Privacy Policy

Data from the Google account you sign in with: name, email address and profile picture. We never have access to your Google password and never handle it.

Activity data generated when you use the service: the exams you start, the answers you submit, the score of each attempt, the hints you ask for, the time you spend, the medals you earn, and which official exams you opened the statement of before sitting them (with the date), because the first attempt then no longer counts for the leaderboard.

The minimum technical data needed to protect the service, such as the number of requests you make in a period of time, linked to your account, to apply usage limits and prevent abuse.

Your interface preferences (language, light or dark appearance, and whether test options are hidden) are stored in your browser, not on our servers (see the Cookie Policy). The region you choose on the home page is stored in your account to personalise it; if you are not signed in, it is stored only in the browser. The subjects you tell us you take are also stored in your account and are only used to order what we show you.

If you take written-answer exams: the text you write in each part, the marks you give yourself in the self-assessment and, if you ask for it, the AI's proposal.

The age band you declare the first time you sign in, and the date and version of the terms and policy you accept.

If you use the AI tutor: the explanation it generates, linked to the attempt and the question, and a usage record (date, model, amount of text processed and cost) linked to your account. See «The AI tutor».

If you buy the premium pass: the date, the amount and the Stripe transaction identifier. If you subscribe to the monthly plan: the Stripe customer and subscription identifiers, the subscription status and the date it is paid until. In both cases Stripe stores with the payment the date and time you asked for immediate access, and issues the invoice. We never process or store your card number or any other payment details: Stripe handles them directly (see «Who we share data with»).

If you ask to withdraw from a purchase from the pass page: which purchase (product, date, amount and the Stripe payment reference), when you asked, the reason if you write one, a reference for the request and when we handled it, linked to your account.

If you report an error in a question or a problem with an AI tutor explanation: the exam and the question, the reason you choose, the comment you write and, if the report is about the tutor, a copy of the explanation you are reporting, linked to your account so reports are not duplicated while we review it. Once we resolve it, we delete the comment, the copy of the explanation and the link to your account.

When the premium pass dialog opens (and from which part of the service), when you visit the pass page, when you start a payment and when it completes, linked to your account. We use this only to know, in aggregate, where people drop off before buying; it is stored in our own database, without cookies or any third-party analytics service, and is deleted with your account.

If you have joined a class with a code given by your school: the teachers of that class can see your name, your email address, and the results and answers (including written answers) of the exams they assign there. In that case the school is the data controller and PAU Mentor is the processor; see «Processing on behalf of schools» below.

Google Classroom, if your teacher uses it. If you are a teacher and connect your Google Classroom account: the names of your courses; the name, email address and Classroom identifier of the students in the courses you link to a class; and a Classroom access key that we store encrypted and delete when you disconnect. If you are a student in a linked course: your name, email address and Classroom identifier reach us from your teacher through Classroom, so that you join the class when you sign in, and the mark for the Classroom assignments your teacher chooses to send is placed there as a draft (you only see it when your teacher returns it).

If you are a teacher and request the free school trial: the school's name and code, region and town, your position, the subjects you teach and, if you add them, a phone number and a message. They are used only to check that you teach at that school (we may call the school) and to set up the trial.

If you write to us through the contact form: the name, email and message you write, and the reason you choose. They are stored in our own database (Neon, in Frankfurt, inside the European Union), without any data from your account and without passing through any other provider, and are used only to reply to you. To prevent abuse, for at most one day we count how many messages arrive from your IP address and, if you are signed in, from your account, without storing either: we keep only a keyed fingerprint from which they cannot be recovered. The message itself carries no account data.

Providing the service you asked for (running practice exams, grading them, showing your progress): performance of the service relationship.

Keeping your history: performance of the requested service.

Showing you on the public leaderboard: your consent, which you can withdraw at any time in Settings.

Processing the purchase of the premium pass or the monthly subscription and its renewals: performance of the contract.

Handling withdrawal requests and making the refund: compliance with a legal obligation (consumer protection law) and performance of the contract.

Generating the AI tutor's explanations, only when you ask for them: performance of the requested service.

Limiting the number of requests, controlling AI spending and protecting the platform from abuse: legitimate interest in the security and availability of the service.

Reviewing and correcting content from error reports, and measuring in aggregate how the pass purchase works: legitimate interest in keeping the content correct and the service viable.

Replying to messages sent through the contact form: legitimate interest in answering your enquiries and, if you ask us for information to contract the service, taking pre-contractual steps at your request.

