ELMLY PRIVACY POLICY
Effective date: 15 October 2026
This policy explains what Elmly collects, why, who processes it on our behalf, and how you stay in control. It covers the Elmly mobile app, our websites and related services.
1. WHO WE ARE
Elmly is an exam preparation service for students preparing for university entrance examinations in Azerbaijan. Elmly is developed and run by Ali Guliyev. Where this policy says "we", it means Elmly and its developer.
2. WHAT WE COLLECT
Account information — your name, email address and city, and your phone number if you add one. The mobile app requires your city when you sign up, and asks a student to add a phone number before sending a lesson request to a teacher. This is what identifies your account. Apart from the address you give for an in-person lesson, your city is the only information about your location that we hold; we use it as your approximate location, for example for city leaderboards and for finding teachers.
Teaching profile — if you teach: your subjects, experience, education, rates and availability, and the certificates you upload.
Learning data — the questions you answer, whether you answered correctly, time spent, practice and exam history, streaks and scores; how each of your written answers was marked: the mark for each grading criterion, whether the AI service, a member of Elmly staff or the teacher who made the exam marked it, and, if a mark was changed, the reason given; which practice questions have had their answers shown to you, and when; when you first opened the answers of each official exam, and in which signed-in session; and the study preferences you give us: your exam group, target university, strongest and weakest subjects, and your study goals. This is the core of the service: without it there is nothing to show you.
Fairness records — when you sit an exam, our server records when it received each of your answers, how many times you changed a multiple-choice answer, and when the exam was finished. For official exams it also records each first answer and each change of answer, and whether you had already seen each question, in practice or in an earlier exam. When you practise, take a quiz or answer questions in Competitive Mode, our server records when each of your answers, or your finished set of answers, reached it. We also keep the result of each fairness check described in section 3 and, if a check leads to a review, the record of that review: the evidence the member of staff saw, what was decided and why, and anything you told us.
Content you create — your written answers, the messages you exchange with teachers or students and their attachments, your lesson requests (including the address you give for an in-person lesson), your reviews and exam ratings, your bio, and any image you upload, such as a profile picture or an image you attach to a message; and the reports you send us about content or other users (the reason, any details you add and, if you report an AI answer, a copy of that answer), and the list of users you have blocked.
Technical data — your device type and model, app version and language; if you enable notifications, a notification token and whether each notification was delivered; for each signed-in session, the IP address it came from and a description of the app or browser that opened it (its user agent); and, when the mobile app checks for an update, an identifier for that installation of the app and, if the app stopped because of an error the last time it ran, a short report of that error. On Android, the push-notification service also creates an identifier for each installation of the app (see section 4).
Data kept on your device — so that you can practise without an internet connection, the mobile app keeps practice questions with their answers, and the answers you give while offline, on your device, separately for each account. Answers you give offline are sent to us the next time that account is online. Deleting your account in the app also removes this data from the device.
Acceptance records — which versions of our Terms of Service and this policy you accepted, when, in which language, and whether at sign-up or later in the app; if you teach, your confirmation that you are 18 or older and when you gave it; and whether you allowed or declined the AI features, and when.
"Test yourself" (before you sign up) — if you take the short test on our website or in the app without an account, we keep, for that test: your answers, whether each one was right, how many seconds after the start each answer reached our server, when the test was started and finished, whether you tapped the sign-up button on the result page, the platform (the website, the iOS app or the Android app), the language of the app or website, which button you started from, and the length of the test. We do not ask for your name, email address or phone number, and the test record contains no account, device identifier or IP address. The test gives your browser or the app a secret key: only with that key can the result be seen, deleted or added to an account, and we keep only a one-way scrambled form (a hash) of it. To limit how often tests are started from one internet connection, we also keep hourly counts of test starts under a one-way scrambled form of the IP address (a hash made with a key that changes every day); we never store the address itself.
