Last updated 5 October 2026
Redpen marks Cambridge exam scripts. To do that it has to handle photographs of student work — which means it handles information about children. This policy says plainly what we collect, where it goes, and what we will not do with it.
Redpen is operated by Waleed Aamer, a sole trader based in Lahore, Pakistan. Throughout this policy "we" means that operator, and "you" means the account holder — usually a teacher.
We do not see or store your card. Payments are taken by Polar, who act as the merchant of record. We receive only the fact that a payment succeeded, its amount, and the email address you used. Polar's own privacy policy governs what they hold.
How many scripts you marked, what they cost to process, and what your balance is — the record behind your credits page.
About student data. When you photograph a script you are uploading information about another person, usually a child. You are responsible for having the right to do that — through your school, the parents, or whatever your local law requires. We process that material on your instructions and for no other purpose.
Script photographs are sent to Anthropic's Claude models, which read the handwriting and mark it against the scheme. This is the core of the service and cannot be switched off while using it.
Student work is not used to train any AI model. We use Anthropic's commercial API, under terms where submitted content is not used for model training. We do not use it to train anything of our own either.
Beyond marking, we use what we hold to run your account, bill you correctly, answer you when you ask for help, and find faults when something goes wrong.
We use a small number of services to run Redpen. Each sees only what its job requires.
We do not sell your information, and we do not share it for advertising. We will disclose it if the law requires us to, and we will tell you when we are permitted to.
When you delete a sitting, the photographs and the marking go with it. Deletion from backups follows within thirty days.
Write to us and we will, within a reasonable time:
Depending on where you live, you may have these rights by law — under the UK and EU General Data Protection Regulation, among others. We extend them to everyone regardless.
Redpen's servers and the services above operate in several countries, so your information is processed outside Pakistan and may be processed outside your own country. By using Redpen you accept that. We choose providers who commit to protecting it in transit and at rest.
Redpen is for teachers and for students aged 13 and over. It is not directed at younger children and we do not knowingly create accounts for them.
This is separate from the scripts themselves, which will often be the work of children. Those are uploaded by a teacher, not by the child, and are covered by the note above.
Access requires a signed-in session. Traffic is encrypted in transit. Only the account that uploaded a script can see it or its marking.
No system is perfect, and we will not pretend otherwise. If a breach affects your information we will tell you, and we will tell you what happened rather than what sounds best.
If this policy changes materially we will say so in the app and update the date at the top. Continuing to use Redpen after that means accepting the new version.
Questions, requests, or complaints: [email protected]