ExamineX Privacy Policy

1. About ExamineX

ExamineX is an online educational and examination platform designed to help students prepare for examinations through digital examinations, question papers, learning resources, practice materials, competitions, progress tracking, and related educational services.

The Services may include:

• Online examinations and quizzes
• Lesson-wise examinations
• Province-wise examinations
• Past papers and model papers
• Educational resources
• Student performance tracking
• Membership services
• Examination tickets
• Tournaments and competitions
• Instructor services
• Instructor-created examination content
• Telegram bots and Telegram-based services
• Notifications and educational announcements
• Analytics and reporting
• Other educational features introduced in the future

2. Information We Collect

We may collect different categories of information depending on how you use ExamineX.

2.1 Account Information

When you create an ExamineX account, we may collect:

• Full name
• Email address
• Mobile phone number
• Username
• Password or authentication credentials (securely hashed)
• Profile information and profile picture
• Educational information, school or institution
• Account preferences and creation date
• Verification information and account status

Passwords are not stored in plain text. Where applicable, passwords are securely hashed using appropriate technical mechanisms.

2.2 Educational and Examination Information

When you use our examination and learning features, we may collect information such as:

• Examinations you attempt & questions presented
• Answers submitted (correct and incorrect)
• Marks, scores, and rankings
• Examination duration & time spent on questions
• Attempt history & completion status
• Tournament participation and results
• Subject & lesson performance progress
• Learning activity & certificates/achievements

3. Telegram Information

If you use an ExamineX Telegram bot or interact with ExamineX through Telegram, we may receive information made available to us by Telegram. This may include:

• Telegram user ID and username
• First and last name
• Profile information made available through Telegram
• Chat ID, group or channel information
• Messages or commands sent to the bot
• Examination activity through the bot & quiz results
• Bot interaction history and technical logs

We use this information to operate Telegram-based educational services, identify users, provide requested services, maintain examination records, prevent abuse, and improve our Telegram services. ExamineX does not control Telegram's own privacy practices.

4. Instructor Information

If you register as or interact with ExamineX as an instructor, we may collect:

• Name, email address, and telephone number
• Account credentials & verification information
• Subject specialization & profile bio
• Uploaded examination papers, questions, and resources
• Sales, revenue, commission, and transaction information
• Student engagement statistics & communication records

Certain instructor information may be displayed publicly where necessary for the operation of the instructor directory or educational marketplace.

5. Payment Information

When you purchase a membership, examination ticket, tournament entry, instructor service, or other paid service, we process information relating to the transaction, including:

• Transaction ID, amount, currency, and timestamp
• Product or service purchased & membership status
• Payment provider information & refund status

Security Notice: Sensitive payment credentials (such as full credit card numbers, CVV, or banking passwords) are handled directly by certified third-party payment gateways. ExamineX does not store complete payment card credentials on our servers.

6. Device and Technical Information

When you access ExamineX, certain technical information may be automatically collected, including IP address, browser type and version, operating system, device type, screen dimensions, language preferences, date/time of access, session tokens, referring website, error logs, and system performance metrics.

7. Cookies and Similar Technologies

ExamineX may use cookies, local storage, session technologies, pixels, and similar tools for:

• Essential Cookies: Required for login sessions and core security.
• Preference Cookies: Remembers user interface settings and choices.
• Analytics Cookies: Helps us evaluate website usage and performance.
• Advertising Cookies: Measures campaign effectiveness where applicable.

You may control cookies through your browser settings. Disabling essential cookies may cause certain features to stop functioning.

8. How We Use Your Information

We process your information to:

• Create and manage accounts, provide examinations, process quiz submissions, and calculate results.
• Track learning progress, deliver study materials, process payments, and manage memberships.
• Operate Telegram bots and competitive tournaments.
• Detect cheating, prevent fraud, stop automated attacks, and ensure platform security.
• Analyze feature popularity, optimize system performance, and resolve technical issues.
• Send account alerts, security notifications, examination results, and service announcements.

