Privacy Policy

Effective October 13, 2026 · Version 2026-10-13

Who operates ExamKinetics

ExamKinetics AI is currently operated by Manish Bakshi as an individual business operator in the United States. This policy covers information processed through ExamKinetics. OpenAI/ChatGPT, Stripe, and other service providers also have their own policies for their services. For questions or privacy requests, use our contact form and select Privacy or data request.

Information we collect

• Account identity: when you sign in with ChatGPT, we receive a site-specific account identifier, email address, and, when supplied, your name. We do not receive your ChatGPT password.
• Study content: questions, answer keys, explanations, files, notes, study plans, and AI conversations you import, enter, generate, or save.
• Practice activity: answers, scores, question visits and timing, navigation, flags, answer changes, confidence ratings, review activity, and other practice interactions supported by the interface. These records support your results and Practice Insights.
• AI usage and billing: features used, model and reasoning preferences, usage/cost records, credit reservations and balances, subscription and payment status, Stripe customer and transaction identifiers, purchase terms acceptance, and refund requests.
• Support: messages, optional contact details, page location, and app version submitted through Feedback or Contact, plus allowance requests and their reasons.
• Technical information: request and error information processed by our hosting providers, browser storage, and identifiers used for security and abuse prevention. AI allowance records use a keyed hash derived from your network IP address to enforce shared-network limits; this is a pseudonymous identifier, not a guarantee of anonymity. Hosting providers may separately process IP addresses and request metadata.

Local storage, cookies, and synchronization

Study records and preferences may be stored in your browser. Signed-in workspace records can also be synchronized to server storage so they are available across devices. Clearing browser storage alone does not delete synchronized server records. Sign-in uses platform-managed authentication. Submitting feedback sets a secure visitor-identification cookie lasting up to 30 days for duplicate prevention and rate limiting. Essential storage and identifiers support functionality, authentication, and safety; this beta does not include an advertising tracker integration.

How we use information

We use information to provide and synchronize your workspace, calculate practice results, produce AI responses you request, manage accounts and payments, enforce allowance and safety limits, answer support requests, investigate errors and abuse, and meet legal and accounting obligations. Practice Insights describe recorded activity; they are not clinical assessments or validated predictions of exam performance.

AI processing

Using an AI feature sends relevant inputs to OpenAI's API. Depending on the feature, these may include question text, uploaded documents or images, conversation context, saved plans, and practice activity. You can use supported non-AI practice features without requesting AI processing. Our response requests use the API's store:false setting, but this does not guarantee zero provider retention or prevent security and abuse-monitoring records. OpenAI describes its API data practices in its business-data privacy information. We do not promise that provider processing is equivalent to keeping content only on your device.

Payments and service providers

Stripe collects payment details on its hosted checkout and billing portal. ExamKinetics does not collect or store full card numbers or card security codes. We retain transaction references and status needed to manage subscriptions, credit, refunds, and disputes. See Stripe's Privacy Policy. OpenAI/ChatGPT Sites and Cloudflare provide hosting, authentication, database, delivery, and security infrastructure. Providers and authorized personnel may access information as needed to operate, secure, or support their services.

Sharing and public content

ExamKinetics does not sell your personal information or share it for targeted advertising. We share information with providers as needed for the functions above, when you direct us to do so, or when required by law or necessary to address fraud, security, or legal claims. Your personal study content is not automatically contributed to a public question bank. Public demos and recorded case studies contain selected demonstration material; they are separate from your private workspace. Any future optional community contribution or research participation will require a separate explanation and choice. If ownership of the service changes, relevant records may transfer to the successor subject to applicable law and appropriate notice.

Retention and security

Saved workspace content is retained to support your use until deleted through available controls or addressed through a verified deletion request. This beta does not yet have a uniform automatic purge schedule for every category of records. Billing, consent, refund, support, and security records may be retained longer where needed for accounting, dispute resolution, safety, or legal requirements. Providers may retain backups or logs under their own retention rules. We use HTTPS and account access controls; selected server secrets and private assets are encrypted. We do not claim that all stored workspace content is encrypted with a key only you control, or that any system is completely secure.

Your choices and requests

You can manage supported study records and AI preferences in your workspace, export records where export controls are available, cancel renewal in the billing portal, and request access, correction, or deletion through Contact. Include a reply email, but do not include passwords, payment keys, card details, or patient information. We may verify account ownership before acting. We handle requests and any applicable privacy rights under the law that applies to you; some records may need to be retained. Deleting study data does not itself cancel a subscription, and canceling a subscription does not itself delete study data.

Age, sensitive information, and location

The service is intended for adult learners, age 18 or older. Do not upload identifiable patient information, protected health information, confidential clinical records, government identifiers, or other highly sensitive data. ExamKinetics is not offered as a HIPAA-compliant clinical system. Providers may process data in the United States or other countries, whose privacy laws may differ from those where you live.

Changes

We will update the effective date when this policy changes and provide additional notice where required. Material changes to processing or new optional uses may require additional choices or consent. Contact us if you have concerns about a change.