Waitlist — if you join our waitlist on our website, we collect the email address you give and the language the website was in, and use them to tell you when Elmly opens. To limit repeated attempts from the same internet connection, we record the IP address the request came from separately from your entry, and delete it about 3 hours after the last attempt from that address. Entries made before 6 October 2026 also hold the IP address recorded at the time. You do not need an account to join the waitlist, and joining does not create one.
We do not collect your device's location, your contacts, your calendar, or anything from other apps.
3. HOW WE USE IT
To run the service — your account, your progress, your exam results and your place on leaderboards.
To personalise your study — identifying which topics you are weakest in and what to practise next.
To connect students and teachers — lesson requests, the messages between you and, once a lesson request is accepted, showing each of you the phone number the other has saved.
To provide AI features — explanations, study insights, Competitive Mode questions and grading of written answers, only with your permission (see section 4).
To mark written answers — a written answer can be marked against each grading criterion by the AI service (only with your permission, see section 4), by a member of Elmly staff, or, in an exam made by a teacher, by that teacher. If a member of staff or the teacher changes a mark already given, they must give a reason, which is recorded, and you are notified.
To communicate — notifications you have enabled; news about Elmly in the app, only if you turn on announcements; service messages about outages, security or changes to our terms, which are sent to every user; and replies to support requests.
To keep a record of your acceptance — so that we can show which version of our Terms of Service and this policy applied to your account, for example if we have to act on a breach of our Terms of Service.
To keep exams, quizzes and the leaderboard fair — checking the results of official exams, quizzes and Competitive Mode for signs of cheating, using the fairness records and your answers: for example, answers given faster than a question can be read, a long run of correct answers each given that fast, a pattern of right and wrong answers that is very unlikely for the time taken, answers that match another account's, or answer times reported by the app that do not match the times our server recorded. We compare your times with the typical times of all students for the same questions, topics and levels of difficulty, and with your own earlier results. Practice answers are not checked; they are used only to work out typical answer times. Being slow is never treated as a sign of cheating. A check never decides anything by itself and never changes a result, points or a rating: a member of Elmly staff reviews the evidence and decides. A review can end with no action, a warning, or the cancellation of the result concerned. Before a result is cancelled, you are told why and can reply within 7 days; if it is cancelled, the leaderboard points it brought and any ELO rating it added are removed, and you are told. We also limit how many new practice answers one account can be shown in a day. To make sure each student sees the answers and explanations of an official exam only once before the exam's end date, we record when, and in which signed-in session, you first open them.
To keep results correct — if we correct an answer key or change how an exam is scored, or a teacher corrects the answer key of their exam, the results of exams already taken are recalculated. If your result changes, we notify you; for an official exam your leaderboard points are recalculated too, and your ELO rating is adjusted at most once for each recalculation, with the adjustment recorded.
To improve "Test yourself" — answers and times in the test are also added to counts that have no link to any test or person; these counts are kept for 24 months.
To keep the service safe — detecting abuse, protecting accounts and moderating content: an automatic filter holds some text, such as messages, names and profile texts, until a moderator checks it, and refuses some text when it is written; moderators can read content that has been reported or held, hide it, and suspend accounts that break our Terms of Service.
We do not use your data for advertising, and we do not profile you for any purpose other than teaching you and keeping exams, quizzes and the leaderboard fair, as described above. Fairness checks never lead to a decision about you made by automated means alone.
4. WHO PROCESSES YOUR DATA
We use a small number of service providers. Apart from the payment service and the AI service, whose own terms are described below, they act on our instructions and are bound to protect your data to the same standard we are.
Our hosting and database providers — store your account and learning data and the files you upload, handle sign-in, run our websites and servers, and keep the IP address and user agent of each signed-in session.
An email delivery service — sends account emails, such as sign-up confirmation and password reset, the message telling you that Elmly is open if you joined our waitlist, and other emails we send you.
