Privacy Policy.

Who we are

ExamSOS is operated by CLS Industries SRL (“CLS”, “we”, “us”), a company based in Cluj-Napoca, Romania. For any privacy question or request, contact us at contact@cls-industries.com. CLS is the data controller for the personal data described below.

Information we collect

Account information

When you sign in with Sign in with Apple, we receive a unique, app-specific Apple user identifier and, only if you choose to share it, your email address and name. We never receive or store your Apple password.

Content you provide

The documents, images, photos, and notes you upload to generate study materials, and the materials we generate from them (summaries, flashcards, quizzes, cheat sheets, podcast scripts).

Subscription & purchase information

Your subscription status and the transaction identifiers associated with your purchases, received from Apple. We never see or store your payment-card details — all billing is handled by Apple.

Usage & device information

Which features you use and how often (to enforce free-tier limits and improve the app), and a per-vendor device identifier (Apple’s IDFV) used to associate your usage and subscription with your account. We also keep minimal technical logs for security and abuse prevention.

How we use your information

• To provide the core service — generating study materials from the content you upload.
• To manage your subscription and enforce free-tier usage limits.
• To respond to your support requests.
• To keep the service secure, prevent abuse, and fix problems.

AI processing and our sub-processors

ExamSOS uses third-party artificial-intelligence providers to generate your study materials. The content you upload is transmitted to these providers solely to produce the output you requested, and only for that purpose:

• Google (Gemini) — primary text generation and image/diagram understanding.
• Anthropic (Claude) — fallback text generation.
• OpenAI — text-to-speech for AI podcast audio.
• Cloudflare — hosting and the secure proxy that routes these requests.

We transmit only the content needed to produce your requested output. We do not sell your content, use it for advertising, or authorize these providers to use your content to train their AI models.

Data retention and deletion

We keep account and subscription data while your account is active. Content you upload and the materials we generate are stored to provide the service; transient data sent to AI providers is not retained by us beyond producing your output. You can delete your account and all associated server-side data at any time from within the app: Settings → Delete Account. This permanently removes your account, usage records, and stored content from our systems. After deletion, we retain only the minimal transaction records we are legally required to keep — for example, for tax and accounting purposes — for the period mandated by law, and nothing more. You may also email us to request deletion.

Your rights

Because we are based in the EU, the GDPR applies. You have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. Our legal bases are: performance of our contract with you (to provide the service), our legitimate interests (security and abuse prevention), and your consent where applicable. To exercise any right, email contact@cls-industries.com. You also have the right to lodge a complaint with your local data-protection authority (in Romania, the ANSPDCP).

International data transfers

Some of our AI sub-processors (Google, Anthropic, OpenAI) process data on servers located outside the European Economic Area, including in the United States. Where personal data is transferred internationally, it is protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an applicable adequacy decision.

Security

All communication between the app and our servers is encrypted in transit using HTTPS/TLS. We do not store API keys on your device, authentication credentials are kept in the iOS Keychain, and access to our systems is restricted. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your data.

Children

ExamSOS is a study tool intended for students aged 16 and over. It is not directed at children under 16 — the age of digital consent in Romania — and we do not knowingly collect personal data from anyone under that age. Where a lower age of digital consent applies in a user's country, that local age governs. If you believe a child has provided us data, contact us and we will delete it.

Tracking and analytics

ExamSOS does not use third-party advertising SDKs, cross-app tracking, or the App Tracking Transparency prompt. We do not track you across apps or websites owned by other companies.

Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above and, for material changes, provide notice within the app. Continued use of ExamSOS after a change means you accept the updated policy.

Contact

CLS Industries SRL · Cluj-Napoca, Romania · contact@cls-industries.com