We never use your data for advertising and never sell it to third parties.

Google, as the authentication provider (Sign in with Google) and, if a teacher connects it, as the provider of Google Classroom: we send it the assignments the teacher publishes there and, when the teacher asks, the marks as drafts.

PAU Mentor's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, data received from Google (sign-in and Classroom): we use it only to identify you and for the Classroom features described in this policy; we do not transfer it to third parties, except to our hosting processors to provide the service, to comply with the law or, with prior notice, as part of a merger or acquisition; we do not use it for advertising, do not sell it, and do not use it to develop, improve or train generalised artificial intelligence or machine learning models; and no person reads it except with your consent, to investigate a security issue or abuse, or to comply with the law.

Data received from Google, including Classroom data, is never sent to any artificial intelligence provider (neither Anthropic nor TypeSafe).

Stripe, as the payment provider, if you buy the premium pass or subscribe to the monthly plan: it directly processes the data needed to take the payment (name, email, card details), which never pass through our servers.

Anthropic, as the provider of the AI tutor's model, only if you press «Explica-m'ho» (“Explain it to me”) and only with the data listed in «The AI tutor».

TypeSafe, as the provider of the AI model (Jev) that proposes a mark for written answers, only if you press «Corregeix amb PAU Mentor» (“Grade with PAU Mentor”) and only with the data listed in «AI grading of written answers».

Sentry, as the server error-reporting service: it only receives the technical trace of the error, without request bodies, headers, cookies, user or responses; any email addresses that might appear are masked before sending.

The infrastructure providers that host the application and the database (currently Vercel and Neon for the server and database, and Cloudflare for the web front end), which act as processors and access the data only to provide hosting.

The school you belong to, if you have joined a class with a code, for the data related to the assignments it gives you there (see «What data we process»).

We do not share or sell your data to third parties for commercial or advertising purposes.

You only appear on the public leaderboard if you choose to: we ask you, and you can change it at any time in Settings. If you appear, other users see your name and picture, never your email. Results of an exam assigned by a school never appear on the public leaderboard.

Some of the providers above may process data outside the European Economic Area; in particular, Anthropic and TypeSafe (the AI grading provider) do so in the United States. In that case the safeguards provided for by law, such as the standard contractual clauses these providers offer, apply.

We keep your data while your account is active. If you ask us to delete your account, we delete your personal data and your attempt history, unless we must keep some of it by law.

Data on premium pass purchases, subscription payments and withdrawal requests is kept for the period required by tax and accounting law (generally up to six years), even if you ask us to delete your account. When the account is deleted, we remove the email address and the reason you wrote from withdrawal requests.

AI tutor explanations are kept with the attempt they belong to and deleted with it; if you have reported one, the copy attached to the report is deleted when we resolve it or when you delete your account. From the AI usage record, when an account is deleted we keep only the cost of the calls, without your email or any other data that identifies you.

Google Classroom: when a teacher disconnects Classroom, we delete their access key and revoke it at Google. When a teacher unlinks a course from a class, we delete the link, the pending invitations and the Classroom identifiers of the students in that class. A student in the course who has not yet joined PAU Mentor remains a pending invitation (name and email) until they join, at which point it is deleted; if they never join, we delete it at the end of the school year in which it was created (31 July). Anyone can remove PAU Mentor's access to their Google account from the Google Account permissions page.

Free school trial requests: an approved one is kept while the trial school exists; a rejected one is deleted 90 days after it was rejected. All are deleted if you delete your account.

Contact form messages: we delete them automatically 12 months after receiving them, or earlier if we have already dealt with them and do not need to keep them.

Error reports on a question: the comment and the link to your account are kept until we resolve the report, and then we delete them; only the exam, the question, the reason and whether it was fixed remain, with nothing that identifies you. They are also deleted if you delete your account.

Communication between our front end and our back end is protected by an internal secret that the browser cannot access, and sensitive grading data (correct answers, hints) stays out of the client's reach until it is due.

All communication is encrypted (HTTPS). A teacher's Google Classroom access key is stored encrypted on our server and never reaches the browser; the temporary access token obtained from it (valid for one hour) is not stored.

You have the right to access your data, rectify it, request its erasure, restrict its processing, receive it in a portable format and object to its processing, under the General Data Protection Regulation (GDPR) and the Spanish data protection law (LOPDGDD).

