Kleksa

Privacy Policy

Last updated: October 16, 2026

1. Introduction

Kleksa ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our exam preparation service.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address and password (stored securely as a hash), and the country you register from. If you sign in with Google, we receive your name, email address and profile picture from Google. We also store the exams you are preparing for, with the exam date and the target score you set.

Tests and Answers

We store the tests you sit and the tasks you practise: your answers, including the photos and drawings of handwritten answers you send, the marks they receive and your progress by topic. A test sat without an account is linked only to a random identifier kept in a cookie in your browser; when you sign up or sign in in that browser, it is moved to your account.

Messages

We store your conversations with the AI tutor and your messages to our support team, so that you can return to them. They are visible to you and to our team, who may read them to answer you, to improve the Service and to prevent abuse.

Payment Information

Payment processing is handled entirely by Stripe. We do not store your card number or payment details on our servers. We receive only a confirmation of payment, its amount and currency, a transaction reference, and the email address you give at checkout.

Usage Data

We collect basic usage data, including IP address, browser type, the pages you visit, and timestamps. We use it to show the site in your language and currency, to improve the Service and to detect abuse.

3. How We Use Your Information

  • To provide the Service: tests, marking, results, the trainer, study notes and the AI tutor
  • To process your payments and manage your account and your access
  • To send emails about your account and purchases (such as password reset and payment confirmation) and, unless you switch them off in your account's notification settings, study reminders and a weekly progress summary
  • To detect and prevent fraud and abuse (e.g., multiple accounts created for more free use)
  • To improve the quality of our tasks and of the marking

4. Third-Party Services

We use the following third-party services to operate:

  • Stripe — payment processing
  • Google — optional sign-in with a Google account (OAuth)
  • Anthropic (Claude) — AI marking of open answers, reading handwritten answers, and the AI tutor (the task, your answer or message, and the earlier part of the conversation are sent for processing)
  • Resend — sending emails
  • Cloudflare — delivering and protecting the site
  • DigitalOcean — hosting our servers and database in Frankfurt, Germany
  • ip-api.com, ipwho.is — telling from your IP address which country you are in, to show the right language and currency
  • Telegram — notifying our team of new support messages and of technical errors

Each of these services has its own privacy policy. Data we send to them is used only to provide their part of the Service.

5. Data Retention

Your tests, answers and progress are kept for as long as your account exists. Conversations with the AI tutor are deleted automatically 180 days after their last message, and support conversations 60 days after their last message. Unpaid, failed and cancelled orders are deleted after 60 days. The cookie that links a test sat without an account to your browser expires after 30 days. You may delete your account at any time in your account settings: your tests, answers, messages and orders are then deleted from our systems, while Stripe keeps the records of your payments as the law requires.

6. Data Security

We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS), secure password hashing, and restricted access to production systems. However, no method of electronic transmission is 100% secure.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Withdraw consent for data processing

To exercise these rights, contact us via our contact page. You also have the right to lodge a complaint with the data protection authority of your country.

8. Cookies

We use cookies for session management, authentication, keeping the tests you sit without an account, and remembering your preferences (language, country, theme). For detailed information, see our Cookie Policy.

9. Children's Privacy

Kleksa is made for students preparing for school exams, and many of them are under 18. If you are under the age at which you may consent to the processing of your personal data in your country (between 13 and 16 in the European Union, depending on the country), please use the Service with the knowledge and consent of a parent or legal guardian. A parent or guardian who believes that their child has given us personal data without their consent can contact us, and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or with a notice on the Service.

11. Contact

For privacy-related questions or requests, contact us via our contact page.