Privacy Policy

This proctoring service is run by Mtaaluma on behalf of the institution that invited you to the exam. That institution decides why your data is processed and is the controller of it; Mtaaluma processes it only on the institution's instructions. Questions about this policy or your data: privacy@mtaaluma.com, or the exam office of your institution.

• Your name and email address, as provided by your institution.
• Biometric data: a photo of your government-issued ID and a photo of your face, used to verify that the person taking the exam is you.
• Video and audio from your camera and microphone, and your screen, for the duration of the exam. Audio may be transcribed.
• Automated detection signals during the exam, such as your face not being visible, another person or a phone in view, speech, or leaving the exam tab.
• Technical data: browser, operating system, screen resolution, connection type, and the IP address from which you gave consent.
• Messages exchanged with the proctor during the exam.

Only to verify your identity and to supervise the integrity of the exam on behalf of your institution. It is not used for advertising, sold, or used to train general-purpose AI models.

Biometric data and recordings are processed on the basis of your explicit consent, which you give at check-in, and the institution's need to run a fair exam. If you do not consent, you cannot take a proctored exam through this service; ask your institution about alternatives.

The AI flags events for a person to review. A flag is not a finding of misconduct, and decisions about your exam are made by people at your institution, who can see the recording and context behind each flag.

Authorised staff of your institution (proctors, reviewers and administrators), and Mtaaluma staff where needed to run and support the service. Data is stored on servers operated by Mtaaluma and its hosting and backup providers, who are bound to protect it and may not use it for their own purposes.

Recordings, photos and detection data are deleted automatically after your institution's retention period — 90 days after the exam session unless your institution has set a different period. Encrypted backups may hold a copy for up to 30 further days before it is overwritten.

Data is encrypted in transit and recordings are encrypted at rest; backups are encrypted before they leave our servers. Access is restricted to authorised staff of your institution, and each institution's data is kept separate from others'.

You can ask for a copy of your data, for corrections, or for it to be deleted, and you can withdraw your consent for future processing. Contact your institution or privacy@mtaaluma.com. Deletion requests remove your recordings, photos, detection data, incidents and personal details; the institution may keep a record that an erasure took place. You may also complain to the data protection authority in your country.

If this policy changes, the version above changes and you will be asked to consent again at your next check-in.