Privacy Policy

GradeGenie is operated by Maanvik Gupta, based in Delhi, India. For anything in this policy, contact support@gradegenie.app.

• Your account. Email address, the name you give us, and the subjects you pick. If you sign in with Google we receive your email address and name from Google, never your Google password.
• Your work. Answers you submit for marking, questions you save, flashcard decks, cheat sheets, and the marks and feedback produced from them.
• Photographs of written work, if you upload them. The image is sent for marking and the transcription is kept; the photo itself stays on the device that took it and is not stored on our servers.
• Usage counts. How many marking runs you have made, so your monthly credit allowance can be enforced.
• Feedback you send us, along with the page you were on and your browser type.
• Crash reports. If the app hits an error in your browser, it sends us the technical error message, which page it happened on and your browser type, so we can fix it. It never includes your answers, your name or email, or who you are.

We do not use tracking or advertising cookies, and we do not sell anything to anyone.

The list above is the whole of it. There is no analytics tool, no tracking pixel, no advertising network and no session recording anywhere on this site, so there is no browsing history, device fingerprint, location or behavioural profile to hand over: none of it is gathered in the first place. We do not ask for your date of birth, your school, your phone number or your address, and we never see your card details, because payments are not handled on our servers.

Only the services needed to make GradeGenie work. Each holds data under its own terms:

• OpenAI: receives the work you submit, in order to mark it or generate questions from it. This is the one place your writing leaves our systems, and it is what makes the marking possible.
• Supabase: stores your account, your work, and your usage counts.
• Vercel: serves the website.
• Resend: sends account emails such as confirmations and password resets.

None of them are advertising companies, and none of them are given your data to use for their own purposes.

Where it goes. These providers are based in, or run servers in, the United States and other countries outside the UK, the EEA and India, so using GradeGenie means your data is transferred internationally. Those transfers rely on the providers’ own standard contractual clauses and equivalent safeguards. If you would rather your writing never left your country, GradeGenie is not the right tool for you: the marking cannot happen without sending it.

Different bits rest on different grounds, and it is worth being specific:

• To give you what you signed up for. Your account, your work and the marking itself exist because you asked for them. Without this data there is no service to provide.
• Our legitimate interests: keeping accounts secure, stopping abuse, and counting usage so limits and credits work. These are narrow and none of them involve profiling you.
• Consent, where something is genuinely optional, and if you are under 18, your parent or guardian’s permission as well. Anything resting on consent can be withdrawn without losing the rest.

Your marks and feedback are produced by an AI model, not a person. Nobody reads your work and grades it by hand.

That means it is an estimate for practice and nothing more. It is not an official grade, it carries no weight with any exam board, and no decision is made about you on the basis of it, not about your account, your access, or anything else. It can be wrong, and you are free to disagree with it. If a mark looks wrong to you, it may well be; tell us and we will look at it.

GradeGenie is built for IGCSE students, so most of the people using it are school age. You need to be at least 13 to create an account. If you are under 18, you should have a parent or guardian’s permission before you sign up, and you must not enter payment details without it.

Because our users are children, some things are simply not done here, and they are not done by choice rather than by promise:

• No advertising of any kind, and nothing about a student is ever used for advertising or sold to anyone.
• No tracking or behavioural profiling. There are no analytics, no tracking pixels and no third-party trackers on this site, so nothing follows a student around the internet or builds a profile of them.
• No public profiles and no messaging. A student’s work is visible to their own account and to nobody else’s.

A parent or guardian can email us to see what is held about their child, correct it, or have the account and its contents deleted, and we will act on that without asking them to justify it. If you tell us a user is under 13, we will delete the account.

Your work is kept while your account exists, because the point of it is to look back at what you have improved on.

Email support@gradegenie.app to delete your account and we will remove your account and everything attached to it. Backups may take up to 30 days to cycle out.

To put periods on it: your work and account details are held until you delete them or ask us to. An account left completely unused for 24 months is deleted along with its contents. Usage counts kept for billing and limits are held for 7 years, because tax rules require records of what was charged. Anything sent to OpenAI for marking is subject to their retention, which is measured in days, not years, and is not used to train their models.

Depending on where you live you may have the right to see a copy of your data, correct it, delete it, or object to how it is used, including under the UK/EU GDPR and India’s Digital Personal Data Protection Act. Ask us and we will do it; we will not make you justify the request.

Deleting works the same way: Settings → Your data → Delete your account removes your login and everything attached to it, at once and for good. If the button isn’t offered to you, email us and we will do it.

You don’t have to ask for the copy: Settings → Your data → Download my data gives you everything you have made here as one file, straight away.

You can also complain to a regulator, and you do not have to come to us first. In the UK that is the Information Commissioner’s Office, in the EU your national data protection authority, and in India the Data Protection Board. We would rather you told us first so we can put it right, but that is your choice and not a condition.

Accounts are protected by Supabase authentication, data is encrypted in transit, and database rules restrict every row to the account that owns it. No service can promise perfect security, and we will not pretend otherwise. If something happens that affects your data, we will tell you.

If this policy changes in a way that matters, the date at the top changes and we will say so in the app.