From Settings you can download your personal data at any time, as a readable JSON file (without the service's internal technical data or the content and solutions of the exams; the file itself says what it leaves out and why), and delete the account. The correction of an assignment that is still open, while you have attempts left, appears once it closes or you have used all your attempts, as in the app. Deletion is immediate and permanent, except in three cases that we handle by hand: if you have a monthly subscription that will renew (cancel it first), if you are in a class of a school (that data also belongs to the school, which we notify first) or if it is a teacher account. In those cases nothing is deleted yet: we store the request (the account name and email and the reason) with the contact messages, write to you by email and deal with it within one month at most. When an account is deleted, we keep only the amount, date and payment reference of its purchases, without your email, because the law requires us to keep accounting records.

You can also exercise these rights by writing to contact@pau-mentor.com.

If you believe the processing of your data does not comply with the law, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

The service is designed for people preparing for the university entrance exams. You must be at least 14 to use PAU Mentor with your own account (14 is the age from which Spanish law lets a minor consent to the processing of their data). The first time you sign in we ask for your age band, and we do not let anyone who declares they are under 14 continue.

If you are between 14 and 17, you can use the service on your own. Buying the premium pass or subscribing to the monthly plan requires the authorisation of a parent or legal guardian.

The AI tutor is designed with minors in mind, because people under 18 use it: it is not an open chat (you cannot send it any message; it only explains a question you have already answered, based on the official solution), no data that identifies you is sent to the AI provider, what it generates is always labelled as made with AI, and you can report any wrong or inappropriate explanation with the link below each one.

If you use the service through a class at your school, the school collects, where the law requires it, the corresponding authorisation as part of its own enrolment process or its process for using digital tools with students.

When a school contracts PAU Mentor for its students, PAU Mentor acts as a processor on behalf of the school for the data generated in its classes (students' identity, results and answers to assigned tasks). The school is the data controller.

This relationship is governed by a specific data processing agreement (DPA) signed with the school, which covers, among other things, security measures, sub-processors and the procedure in case of a security incident.

When you press «Explica-m'ho» (“Explain it to me”) on a question you have already answered, PAU Mentor asks an artificial intelligence model to explain that question to you. It only happens when you ask: never automatically, and never during a timed exam in progress.

What is sent to the AI provider: the question's statement and its options, the official solution and explanation from our content, whether you got it right, and your answer to that question (only if it is one of the options or a short mathematical expression; any other text is replaced by a notice and never sent).

What is never sent: your name, email address, picture, account identifier, school, class, marks or any other data that could identify you.

The provider is Anthropic (United States), which processes this data as a processor under its commercial API terms. Under those terms, it does not use it to train its models. According to its public documentation, Anthropic deletes API inputs and outputs within 30 days at most, with exceptions for safety and legal compliance.

What we store: the generated explanation, linked to the attempt and the question (so you can read it again without generating another), and a usage record with the date, model, amount of text processed and cost, linked to your account to apply usage limits and control spending.

The tutor makes no decision about you and never changes marks, the leaderboard or medals. Its explanations are guidance and may contain mistakes: the official solution and grading are what count.

In written-answer exams (for example, History), once you have handed in the exam you can press «Corregeix amb PAU Mentor» (“Grade with PAU Mentor”) to have an artificial intelligence model propose a mark for each criterion of the rubric. It only happens when you ask, and only for the parts you answered.

What is sent to the AI provider: the text you wrote in each part and the grading criteria of our rubric (which contain no data about you). Because it is free text, you could have written personal data in it: please don't. Your name, email address, picture, account identifier, school, class and marks are never sent.

The provider is TypeSafe (Jev model), which acts as a processor and has its servers in the United States: it receives the text only to return the mark to us and does not train or fine-tune any model on what we send or what it returns. We have zero data retention enabled: the content of each request is deleted as soon as the mark is returned and is not stored; it only keeps operational data (billing and usage) and may use technical data derived from usage (logs, statistics and performance metrics) to maintain and improve its service.

What we store: the proposed mark per criterion and its confidence, linked to your attempt, and a usage record with the date, model, amount of text processed and cost, linked to your account to apply limits (credits) and control spending.

The proposal is provisional guidance: it can be wrong and is never your mark, nor does it count towards the leaderboard, your average or medals. It does not apply to tasks assigned by a school, which teachers grade. Spelling mistakes are not penalised.

We may update this policy to reflect changes in the service or the law. The «last updated» date at the top shows when it was last revised.

For any question about your data: contact@pau-mentor.com.

The data controller is Luis Solsona Sánchez (NIF 20562684V, C/ General Palafox, 8, local, 08860 Castelldefels (Barcelona)).