Privacy policy
YouGrade is an online examination platform for schools. This policy explains what personal data we process, why, and the rights you have — including under applicable data-protection law such as the Saudi Personal Data Protection Law (PDPL).
Last updated: 2026-10-25
Who is responsible for your data
Each school decides what student and staff data is placed on YouGrade and acts as the data controller. YouGrade processes that data on the school's instructions as a data processor. For questions about a specific student record, contact the school first.
What we collect
Staff accounts: name, email address and role. Student records uploaded by schools: student ID, name, class and a parent mobile number. During exams: answers, uploaded photos of handwritten work, marks, and technical events such as tab-focus counts. We also keep standard server logs for security.
Why we process it
Only to operate the examination service: verifying students at the exam link, delivering papers, recording and marking answers, and reporting results to the school. We do not sell personal data, profile students for advertising, or use exam content for unrelated purposes.
Legal basis
Processing is performed under the school's instructions and the contract with the school. The school is responsible for having a lawful basis and for informing parents and students (PDPL Articles 4 and 12 require the controller to publish a privacy notice).
Sharing & subprocessors
Each school's data is isolated — staff see only their own school, and a student can access only their own exam after verification. We use a small number of service providers to run the platform (cloud hosting and email delivery); they may process data only to provide those services. The current list is on the Security page.
Retention & deletion
Data is kept while the school's account is active. Admins can delete rosters, plans and staff at any time; when a school account closes, its data is deleted from active systems and expires from backups on the normal backup cycle.
Your rights
You may request access to, correction of, or deletion of your personal data, and may withdraw consent where processing is based on it. For student data, contact the school (the controller). For staff accounts or platform questions, email {email}. We respond within a reasonable period.
Cookies
YouGrade uses only essential cookies — the sign-in session, security tokens and language preference. We do not use advertising or third-party tracking cookies, so no consent banner is needed.