel events using a visitor id cookie plus session ids where the product already has them. Consent is linked to an existing signed-in account to honour withdrawal across its devices and support export and deletion. Anonymous browsers remain separate. The app does not use third-party ad-tech or client SDKs.
The question analytics notice introduced on 13 September 2026 also covers the saved question version, selected options and correctness, to review answer patterns and improve content. These events require an explicit choice under that notice; older consent does not enable them. We do not backfill analytics from saved study answers. Administrators see aggregate samples, with diagnostic and practice activity kept separate.
Your answers and session information are needed to score a diagnostic and provide focused practice. Without them, we cannot provide a personalised result. Saving progress is optional; browser-only save does not require an email address. An email address is required if you choose an account with cross-browser access and password recovery. You can use the study features with analytics switched off.
We receive answers and choices from you, session information from your use of the app, and identity and verified email information from Amazon Cognito when you sign in.
We score your answers by syllabus domain, identify areas that need review, and use the diagnostic linked to a practice session to select focused questions. These automated recommendations help you choose what to study. They do not decide exam eligibility, admission, employment, or whether you will pass. You can ask us to explain or review a result.
For the free UK beta, our interest is to provide the study help you choose: marking answers, explaining mistakes, selecting focused practice and reopening progress you ask us to save. We use the information needed for those features and give children’s interests particular weight. We do not rely on every learner having capacity to enter a binding contract, or on consent to optional analytics, to provide this free service.
Security, service integrity, and abuse prevention use limited data so the product can remain reliable and trustworthy. We also use your connection’s IP address briefly on our server to check UK access against a local country database. We do not send it to a location API or add it to your study profile. We do not request GPS, a street address or precise location. The country estimate can be wrong; contact support for help.
Analytics cookies and analytics-event collection should run only after an explicit opt-in and only during admitted UK beta use. A saved analytics preference alone does not enable measurement outside that scope.
Provider: Amazon Cognito (AWS). Region: Europe (London), eu-west-2. Authenticate learners who choose to link an account to saved progress. Data handled: Account identifier, email and verification/recovery information, authentication data, and account-link timestamp. Passwords are handled by Cognito, not the app database.
Provider: Amazon Lightsail (AWS). Region: Europe (London), eu-west-2. Serve the Examber website and process study requests. Data handled: Session identifiers, request metadata, and app responses.
Provider: Self-managed PostgreSQL on Amazon Lightsail (AWS). Region: Europe (London), eu-west-2. Store study history, answers, results, access state, and account links. Data handled: Learner and session identifiers, answers and results, account email and provider references, current age/terms declaration versions and dates, optional analytics events, and admin audit records.
Provider: Amazon S3 and Lightsail disk snapshots (AWS). Region: Europe (London), eu-west-2. Recover the service after data loss or infrastructure failure. Data handled: Protected copies of the application database and data disk.
Provider: Amazon S3 and Systems Manager Parameter Store (AWS). Region: Europe (London), eu-west-2. Recover minimal private request records and necessary evidence after loss of the operator device. Data handled: Client-encrypted case records and registered attachments, private checkpoint metadata, and the separately access-controlled backup key.
Provider: Lightsail host logs, Amazon CloudWatch metrics, and Amazon SNS (AWS). Region: Europe (London), eu-west-2. Detect failures and deliver operational alerts. Data handled: Host/application logs, health metrics, backup and retention outcome counts, and the operator alert email address.
Provider: Zoho Mail. Region: Europe data centre confirmed in the signed-in Zoho account. Receive privacy, support, and data-rights correspondence. Data handled: Requester contact details and necessary correspondence.
Provider: Examber database on Amazon Lightsail (AWS). Region: Europe (London), eu-west-2. Measure visits and study journeys after optional analytics consent. Data handled: Visitor and session identifiers, event names, page keys, timestamps, and permitted metadata.
Application, database, backup, and account hosting is configured in AWS Europe (London). Provider support and service operations may involve other countries. Restricted transfers require an applicable adequacy arrangement or appropriate safeguards, such as standard contractual clauses with the UK Addendum where relevant. You can request details and a copy of the applicable safeguards through our privacy contact.
180 days
30 days for the optional cookie, without renewal on repeat visits. Stored visitor identifiers are cleared from events after 30 days.
30 days by default
12 calendar months after each completed attempt. Unfinished saved attempts expire 12 months after they start. New activity does not extend older attempts.
24 months after the last account activity or access expiry, whichever is later. This does not extend the 12-month study-history limit.
90 days from the event. Withdrawing analytics consent deletes the current visitor’s matching events sooner.
Login attempts: 30 days. Revoked administrator sessions: 1 day after token expiry.
12 calendar months from creation, unless a specific legal or dispute-related obligation requires longer retention with a documented review date.
90 days from original collection, even when copied to another study session. Undated legacy copies are removed. A specific reviewed hold can preserve necessary study-record evidence.
Unconfirmed, unlinked signups: 30 days without signup progress, removed during the weekly reviewed cleanup. Other provider-only profiles are reviewed at 90 days and resolved within seven days, unless a specific documented exception applies.
Beta application, database and host access logs: 14-day target. Package/update diagnostics: 90 days. AWS CloudTrail event history: 90 days. Existing development application logs: 30 days; development performance logs: one day.
Minimal privacy/complaint/incident records: 12 calendar months after closure. Routine support and detailed correspondence: 90 days after closure. Transfer and identity copies: completion or seven days from creation. Specific reviewed holds may preserve named evidence.
You can object to processing based on legitimate interests for reasons relating to your situation. We will assess your request and explain any grounds for continuing the processing.
Raise a privacy complaint with privacy@examber.com. We will acknowledge it within 30 days, investigate without undue delay, keep you informed, and explain the outcome. A complaint does not replace or restart the deadline for a data-rights request.
You also have the right to complain to the UK Information Commissioner's Office (ICO). You can make a complaint to the ICO. You do not need our permission to contact the regulator.