Last updated: 14 May 2026
This Policy applies to personal data we process about visitors, registered users, and other individuals who interact with the Exam King platform (examkinghk.com). This Policy supplements our Terms and Conditions and may be updated periodically.
We collect information in the following categories:
Account Information: email address, password (hashed with bcrypt), account role (free/paid user), and communication preferences.
User Content: your selected grade, publisher, unit, generation mode (topic/mock), and any feedback or enquiries you submit.
Learning Activity Data: generated paper records, generation count, timestamps, and AI model used (Haiku/Sonnet).
Device and Usage Data: IP address, device identifiers, browser type, operating system, pages viewed, clicks, referring/exit pages, date/time stamps, and performance logs.
Cookies and Similar Technologies: cookies, local storage, and session identifiers to remember settings and maintain login sessions (see Section 8 below).
Communications: messages and correspondence with us, including support requests and feedback.
Payment Information: if you purchase a subscription, limited payment metadata (e.g., transaction ID, plan, billing status). Credit card details are processed by Stripe and are not stored by us.
School Paper Uploads (Premium feature, opt-in only): if you are a Premium subscriber and choose to upload a school exam paper so the generator can match your child's school format, see Section 3A for what is collected, how it is handled, and how long it is kept. Free and Parent Plan accounts cannot upload school papers.
Information We Do NOT Collect:
Premium subscribers may upload photographs or PDFs of school exam papers so the generator can produce practice papers matching the school's format. This section explains exactly what happens to those uploads.
What you upload. Image files (JPG, PNG, HEIC) or PDF files representing a school exam paper. We accept uploads only on the Premium tier and only after you confirm via the consent screen that you are the parent or legal guardian of the child the paper relates to and that you have the right to share the paper for this purpose.
Pre-processing. Before any AI processing, an automated redaction step removes student names, ID numbers, and other directly identifying handwriting visible on the paper. Class labels and the school's printed branding are retained because the school's format itself is what we extract.
What we extract and store. Structural pattern features only — section count, question types per section, mark allocation, dominant format conventions (e.g., "no word banks", "two reading passages", "60 marks total"). These features are stored as an anonymised JSON record linked to your account so future generations match the school's format.
What we do not store. We do not store the raw upload long-term, we do not republish the paper, and we do not share the paper or its content with any third party other than the AI service used to extract patterns (Anthropic Claude, US — see Section 7).
Retention. The raw uploaded file is deleted within 30 days of upload. The anonymised extracted pattern is retained for as long as your Premium subscription is active so we can keep generating in your school's format. If you cancel Premium, extracted patterns are deleted within 90 days of cancellation unless you ask us to keep them for a possible future re-subscription.
Your control. You may request deletion of any specific upload or any specific extracted pattern at any time, with no impact on the rest of your account. Email support@sproutgardenlearning.com.
Copyright. See Section 7B of our Terms and Conditions for the copyright and fair-dealing position on uploaded school papers.
We use your information to:
We use artificial intelligence (Anthropic Claude) to generate exam paper content and feedback. AI outputs may be inaccurate or outdated; users should verify content with official materials.
We may use anonymised or aggregated data to evaluate and improve our AI systems and features. This data does not contain any personally identifiable information.
Where legally required or appropriate, we seek to de-identify data used for model improvement and apply access controls.
You may opt out of having your personal data used for model training (not including strictly necessary operational processing) by emailing support@sproutgardenlearning.com. We will honour your request where required by applicable law.
If we make any material changes to how data is used for AI training in future, we will notify all registered users by email at least 30 days before the change takes effect.
Hong Kong (PDPO): We comply with the Personal Data (Privacy) Ordinance (Cap. 486). We process your personal data in accordance with the six Data Protection Principles: purpose and manner of collection, accuracy and retention, use of data, security, openness, and access rights.
If you are located in the EEA/UK (GDPR/UK GDPR), we rely on contract performance, legitimate interests, consent, and legal obligation as our legal bases for processing.
We do not sell your personal information. We may share information with:
Service Providers / Processors: hosting (Render), payment processing (Stripe), under contracts that require appropriate safeguards.
AI Service Provider: Anthropic Claude — receives only non-personal data (grade, publisher, unit selection). Your email, name, or payment details are never sent to the AI service.
Legal / Compliance: to comply with law, enforce Terms, protect rights, safety, and security.
Business Transfers: in connection with a merger, acquisition, or asset sale, subject to continued protection of your data.
Referral Programme: if you use a referral code, we record the code-to-account association to process referral rewards. We do not disclose your personal data to the referrer.
We use cookies and similar technologies to keep you signed in, remember preferences, and analyse usage. You can manage cookies via your browser or device settings. Disabling cookies may affect certain features.
Storage Items We Use:
We Do NOT Use:
Third-party: Stripe (our payment processor) may set cookies during the payment process. Please refer to Stripe's Cookie Policy for details.
Your information may be processed in countries other than your own. Our servers are located in Hong Kong. AI requests are processed via Anthropic's API (United States). Where required, we use appropriate safeguards to protect personal data transferred internationally.
We implement technical and organisational measures to protect personal data, including:
However, no method of transmission or storage is completely secure.
We retain personal data for as long as necessary to fulfil the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce agreements.
Subject to applicable law, you may have the right to:
To exercise your rights, contact us at support@sproutgardenlearning.com or WhatsApp +852 4427 0658. We may verify your identity before responding. We will respond within 40 days.
Exam King is designed for use by parents and legal guardians, not for direct use by children. Accounts must be created by a parent or legal guardian aged 18 or above. Children do not interact with the platform directly — parents generate papers, print them, and hand them to children to complete on paper.
Parent / guardian consent on signup. By creating an account, you confirm you are the parent or legal guardian of the child for whom you generate papers, and you consent on the child's behalf to the limited processing of child-related data described in this Policy. That is the only consent we rely on for child-related data. We do not seek or accept consent from the child directly.
What child-related data we hold. For routine use of Exam King (any tier), we hold only the parent's selected grade level and publisher — nothing identifying the child. For the Premium OCR feature only, we briefly process uploaded school papers that may contain a child's name or handwriting; those identifiers are auto-redacted before AI processing, the raw file is deleted within 30 days, and only the anonymised format pattern is retained. See Section 3A.
Parent's right to delete child-related data. A parent or legal guardian may request deletion of any data relating to their child at any time. We will action verified requests within 30 days, which is shorter than our standard 40-day response window for general data-subject requests. Email support@sproutgardenlearning.com or WhatsApp +852 4427 0658.
If you suspect under-age direct use. If we learn that we have collected personal data directly from a child without parental consent, we will take reasonable steps to delete it promptly. If you believe this has occurred, please contact us using the channels above.
These provisions are designed to meet our obligations under the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) and the PCPD's guidance on the protection of children's personal data.
We may send service announcements and administrative messages. Where required, we will obtain consent for marketing emails. You can opt out of marketing at any time using the unsubscribe link or by emailing support@sproutgardenlearning.com.
Hong Kong (PDPO): We comply with the Personal Data (Privacy) Ordinance (Cap. 486). You may request access to and correction of personal data by contacting us.
EEA/UK (GDPR/UK GDPR): See "Legal Bases" and "Your Rights and Choices" sections above.
The platform may link to third-party websites or services (such as Stripe payment pages). We are not responsible for their privacy practices. We encourage you to review their privacy policies.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the platform. Your continued use of the platform after changes become effective means you accept the updated Policy.