Legal

Privacy Policy

Version 1.0 · Last updated 5 June 2026

Plain-English summary: We collect only what we need to run TopMark — your email, name, your study progress, and the questions you send to our AI. We never sell your data. Your answers to AI features are processed by trusted AI providers, so don't paste personal or confidential information. If you're a student under the age in your country where consent is required, please use TopMark with a parent or guardian's permission. You can delete your account and data at any time by emailing us.

1. Who we are

TopMark (“we”, “us”, “the Service”) is a Cambridge IGCSE study platform. This policy explains what personal data we collect, why, and what rights you have. For any privacy question, or to exercise a right below, contact us at topmarkigcse@gmail.com. We are the data controller for the information described here.

2. What we collect

Category	Examples
Account data	Email address, display name, and a securely hashed password (we never see your plain password).
Study & progress data	Bookmarks, questions completed, self-check results and scores, diagnostic history — stored against your account so it follows you across devices.
AI inputs	The text you type into AI features (marking, doubt solver, quiz/diagnostic generation) and any image you upload to the doubt solver.
Subscription data	Your plan tier and status. Card/payment details are handled directly by our payment processors — we do not store your card number.
Technical data	Device and browser type, and an approximate location derived from your IP address by our hosting/CDN provider for security and abuse prevention. Basic usage counters (e.g. daily AI request count).

3. How we use it

To create and secure your account and sign you in.
To save and sync your progress, bookmarks and results.
To provide AI marking, explanations, quizzes, diagnostics and the doubt solver.
To enforce fair-use limits (e.g. daily AI request caps) and prevent abuse.
To process subscriptions and manage your plan.
To respond to your support requests and send essential service emails (sign-up confirmation, password/sign-in links). We do not send marketing email without your consent.
To keep the Service secure, debug problems, and comply with the law.

4. Legal bases (where GDPR/UK GDPR applies)

Contract — to provide the account and features you sign up for.
Consent — for optional things like AI processing of your inputs and any future marketing; you can withdraw consent at any time.
Legitimate interests — to keep the Service secure, prevent abuse, and improve reliability.
Legal obligation — where we must keep records (e.g. for payments).

5. AI features & third-party providers

When you use an AI feature, the text (and, for the doubt solver, any image) you submit is sent through our secure server to a third-party AI provider to generate a response. We currently use Groq for marking, quizzes, diagnostics and the in-app tutor, and OpenRouter for the doubt solver. These providers process your input only to return a result and under their own terms.

Please do not paste personal data, identifying information about other people, or anything confidential into AI features. AI output can be wrong — it is a study aid, not an authoritative source.

6. Cookies & local storage

We don't use third-party advertising or tracking cookies. We use your browser's local storage and a small number of first-party cookies strictly to run the Service, including: your sign-in session, your saved bookmarks and progress (mirrored to your account when signed in), your theme preference, your accepted-terms record, and daily AI usage counts.

We do not sell your personal data. We share it only with the service providers (“sub-processors”) that run TopMark:

Provider	Purpose
Supabase	Authentication, database, and storage (your account & progress).
Cloudflare	Website hosting, content delivery, and security.
Groq	AI for marking, quizzes, diagnostics, and the in-app tutor.
OpenRouter	AI for the doubt solver (text & photo questions).
Stripe / Razorpay	Payment processing for subscriptions (if you upgrade).

We may also disclose information if required by law, or to protect the rights, safety, and security of TopMark and its users.

8. How long we keep it

We keep your account and progress data for as long as your account is active. If you delete your account, we delete your personal data within a reasonable period, except where we must keep limited records to comply with the law (for example, payment records). AI inputs are not retained by us beyond what is needed to return your result and to operate fair-use limits.

9. Students & minors

TopMark is built for IGCSE students, who are often under 18. We do not knowingly collect data from a child below the minimum age of digital consent in their country (e.g. 13 in the UK/US, 16 in parts of the EU) without verifiable parental or guardian consent. If you are under that age, please use TopMark only with a parent or guardian who accepts our Terms and this Policy on your behalf. Parents/guardians may contact us at topmarkigcse@gmail.com to review or delete their child's data.

10. Your rights

Depending on where you live, you have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Delete your account and data (“right to be forgotten”).
Export your data in a portable format.
Object to or restrict certain processing, and withdraw consent.
Lodge a complaint with your local data-protection authority.

To exercise any of these, email topmarkigcse@gmail.com. We'll respond within the timeframe required by applicable law.

11. Security

We protect your data with industry-standard measures: encryption in transit (HTTPS), hashed passwords, row-level security so you can only access your own records, and least-privilege access to our systems. No method of transmission or storage is 100% secure, but we work to protect your information and will notify you of a breach where required by law.

12. International data transfers

Our providers may process and store data on servers outside your country. Where data is transferred internationally, we rely on appropriate safeguards (such as standard contractual clauses) offered by those providers.

13. Changes to this policy

We may update this policy from time to time. We'll change the “Last updated” date above and, for significant changes, ask you to re-accept the next time you sign in. Continuing to use TopMark after an update means you accept the revised policy.

14. Contact

Questions, requests, or complaints about privacy? Email topmarkigcse@gmail.com and we'll help.