Skip to content
HomePrivacy

AP Exam Kit · Privacy

Privacy Policy

Updated: 19 October 2026

This policy explains what AP Exam Kit uses, why it is used, which service provider has each role, and how long key data remains available.

On this page

1. What we collect

  • Account and sign-in information, such as the email and provider identity associated with your Google Auth or email-link sign-in.
  • Practice, progress, preferences, and account-level subscription information needed to provide the product and enforce quotas or access rules.
  • Information you choose to send to Support, including the account email, request details, and limited transaction details needed to investigate a billing issue.
  • If an eligible FRQ feature is enabled for your account, uploaded images or typed answers, optional clarification, saved drafts, and structured feedback needed to run and display that feature.

2. Provider roles and purposes

The providers below are listed by role. AP Exam Kit uses the minimum service needed for the feature, and the production AI providers listed below are not used for ordinary public pages or MCQ practice while the production AI gate is closed.

Service provider roles
ProviderRolePurpose
Google AuthAuthentication providerSigns you in with Google and supplies the identity details needed to establish and maintain your AP Exam Kit account.
SupabaseApplication data and authentication infrastructureStores account records, sessions, practice activity, preferences, structured learning data, and private FRQ metadata or results under the application's access controls.
StripePayment and subscription processorProcesses payment details, subscriptions, invoices, Checkout, and the customer billing portal when Pro billing is enabled. AP Exam Kit does not store your full card number.
Cloudflare / OCINetwork, delivery, and application hostingCloudflare provides DNS, proxy, and network security; OCI hosts the application runtime and performs the server-side work required to deliver the service.
ZohoSupport mailbox providerHandles messages sent to [email protected] for account deletion, privacy, subscription, and support requests.
Antigravity gatewayFRQ transcription, AI feedback, and disagreement adjudicationRoutes student submissions and question/rubric context to the configured Gemini and Claude models. Precalculus and Microeconomics use Gemini transcription, Gemini/Claude reviewers, and conditional Gemini Pro Agent adjudication. U.S. History uses Gemini for typed-answer feedback. Model reviewers and adjudicators are automated, not human reviewers.
NVIDIA NIMPrecalculus FRQ availability fallbackProcesses handwritten images and related transcription or grading context when a primary Precalculus transcription or feedback model fails; the configured fallback reviewers are GLM and MiniMax.
DeepSeekU.S. History typed-answer fallbackThe U.S. History grader calls the configured DeepSeek API after Gemini feedback and its retry fail. It receives the typed student response and question/rubric context. Direct DeepSeek is disabled in the default Precalculus pipeline.
Anthropic APIU.S. History third fallbackFor U.S. History, if Gemini and its retry fail and the DeepSeek fallback also fails, the first-party Anthropic API processes the same typed answer and question/rubric context using Claude Sonnet 5.5 at low effort. The same evidence validation applies; this is a fallback, not an additional independent vote. Anthropic commercial terms state that customer content is not used to train its models; provider retention and legal or safety exceptions are governed by its applicable terms. This does not describe the practices of other gateways or AI providers. Hosting our application in Canada does not establish that all gateway or AI-provider processing takes place in Canada.

3. FRQ AI processing and notice

When you submit an eligible FRQ response, the configured AI services process your handwritten images or typed answer, optional clarification, and question/rubric context. Precalculus uses transcript evidence for scoring, with images as references for ambiguity; when its two reviewers disagree, Gemini Pro Agent adjudicates, or the valid Claude review controls the disputed point if that adjudicator is unavailable. Microeconomics checks awards against original image evidence with Gemini and Claude; unresolved or unavailable adjudication leads to abstention. U.S. History uses typed-answer quotations as evidence and Gemini feedback, with DeepSeek after Gemini and its retry fail, followed by first-party Claude Sonnet 5.5 if DeepSeek also fails. These are automated practice scores and feedback, not College Board scoring or AP 1–5 predictions; they may be inaccurate, incomplete, or abstain. Independently check factual claims and scores against the rubric and your answer.

This Privacy Policy is the notice for that processing. The feature does not use a separate FRQ consent checkbox. Submit only your practice response and material you have the right to provide. Remove names, school/student identifiers, contact details, faces, and other personal or sensitive information from images and text before submitting. Image metadata removal does not remove information visibly written on a page.

Optional categorical quality feedback is used only to evaluate future calibration candidates. It does not automatically change rubrics, gold labels, thresholds, or train a model.

4. FRQ retention and account deletion

Images stored by AP Exam Kit expire after 30 days and are removed by its automated cleanup process. If you enable Clear answer content after grading in Settings, AP Exam Kit removes server-stored answer images, typed answers, transcripts, annotations, and quoted evidence after a completed score; the score and generic feedback remain. You can request permanent deletion of practice records across subjects in Settings. The request waits for active scoring to finish, then removes associated practice records and queues stored images for deletion; file removal may finish shortly afterward. Practice-record deletion does not delete your account or change subscription, quota, billing, or security records. Account deletion can also be requested in Settings; the existing workflow has a 24-hour waiting period before cleanup and future-renewal handling. Some limited records may remain where required for legal, dispute, abuse-prevention, or audit purposes. U.S. History drafts saved in browser storage remain on your device; server-side deletion does not clear browser copies. The image-retention periods describe AP Exam Kit storage; they do not guarantee how long copies, logs, or data remain with gateways or AI providers. Contact [email protected] if you cannot access Settings or need help; do not include a password, verification code, or full card number.

A deletion request may require reasonable verification that you control the account. Some limited records may be retained when required by law, to resolve a dispute, prevent abuse, or maintain an audit trail.

5. Payments and security

Stripe receives and processes payment details for Checkout and subscription billing when those features are available. AP Exam Kit does not ask you to email payment credentials and does not store your full card number. We use access controls and private transport appropriate to the service, but no system can promise absolute security.

6. Communications and tracking

The first release does not use marketing email, advertising pixels, or third-party analytics or advertising trackers. We may send transactional messages needed to respond to Support or operate an account feature. We do not sell personal information.

AP Exam Kit itself records anonymous, first-party product-event statistics, such as sign-up button clicks, paywall views, FRQ upload starts, and result views. To group events within one browser, the site generates a random visitor identifier (kept up to 400 days) and a random session identifier (kept 30 minutes). These identifiers are stored in your browser and sent to our servers with each event; the event records, including the identifiers, are kept on our servers for up to 400 days and then deleted. The statistics contain no email or account link, and no question content, answers, images, or grading details. You can clear or block these identifiers at any time through your browser settings.

7. Requests and changes

Use Account Settings to request practice-record deletion or account deletion. For a privacy question, access or correction request, or help when you cannot access Settings, email [email protected]. We normally reply within 2 business days. We may update this policy as the product changes and will publish the new version on this page.

8. Children and young users

The service is not intended for children under 13. Users who have not reached the local age of majority must have the parent or guardian involvement and consent required by our Terms and applicable law. AI feedback is automated and may be wrong; discuss uncertain or upsetting feedback with a parent, guardian, or teacher. Use it for practice and follow your school’s rules on AI assistance. On shared devices, sign out and clear saved device drafts when you finish. A parent or guardian can contact [email protected] about a child privacy concern or deletion request. Do not send identity documents or sensitive student information in the initial message.

9. Language

The English version of this policy is the formal version. A complete Chinese translation is provided for convenience; if the versions differ, the English version controls to the extent permitted by law.

Need help? [email protected] →