9. Legal Bases for Processing

Where applicable, we process personal data based on one or more lawful grounds:

• Your consent
• Performance of a contract or provision of requested Services
• Compliance with legal obligations
• Legitimate interests in securing and improving our educational platform

10. Student Performance Data

ExamineX maintains student examination records (scores, attempts, rankings, time spent). Where leaderboards or rankings are displayed publicly, only limited information (such as student name, username, score, and rank) is shown. Private contact details or passwords are never publicly exposed.

11. Instructor Analytics

Instructors using ExamineX tools receive aggregated performance analytics for students attempting their examinations (e.g., student counts, attempt rates, score distributions, and question difficulty metrics).

12. Artificial Intelligence and Automated Technologies

ExamineX may utilize AI and automated analysis for question classification, educational recommendations, content indexing, abuse detection, and student support. Automated systems will not produce unlawful or unjustified significant legal impacts on users.

13. How We Share Information

We do not sell your personal information as a general business practice. We share data only with:

• Service Providers: Cloud hosting, database, email, payment processing, analytics, and security infrastructure partners under strict confidentiality contracts.
• Instructors: Aggregated student performance data required for course administration.
• Legal Authorities: When required by law, court order, or to protect rights and safety.
• Business Transfers: In connection with mergers, acquisitions, or restructuring.

14. Third-Party Services

ExamineX integrates with third-party services like Telegram, payment gateways, and Google services. Third-party services operate independently and are governed by their respective privacy policies.

15. Google Drive and External Resources

Educational links pointing to Google Drive or external file hosts are subject to external provider terms. ExamineX does not control third-party file host privacy practices.

16. Advertising

Where third-party ads are displayed, advertising networks may collect technical cookie data to measure performance and prevent ad fraud.

17. Data Retention

We retain personal information only for as long as necessary to provide services, fulfill legal obligations, resolve disputes, and maintain security logs. Inactive data is securely deleted or anonymized.

18. Data Security

We apply robust technical and organizational security controls, including SSL/TLS encryption in transit, password hashing, role-based access controls, server firewalls, automated backup systems, and continuous vulnerability monitoring.

19. Data Breaches and Security Incidents

In the event of a verified data breach, ExamineX will promptly investigate, contain the incident, remediate vulnerabilities, and notify affected users and regulatory authorities as required by applicable law.

20. Your Privacy Rights

Subject to applicable law, you have the right to request access to your personal data, request corrections, request deletion, restrict processing, object to data processing, and request data copies.

21. How to Exercise Your Rights

To exercise your privacy rights, submit a request to privacy@examinex.lk or dpo@examinex.lk. Identity verification may be required to protect your account.

22. Children's Privacy

ExamineX provides educational services for A/L students. We collect only data necessary for educational services. Parental or guardian consent will be obtained or relied upon where required by law.

23. International Data Transfers

Cloud service providers may process data outside Sri Lanka under strict security and legal data transfer safeguards.

24. Your Responsibilities

You are responsible for keeping your login credentials confidential, not sharing passwords, and providing accurate account information.

25. Account Deletion

You may request account deletion at any time. Upon approval, personal data will be deleted or anonymized, except where retention is mandated by law or financial auditing standards.

26. Communications

We send essential service messages (verification, exam notifications, security alerts). Marketing messages, if any, will include clear unsubscribe options.

27. Changes to This Privacy Policy

We may update this policy periodically. Significant updates will be announced on the platform with an updated "Last Updated" timestamp.

28. Governing Law

This policy is interpreted under the applicable laws of Sri Lanka, including national data protection legislation.

29. Contact Us

For privacy inquiries, data requests, or complaints, please reach out to our team:

30. Important Notice

This policy explains data practices in clear language and does not reduce any rights granted under applicable law. Mandatory legal protections prevail over policy provisions where conflict arises.