Privacy and data use
markpoint finds Cambridge International past paper questions and marks answers against the official mark scheme. This page describes stored data, access permissions, external services and data retention.
Stored data
| Data | Purpose |
|---|---|
| Your email address and display name |
To know whose work is whose. Signing in with Google asks for
openid and email only, so we never
receive your contacts, files, calendar or anything else in your
Google account.
|
| Your typed answers, handwriting, submissions, marks and feedback | To show you which mark points you earned and why the others were refused, and to work out which topics you are weakest on. |
| Questions you save, and your daily streak | To put them back on your dashboard. |
| Linked teachers and invited parents | To decide who may see your work. Nothing else decides it. |
There is no advertising here, no tracking across other websites, and nothing is sold or shared for marketing. There are no analytics or advertising cookies. The one cookie set is the one that keeps you signed in, plus a short-lived one during sign-in that exists to stop somebody forging the return from Google.
Access to your work
- You.
- A teacher you joined, by typing their join code or a class code. That link is what grants access, not the fact that somebody signed up calling themselves a teacher. A teacher who has no link to you sees nothing of yours.
- A parent a teacher invited for you specifically. A parent cannot look a child up by name or address; the invite code names one student, so it can only ever link the person holding it to that one. A parent can read and cannot answer or change anything.
- Us, to run and fix the service.
External services
These services receive information for the features described below.
- Google, for signing in. Google tells us your email address and that it has verified it. We never see your Google password.
- Google's Gemini API, for marking. When you submit an answer, the text of that answer and the mark scheme for that question are sent to Google's model API so each mark point can be judged. Your name and email are not sent with it. If you paste a screenshot of a question, that image is sent to the same API to be read back as text. Handwriting submitted for automated marking is also sent as an image to be read before marking.
- Resend, when assignment email notifications are enabled. It receives your email address and the notification, including your display name, teacher name, class, assignment title, due date and app link. Notifications do not include question text, citations or your answers.
The past papers and mark schemes are Cambridge International's copyright and are reproduced here for study.
Data location and retention
In one database, kept separate from the database of past papers, so that the paper corpus can be shared while the people data is not. Each school or organisation gets its own separate database rather than a shared one with a column marking who owns which row.
Your work is kept while your account exists. Ask us to delete it and it is deleted, along with the account. If a class ends, the class is archived rather than erased, so a teacher does not lose work they already marked. You can still ask for your own record to be removed.
Data requests
A copy of what is stored about you, a correction, or deletion. Email the address below and say which. If you are under 16, please ask a parent, guardian or teacher to email on your behalf.
About the service
markpoint is built and run by one person. It has not been through a security audit and it is not certified against any standard. If a school needs a data processing agreement or a formal retention schedule before using it, contact us to discuss those requirements.