Privacy Policy

Last updated: 01/02/2026

1. Introduction

This Privacy Policy explains how Win At Exams Ltd, trading as ScholarMe ("ScholarMe", "we", "us" or "our") collects, uses, stores, and protects your personal data when you access or use the ScholarMe website, web application, and any associated services (collectively, the "Platform").

ScholarMe is an AI-supported educational platform designed to help students understand their learning needs, receive personalised topic recommendations, and reflect on their engagement and progress.

For the purposes of UK data protection law, Win At Exams Ltd is the data controller.

2. Contact Details

If you have any questions about this Privacy Policy or how we handle your personal data, you may contact us at:

Email: legal@scholarme.ai

3. Personal Data We Collect

We collect personal data when you create an account, use the Platform, or communicate with us. This may include:

3.1 Account and Profile Information

  • Name

  • Email address

  • Username and password

  • Age or school year group

  • Role (student, parent/guardian, tutor or administrator)

3.2 Learning and Engagement Data

  • Subjects selected

  • Topics recommended by the AI

  • Whether you accept or reject recommended topics

  • Self-reported engagement levels

  • Progress indicators and activity history

3.3 AI Input and Output Data

  • Information you input into the Platform, including responses to questions or reflections

  • AI-generated recommendations, feedback, and summaries linked to your profile

3.4 Device and Usage Data

  • IP address

  • Browser type and device information

  • Dates and times of access

  • Pages and features used within the Platform

3.5 Communications

  • Messages sent to us via forms, email, or in-app support

  • Feedback submitted via surveys or research activities

4. Children and Young People

ScholarMe is for learners aged 8 to 16. For learners under 13, we collect personal data only where a parent or guardian has created the account and agreed to this policy. Learners aged 13 to 17 may have an account with parent, guardian, or school supervision.

If we learn that we hold data for a child under 8, or for a child under 13 without a parent or school account, we will delete it promptly.

5. How We Use Your Personal Data

We use personal data for the following purposes:

  • To create and manage user accounts

  • To provide personalised learning recommendations

  • To analyse how users interact with AI-suggested topics and engagement levels

  • To improve the accuracy, effectiveness, and usability of the Platform

  • To communicate with users regarding updates, support, or research participation

  • To ensure platform security and prevent misuse

  • To meet legal and regulatory obligations

6. Legal Bases for Processing

Under UK GDPR, we rely on the following legal bases:

  • Performance of a contract: to provide the ScholarMe service

  • Legitimate interests: to improve our educational tools and user experience

  • Consent: for optional feedback and surveys

  • Legal obligation: where required by law

7. Use of Artificial Intelligence

ScholarMe uses AI models to analyse learning data and generate personalised recommendations. AI outputs are intended as educational guidance only and should not be treated as definitive academic advice.

We may use anonymised and aggregated learning data to improve our AI systems. We do not allow third-party AI providers to train public models using identifiable user data.

8. Data Sharing

We may share personal data with:

  • Service providers who support hosting, analytics, communications, or security

  • Regulators or authorities where legally required

We do not sell personal data.

9. International Transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses, to protect personal data in accordance with UK data protection law.

10. Data Retention

We retain personal data only for as long as necessary:

  • Account and learning data: for the duration of the account and up to 2 years after closure

  • Feedback and pilot data: retained in anonymised form where possible

  • Security and technical logs: up to 6 months

11. Your Rights

You have the right to:

  • Access your personal data

  • Correct inaccurate or incomplete data

  • Request deletion of your data

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent where processing is based on consent

Requests can be made by contacting us using the details above.

12. Cookies

ScholarMe uses cookies and similar technologies to ensure platform functionality and analyse usage. Further details are available in our Cookie Policy.

13. Security

We implement appropriate technical and organisational measures to protect personal data. However, no system can be completely secure, and data transmission is at your own risk.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be communicated via the Platform or website.

15. Complaints

If you are unhappy with how we handle your data, you may contact us directly. You also have the right to complain to the Information Commissioner's Office (ICO).

Information Commissioner's Office

Wycliffe House, Water Lane

Wilmslow, Cheshire, SK9 5AF