Privacy notice
Last updated: 18 October 2026
1. Who is responsible for your data
The operator of Eighty Marks ("we") is the controller of personal data processed through Eighty Marks. Contact our privacy lead at [email protected].
2. What we collect
Account details: name, email address and a securely hashed password, and your CIMA contact ID if you choose to give it (we use it only to find your account when you contact us).
Study data: your exam level, exam date, weekly study hours, time zone, answers, marks, feedback and activity.
If you tell us where you work and who pays for your study (optional), we use it to understand who studies with us and to offer team places to employers. We never contact your employer or name them publicly without asking you first, and you can clear it in Settings at any time.
Purchase records from our payment provider (we never see your full card details).
Results-day feedback you choose to share, including any quote you agree we can publish.
Technical data needed to run and secure the service, such as IP address and browser type.
Where you first found us, if you arrived through a tagged link (a short source label such as a group or partner name).
3. Why we use it
To provide the service you signed up for (contract): your account, marking, feedback and study plan.
To email you about your own plan, such as when it is about to end and how to extend it (legitimate interests). Every such email has an unsubscribe link.
To keep the service secure and working well (legitimate interests).
To see which posts and partners bring sign-ups, from the source label above (legitimate interests).
To send exam tips and news, only if you subscribe (consent). You can unsubscribe at any time.
Only if you choose to, on an answer's feedback page: to show that answer and its marking, anonymously, as an example on our public site (consent). We remove anything that identifies you and check it by hand first. You can withdraw consent at any time, on the feedback page or in Settings, and we take it down straight away. If you delete your account, an example we have already published stays up (it carries nothing that identifies you); any we haven't published are withdrawn.
To meet legal and tax obligations (legal obligation).
4. AI processing
Your answers are sent to our AI provider, Anthropic (Claude), to mark them and give feedback. Under our agreement the provider does not use your data to train its models. We keep your answers, marks and feedback so you can review them. Our staff may review answers to check marking quality; we never use them to train AI models. We never publish your answers or share them outside the service, unless you choose to let us show one as an anonymous example (above). Messages to the AI mentor are saved so it can follow the conversation; you can clear them at any time with New conversation.
Mark any mock: the task text and files you upload are sent to Anthropic (Claude) only to mark your answer. We never add them to our question bank or show them to anyone else, and we delete them 30 days after your review is ready. Your answer and our review stay with your study data. A tutor mark you give is kept only if you agree we can use it, anonymised, to check our marking.
5. Support messages
When you contact us, in the app or with the contact form, we keep your name, email address, the topic, your messages and our replies, and the page you were on if you include it. If you use the contact form with the email address of an account, we link the conversation to that account. We use them only to help you, and to see earlier conversations when you write again (legitimate interests).
Our emails about a conversation never contain the messages: they link to it, in the app or through a private link that works for 30 days. Please don't send card details or passwords.
We keep conversations for 24 months after the last message, then delete them. They are in the copy of your data you can download, and deleting your account deletes them too.
6. Who we share it with
Service providers that help us run the service: hosting (Railway), email (SendGrid), payments (Stripe) and AI marking and mentoring (Anthropic (Claude)). They only use your data on our instructions.
We never sell your personal data.
7. If your employer pays for your place
If your employer pays for your place (an emailed invite or a team code), they can see: Your name and email address, the level and plan of your seat, and when you started; when you were last active; how many tasks were marked this week, and how many mocks you've completed; whether your recent practice is likely below, borderline or likely above the pass line, and a "ready to sit" flag. They never see your answers, the marks of individual tasks, your feedback or your conversations with Dot.
We show you this list before you accept the seat. Because your employer pays for the place and uses it to support your studies, this is shared while the seat is active (our lawful basis is the legitimate interests of you and your employer in a sponsored place), and it can't be switched off. If you'd rather your employer didn't see it, don't accept the seat, or buy your own plan.
Your employer also sees the email address an invite was sent to and whether it was accepted. Seats taken before 19 October 2026 keep the choice you made then: you can turn sharing on or off in Settings, under Employer sharing.
8. If you sign up through a partner
Some tuition providers, universities and CIMA societies have a Eighty Marks page or code. If you sign up through a partner's page or code, the partner sees only totals: how many students signed up and bought a plan through it each month, and the sales it earned a share of. Never your name, email, answers or marks.
We record which partner you came through on your account and on what you buy, to give you the partner's price and to pay the partner its share. If a partner buys your place for you, it is your employer for this notice: see the section above.
9. International transfers
Some providers are outside your country. Where data leaves the UK or EEA, we use approved safeguards such as standard contractual clauses.
10. How long we keep it
We keep your account and study data while your account is open and for 24 months after your last activity, then delete or anonymise it.
If you delete your account in Settings, we anonymise your account: your name, email, password, CIMA contact ID and settings are erased, so it can no longer be linked to you. Your study data (answers, marks, the reasoning behind each mark, feedback, mock attempts, progress and mentor messages) stays with the anonymised account. Exam answers don't carry your name. We use this anonymised record only to check and improve our marking, never to train AI models. Support messages, files you uploaded, your certificate and any quote you let us publish are deleted. An answer you let us show as an example stays only if we had already published it, without anything that identifies you.
Purchase records are the one exception: tax law requires us to keep them, so we keep them only for as long as it requires, and use them for nothing else.
11. Your rights
Depending on where you live, you can ask to access, correct, delete or export your data, object to or restrict how we use it, and withdraw consent.
You can do the two most common requests yourself, at any time, in Settings: download a copy of your data, and delete your account. Deleting erases your personal details and anonymises your account; we keep purchase records only because tax law requires it.
If you prefer, email us at [email protected] and we will do it for you. For any other request, email us at [email protected] too. You can also complain to your data protection authority (in the UK, the ICO).
12. Cookies
We use essential cookies to keep you signed in. We also set one first-party cookie (em_guide_visited) once you have read the 5 core chapters of the case study Guide, so Today can stop suggesting it. If you arrive through a link tagged with a source (?utm_source= or ?ref=), we set a first-party cookie (em_ref, 90 days) that holds only that short source label, so we know which post or partner your sign-up came from. If you arrive through a partner's page or link, we set a first-party cookie (em_partner, 30 days) that holds only the partner's code and when you arrived, so the partner's price and share apply if you sign up or buy. We don't use advertising or third-party cookies. If we add analytics, we'll ask first where the law requires. If you use the app on a phone or computer, lessons, review cards and feedback pages you open are saved in your browser so they work offline. They stay on that device and are deleted when you sign out.
13. Age
The service is for people aged 16 and over.