Privacy policy, in plain language

This is a plain-language summary, not a binding legal document. It describes what QPAssess does today and has not yet been reviewed by a lawyer; binding terms come with your institution's agreement. Last updated October 30, 2026.

QPAssess is an oral-assessment product made by QuestionPunk. This page explains what personal information it handles, why, who can see it, how long it is kept, and how to ask us to delete it. The technical detail behind each statement is on the trust center, and the companies that process data for us are listed on the subprocessor page.

Whose information, and what

Students: name and email; the microphone audio of the assessment and its transcript; webcam or screen video, only when the professor turns that on; scores and feedback; and the network address an attempt connected from. Only when the professor asks for them: an ID photo, the text of an essay, or uploaded files.
Professors: name, email, institution, an optional role, a password stored hashed (or a Google or Microsoft sign-in instead), and login session records.
Website visitors: only what you type into the demo-request form. There is no advertising or third-party analytics.

The complete list, with what each item is for, is under “What we collect” on the trust center.

What it is used for

To run the assessment, to propose a provisional score against the professor's rubric, and to let the professor review and grade the work. The AI's score is a proposal: the professor can change any score, and the grade is theirs. We do not sell personal information or use it for advertising. Which AI models see what, and what their providers do with it, is on how AI is used.

What students are told before they are recorded

Audio: the start screen of every assessment says, under the Start button, that the student's audio answers will be recorded and reviewed by their professor. There is no separate checkbox for audio; starting the assessment is the student's choice.
Webcam and screen: recorded only on assessments where the professor turned them on, and only after the student reads a recording notice and ticks a box agreeing to it.
ID photo: requested only when the professor turns on the ID check. Agreeing is optional, and a student who declines still takes the assessment.

Who can see it

The professor who owns an assessment can see its recordings, transcripts and scores; recordings play through links that expire after 15 minutes. Students see their own results when they are released to them. No student can see another student's work.

How long it is kept

Recordings and transcripts are kept today until the professor deletes the student's attempt, or until we delete them on request. Automatic deletion 12 months after an assessment closes is built and being switched on in stages; this page will say so on the day it is on.
Scores, grades, and the professor's notes and comments are kept after recordings are deleted, so gradebooks and exports keep working. So is the AI's written explanation of each score, which may paraphrase or briefly quote what the student said.
When a professor deletes a student's attempt, its transcript and scores are deleted at once. Its recording files are deleted by hand, on request.
ID photos have their own schedule: deleted as soon as the professor confirms them, otherwise after 120 days, or up to 365 days if the professor flags them.
Other things a student submits — the text of an essay for an essay defence, uploaded files, and the transcripts of practice sessions — are not on an automatic schedule yet. We delete them on request.

Asking to see or delete data

Email jake@questionpunk.com to ask what we hold about you, or to have it deleted.

What we don't claim

We do not claim GDPR, FERPA or SOC 2 compliance or certification. What we have and have not built is listed on the trust center.

When this page changes

When what QPAssess does with personal information changes, this page changes with it, and the date at the top moves.