Push-notification services — deliver notifications to your device if you enable them; to do this they receive the notification token and the content of each notification, such as the name of the person who sent you a message. On Android, the push-notification service also creates an identifier for each installation of the app and keeps it, whether or not you turn notifications on. Elmly uses it only to deliver notifications, and no analytics or advertising service is connected to it.
The service that delivers app updates — sends updates to the Elmly mobile app. When the app checks for an update, this service receives an identifier for that installation of the app and, if the app stopped because of an error the last time it ran, a short report of that error.
A payment service — if you start a payment or subscription, receives what it needs to process it, and technical information about your device and how you use the payment page, to prevent fraud. Under its own terms, it may also use this information for its own purposes, such as preventing fraud and improving its services.
A third-party AI service — generates explanations, study insights and Competitive Mode questions, and grades written answers.
About the AI, specifically: we send the AI service only what each task needs.
• An explanation you ask for: the question, its answer options, the correct or model answer, the answer you gave, and the subject.
• Your study insights: the names of your subjects, topics and subtopics; how many questions you attempted and answered correctly in each, and your accuracy there; how many practice sessions and quizzes you completed recently, your average accuracy in them and when you last practised; and your recent exam scores.
• Competitive Mode: the subject, the topics you chose or your weak topics, the number of questions and the mix of difficulty.
• Grading a written answer: the question and any text that goes with it, the grading criteria and model answer, and the answer you wrote.
The app and the website ask for your permission before any of these features first sends something to the AI service, and nothing is sent to it without that permission. You can withdraw your permission at any time by turning off "AI features" in Settings; after that, nothing more is sent. In the app and on the website, an exam with written questions can only be started with this permission. If the AI service cannot be used for a written answer, for example because you withdrew your permission, a member of Elmly staff can mark it instead (section 3).
We do not send your name, your email address, your phone number or your account identifier. The AI service therefore receives information about study performance without being told whose it is.
The AI service handles what we send it under its own terms. Those terms do not commit it to a particular level of protection for this data or to deleting it after a set time. They allow it to use what it receives, to a limited extent and after removing anything that could identify a person, to develop and improve its services, which can include training its AI models.
Our service providers, including the AI service, may process your data outside Azerbaijan.
We do not sell your data. We do not share it with advertisers or data brokers, and, apart from the payment service and the AI service described above, we do not share it with any third party for its own purposes. We use no advertising or analytics software in the app.
We may disclose information if we are legally required to, or to protect the rights and safety of our users.
5. PAYMENTS
Lessons booked through Elmly are currently free, and Elmly does not collect or store card details. If we introduce paid features, this policy will be updated before that happens and you will be told.
6. HOW LONG WE KEEP IT
We keep your account and learning data, and your acceptance records, for as long as your account exists. How your written answers were marked, and when you first opened the answers of an official exam, are part of your learning data and are kept and deleted in the same way.
If you change your exam group, your progress in subjects that are not part of your new group is archived: your practice, quiz and Competitive Mode history in those subjects (your answers and results), and the progress figures built from it. Archived progress is kept, but it is no longer shown to you and is not used to choose your practice questions, in your progress statistics or in recommendations, including your study insights; it is still used for the fairness checks described in section 3. Changing back to your earlier group does not restore it by itself: after changing back, you can ask us to restore it by writing to the address in section 10. The change does not affect your exam results, leaderboard points, ELO rating or streak. Archived progress is part of your learning data and is kept and deleted in the same way.
Fairness records about an exam are kept for up to 12 months after the exam was started, and are then deleted. The times our server received your practice, quiz and Competitive Mode answers are part of your learning data and are kept and deleted in the same way. The result of each fairness check is kept for up to 12 months after the check. The record of a review that ended with a warning or a cancelled result is kept for as long as your account exists, so that we can explain the decision if you ask; the record of a review that ended with no action is deleted 12 months after it closed. If you delete your account, all of these records are deleted with it, and none of them is kept in the change history described below.
