Your exam papers are personal. Here is exactly what happens to them.

Everything this notice says about what Remark does with a student’s data is accurate — it was written against the running system, not from a template. What is missing is the operator’s formal identity: registered company name, company registration number, registered address, governing law, competent courts.

Until those are filled in, a student cannot tell who is accountable for their data or where to complain, and this notice should not be relied on as a completed legal document. It has not been reviewed by a qualified lawyer.

Remark is operated by Remark. We are the controller of the personal data described here: we decide what is collected and why.

For anything in this notice — a question, a request about your data, or a complaint — write to privacy@remark.co.mz. We answer within 30 days.

We hold four things, and nothing else:

• Your account. Email address, password (stored only as a hash that cannot be reversed), display name if you give one, the syllabuses you study, and which version of these policies you accepted and when.
• What you upload. The answer script and the marking scheme, as PDF files, plus the syllabus, paper, session and variant you confirm.
• What the marking produced. The mark for each question, which criteria were met, quoted fragments of your own working as evidence, an explanation of marks lost, and the topics involved.
• Operational records. Server logs, the cost and token counts of each analysis, and a record of security-relevant actions on your account.

There is no analytics, advertising or tracking software on this site. No Google Analytics, no advertising pixels, no session recording, no third-party scripts watching what you do. We do not profile you, sell data, or share it with anyone for marketing.

• To provide the service you asked for. Marking a paper, showing the results, building the improvement plan, and keeping you signed in. This is the performance of our agreement with you.
• To keep the service secure and working. Logs, abuse prevention, and cost controls. This is our legitimate interest in running a service that stays up and is not abused.
• To send account email. Verifying your address, resetting a password, telling you a paper is marked or that a plan is ending. These are service messages, not marketing.
• Where the law requires it. Keeping payment records once payments are live.

We do not use your papers or your results to market anything to you, and we do not send marketing email unless you ask us to.

Remark marks papers using Claude, a model operated by Anthropic. To mark your paper we send Anthropic your answer script and your marking scheme, and the marks and explanations come back. Your script contains your handwriting and may show your name or candidate number if you wrote them on it.

Anthropic processes this on our instructions only. Under their commercial terms, data sent through their API is not used to train their models. We do not send them your email address, your password or your account history — only the two documents and the syllabus context needed to mark them.

Anthropic processes data in the United States, so using Remark means your uploaded papers leave the country. If you are not comfortable with that, do not upload a paper — the rest of the account will simply have nothing to show.

The AI transparency notice explains how the marking itself works, how often it is wrong, and what to do when you disagree with a mark.

Your account, your uploads and your results are stored in Ireland, and the application runs in Germany. These are the companies that process data on our behalf:

• Anthropic — Reads the marking scheme and marks the answer script. Receives: Both uploaded PDFs, and the marks and explanations derived from them. Processes in United States.
• Supabase — Database and private file storage. Receives: Account record, uploaded PDFs, marks and explanations. Processes in Ireland (EU).
• Render — Runs the application. Receives: Everything, in transit while a page or job is served. Processes in Frankfurt, Germany (EU).
• Resend — Sends account email — verification, password reset, notices. Receives: Email address and the contents of that message. Processes in United States.
• Cloudflare — Domain name resolution. Receives: Network metadata only; no account data and no uploads. Processes in Global.

Each is bound by a contract to process data only as we instruct. We will update this list before adding anyone to it. No one else receives your data, and we do not sell it.

• Your uploaded PDFs: 90 days. A scheduled job runs daily and deletes the answer script and marking scheme of every upload older than that. A paper being marked at that moment is left alone until it finishes.
• Your marks and explanations: until you delete them. These survive the deletion of the PDFs they came from, so a paper you uploaded in March still shows in October which topics were costing you marks. That is the point of the improvement plan.
• Your account: until you delete it. Deleting your account from Settings removes the account, its uploads, its results and its stored files.
• Logs and cost records: kept for a limited operational period and not used to build a picture of you.

Backups are the exception. Database backups may contain a copy of deleted data for a period after you delete it, until those backups age out. We do not restore a backup to recover something a student asked us to delete.

You can do these yourself, immediately, without asking us:

• Delete a single paper and both its PDFs, from Past Papers.
• Download everything we hold about you as a JSON file, from Settings.
• Delete your entire account and everything in it, from Settings.
• Change what account email you receive, from Settings.

And you can ask us, at privacy@remark.co.mz, to:

• Tell you exactly what we hold about you and who we shared it with.
• Correct anything that is wrong.
• Delete data, or stop a particular use of it.
• Provide your data in a portable form, or send it to someone else.
• Object to processing we are doing on the basis of our legitimate interest.

We will not charge you for this, will not make you explain why, and will not treat you worse for asking. If we refuse, we will say why. If you are unhappy with our answer you can complain to the data protection authority in your country.

Remark is built for Cambridge IGCSE and A Level students, so we expect most of our users to be under 18. We take that seriously rather than pretending otherwise.

• Under 13: you may not use Remark. If we learn we hold data about a child under this age, we delete it.
• 13 to 17: a parent or guardian must agree to these terms on your behalf. By creating an account you confirm they have.
• 18 and over: you can hold an account in your own right.

A parent or guardian can exercise every right above on behalf of their child — including seeing what we hold and deleting it — by writing to privacy@remark.co.mz. We may ask for proof of the relationship before acting, to make sure we are not handing a child’s data to a stranger.

We do not advertise to children, do not profile them, and do not build behavioural models of any student.

What we actually do:

• Uploaded PDFs are stored in a private bucket that is not reachable by a public URL.
• Every request for a file, a result or a report re-checks that the signed-in account owns it. The database enforces this as well as the application, so a bug in one is not enough on its own.
• Connections to the database and to storage are encrypted, with the server certificate verified.
• Uploaded files are checked for size, type and structure, are scanned, and are verified byte-for-byte against a recorded hash before they are sent for marking.
• Passwords are stored as hashes. Nobody at Remark can read your password.

What we cannot promise. “Private” describes these controls; it is not a guarantee that no incident can ever happen. We are a small operation. If there is a breach affecting your data, we will tell you and the relevant authority without undue delay, and we will tell you what actually happened rather than the smallest version of it.

Remark sets two cookies, and neither tracks you:

• Session cookie — keeps you signed in. Deleted when you sign out.
• Guest cookie — lets someone try the demo without an account.

Both are strictly necessary to provide a service you asked for, which is why you are not shown a cookie banner. There are no advertising, analytics or third-party cookies to accept or reject. Blocking these two will stop you signing in.

This is version 2026-09-20. Remark records which version of this notice each account accepted, so we can tell what you were told.

If we change something material — a new company processing your data, a new purpose, a shorter or longer retention period — we will raise the version and ask you to accept it before you carry on using Remark. We will not make a material change quietly.