Privacy policy

Who we are

Tomorrow's Marks (https://tomorrowsmarks.com) is run by [to be completed], [to be completed], Austria. Privacy questions: [to be completed].

For a self-study student’s or a parent’s own data, we decide how it is used, so we are the controller. If a tutor or a centre uses the service for their students, the tutor or centre is the controller and we process the data for them. That case is covered by the data processing agreement.

What we collect

• Your account: your email address and password. Our sign-in provider, Supabase, holds the password as a hash. We never see it.
• What you enter: your subjects, units, exam session and centre; your target grades; your week (when you can study, lunch, commitments); lessons; study sessions and their timed minutes; mistakes; past-paper scores; and your topic choices.
• What you upload: photos of your pages of work, and mark-scheme pages if you upload them.
• What the service works out: your plan, your readiness, projected score ranges, and markings (the marks per question, the reasons, the mark-scheme point cited, and the type of each error).
• AI-call records: which task ran, which model, how many tokens and what it cost. Never the content of the request.
• Server logs: our hosting provider logs each request, its time and the IP address, so the service can run and be kept secure.

We do not ask for your date of birth, school name, phone number, address or a photo of you. There are no public profiles, leaderboards, social features or location tracking.

There is no advertising, and no analytics or tracking that profiles individuals. There are no third-party cookies. Our only cookies keep you signed in and remember which account you are using. Your browser also keeps your light or dark choice and a running study timer on your device; neither is sent to us. Fonts come from our own site, so your browser makes no request to Google for them.

Why we use it

• To give you the service you signed up for (the plan, the marking, your records). This is the contract between us.
• To read and mark a page with AI, only for pages you upload: uploading starts it. Also the contract. Logging marks yourself avoids it entirely.
• For security, backups, stopping abuse and keeping AI costs under control. These are our legitimate interests.
• To keep records the law requires once payments exist. No payments are taken during early access.

How AI marking works

• You see the text we read from your page and confirm it before anything is marked.
• Every mark awarded or withheld cites the mark-scheme point. You can dispute any mark in one tap.
• A marking changes only your own study plan. It is not a grade, it does not go to any school or exam board, and it triggers no decision with legal or similarly significant effect.
• Marking can be wrong. It is an estimate to plan from, not an official result.

AI providers, and training on your pages

DeepSeek reads and marks uploaded pages. DeepSeek’s terms allow it to train its models on what it receives. So your handwriting, and any mark-scheme page you upload, may become training data. We chose it for cost. If you do not accept that, mark your work yourself and log the marks. Nothing goes to an AI provider then.

We send DeepSeek the page image or text and our instructions. We send nothing from your account: no name, email, account details or file name. The upload screen asks you to leave out pages with your name on. If your name is still on a page, it is removed from the text we keep.

Anthropic is on standby. We would use it only if we switched to it, and it does not train on what it receives. We never train any model on your data ourselves.

Who sees your data

• People in your account. A tutor sees the work of their own students in their account. A parent invited to a student’s account sees that student’s progress. Nobody outside the account sees anything.
• Nobody else with your uploads. Your uploads are never shown to, reused for or matched against anyone else. We build no library from uploads.
• Our sub-processors, only to run the service. Each one is on the sub-processor list.
• The law, only if we are legally required to share something.

We never sell data.

Where your data is processed

Our database, files and the app’s server are in the European Union (Frankfurt).

DeepSeek is in the People’s Republic of China. The European Commission has not found that China protects personal data adequately. A page you upload is sent there to be read and marked.

Anthropic and GitHub are in the United States. Anything they receive — pages, only if we switch marking to Anthropic; encrypted backups, for GitHub — goes under the safeguards those companies’ terms provide.

How long we keep it

• Study records: while your account exists.
• Uploaded pages: 12 months after upload, then deleted automatically. You can delete any upload sooner yourself, under Mark my work. They are all deleted when you close your account.
• AI-call records (no content): while your account exists, and deleted with it.
• A visitor who tried the service without signing up: everything is deleted 7 days after the last visit.
• Backups: we keep an encrypted copy made before each release for 30 days, and a monthly encrypted copy for 90 days. Data you deleted may stay in these until they expire. We never restore a closed account from them.

Closing your account

Go to Settings → Close my account. For 14 days you can reopen it and nothing is lost. After that we delete your files, every record and your login, within 30 days of your request.

Your rights

• See and download everything: Settings → Your data → Download my data. You get a JSON file of every record. Page images are opened in the app.
• Correct it: every record in the app can be edited.
• Delete it: Settings → Close my account, as above. You can also delete a single upload under Mark my work.
• Object, restrict, or ask anything else: email [to be completed]. We answer within one month.
• Complain: to the Austrian Data Protection Authority (Datenschutzbehörde), or to the data protection authority where you live.

Younger students

To create an account yourself you must be at least 16. We do not check your age. We ask you to confirm it when you sign up.

Younger students use the service through a parent’s or a tutor’s account, and that adult agrees for them. A tutor can add a student by name, without the student having a login. The tutor must have the permission of the student, and of a parent where needed. The data processing agreement makes the tutor responsible for that.

There are no nudges: no streaks that punish and no guilt notifications.

How we keep it safe

• Your files are in private storage that only your account can reach.
• Links to your files are short-lived and made on our server.
• Access rules in the database itself keep each account’s records apart.
• Connections are encrypted, and so are backups.

Contact

[to be completed], [to be completed], Austria. Email [to be completed].