If you delete your account, your account and most of the information linked to it are deleted from our database at that point. Some records are kept in a change history that is not deleted with your account: your lesson requests, including the address and any notes in them; payment and subscription records; the exams you created, if you teach; and, where our staff changed your account, a copy of your account details as they were at that time, such as your name, phone number and city. We keep this history to protect users and to deal with disputes and breaches of our Terms of Service, and delete it automatically no later than 12 months after your account is deleted. If you teach, the exams that students have already started are not deleted with your account: they stay, with their questions and the students' answers, as part of those students' history, and are no longer linked to your account; your other exams and questions are deleted. Notifications that other users received about you, for example about a lesson request or a message from you, are changed so that they no longer show your name. If any file you uploaded (such as your profile photo or, if you teach, a certificate) or any file from your conversations is still stored after your account is deleted, write to us at the address in section 10 and we will delete it. We may also keep records for longer where the law requires us to. Anonymised statistics that cannot identify you may be kept to improve the service.
If you joined our waitlist on the website, we keep the information you gave us there until you ask us to remove it by writing to the address in section 10; nothing deletes it automatically, and the IP address held in an entry made before 6 October 2026 is kept in the same way. That waitlist entry is separate from your account: creating an account does not remove it, and neither does deleting one.
"Test yourself": a test with no answers is deleted about a day after it was started, and any other test 14 days after it was started, unless you delete it sooner with "Delete my answers" or add it to your account. A result you add to your account becomes part of your account's data: it is kept while the account exists, is deleted with it, and never counts towards leaderboard points or your ELO rating. The hourly counts kept under a scrambled IP address are deleted within about 3 hours, and the daily keys used to scramble the addresses after 2 days. The counts kept to improve the test have no link to any test or person and are kept for 24 months.
7. YOUR RIGHTS
You can view and correct your information in the app at any time.
You can export a copy of your profile and settings from the mobile app and, if you are a student, your study data with them. Messages, lesson requests, reviews and your answers to individual questions are not included in the export; you can ask us for a copy of them by writing to the address in section 10.
You can delete your account in the app's settings or on our website at auth.elmly.app/auth/delete-account; section 6 explains what is deleted. You do not need to contact us or give a reason.
You can withdraw your permission for the AI features at any time by turning off "AI features" in Settings.
If you took "Test yourself" without an account, you can delete your answers at any time with "Delete my answers" on the result page; this deletes the test from our server at once. Counts that have no link to you are not affected.
You can turn off notifications at any time in settings. News about Elmly is sent only if you turn on announcements. Service messages about outages, security or changes to our terms are sent to every user.
You can ask us what we hold about you by writing to the address in section 10.
If a fairness check concerns you, you can ask us to explain the decision, give us your side, and ask for the decision to be looked at again by a person, by writing to the address in section 10.
8. SECURITY
Your data is transmitted over encrypted connections and stored with access controls that limit who can read each record. Some information is visible to other users because of how the service works: your name, bio and city, to other signed-in users; your profile photo, to anyone who has its link; if you teach, your teaching profile, to anyone (your availability only to signed-in users, and your certificates only to you and our staff); a student's place on the leaderboard, unless the student turns it off in settings; reviews, to anyone; your written answers in an exam made by a teacher, to that teacher; and your messages, to the person you are writing to. In the mobile app, authentication tokens are held in your device's secure storage. No system is perfectly secure, and we will tell you promptly if a breach affects your personal data.
9. CHILDREN
Elmly is intended for students aged 13 and over; children under 13 may not use it. If you are under 18, you may use Elmly with the agreement of a parent or guardian. We do not knowingly collect information from children under 13. If you believe a child under 13 has given us information, contact us and we will delete it.
10. CONTACT AND CHANGES
Questions, requests or complaints: support@elmly.app
If we change this policy we will publish the new version here with a new effective date, and tell you in the app when the change is significant. Continuing to use Elmly after a change means you accept the updated policy.