Student Privacy Notice

What Is Viva?

Viva is an oral-assessment platform. When you submit your work, you will have a short spoken conversation with an AI about it. This is to check that you understand what you submitted. A teacher will always review the result before any grade is given to you; the AI never makes the final grading decision, your teacher does.

What Information Does Viva Collect?

• Your name and school email address (to create your account)
• Your submitted work (the assignment or essay you upload)
• A recording of your voice during the oral interview
• A transcript (written version) of the interview
• Your AI-suggested score and your teacher's final grade
• The time and date of your interview

Optional — only if your school turns this on, and only with your consent:

• A voiceprint: a short voice sample used to verify it is you taking the interview. This is not used for grading. It is used only to flag possible impersonation to your teacher. Enabling this feature requires its own separate consent, in addition to anything else described in this notice.

How Is This Information Used?

• To conduct your oral assessment
• To give your teacher a suggested grade and feedback to review
• To allow your teacher to listen back to your interview if needed
• To provide you with feedback on your performance

Your information is never used to:

• target you with advertising;
• train AI systems beyond what your school has explicitly permitted; or
• be shared with third parties for commercial purposes.

Where Is Your Information Stored and Processed?

Viva is a US company, and the information described above is processed in the United States. Viva also works with a small number of specialist technology providers to run the platform, for example, providers that securely store files and run the AI that generates interview questions, conducts the spoken interview, produces grading suggestions, and (if enabled) checks your voiceprint. These providers are also based in the United States.

If your school is located outside the US, this means your information is transferred overseas, which your country's data protection law may regulate. Your school's agreement with Viva includes the appropriate cross-border transfer documentation for your country (for example, a Korea PIPA Addendum for schools in Korea, or EU/UK Standard Contractual Clauses for schools in the EEA/UK). A copy, including the full list of providers, is available from your school on request.

How Long Is Your Data Kept?

• Voice recording of your interview: deleted within 30 days of your session
• Interview transcript and grades: kept for the duration of your school's contract with Viva, plus up to one year, then deleted
• Voiceprint (if enabled): deleted within 90 days of your account closing

Who Can See Your Data?

Your teacher(s) and authorized school administrators have access to:

• your submitted work (the assignment you uploaded);
• the AI-suggested grade, structured feedback, and interview transcript; and
• the full audio recording of your oral interview, for up to 30 days after your session, for the purposes of grading review and academic integrity assessment.

Teachers may listen to the recording within the Viva platform. They may not download, share externally, or use recordings for any purpose other than assessment review.

Viva's own staff may access your data only where strictly necessary to operate the service (for example, to investigate a technical issue).

Technology providers listed in Viva's Data Processing Agreement may process your data as part of operating the platform, under written contracts requiring them to protect your information to at least the same standard as Viva.

Viva does not sell your personal data, and does not share it with any other third party.

Your Rights and How to Use Them

You (or your parent/guardian, where applicable, see below) have the right to:

• Access: ask to see the data Viva holds about you
• Correction: ask for incorrect data to be corrected
• Deletion: ask for your data to be deleted (subject to your school's legal record-keeping requirements)
• Recording access: ask to listen to your interview recording (available for up to 30 days)

To exercise these rights, contact your school's data protection contact, who will liaise with Viva on your behalf. You can also contact Viva directly at privacy@vivaproof.com.

You may also have the right to complain to your country's data protection authority (for example, the PIPC in Korea, the ICO in the UK, or the FTC in the US).

For Parents and Guardians

Under your country's law, additional guardian consent may be required below a certain age (for example, under 14 in Korea, under 13 in the US and UK). Viva is intended for students aged 14 and older; your school is responsible for obtaining any guardian consent that applies.

Regardless of age, parents and guardians may still:

• review the personal data collected about their child;
• request correction or deletion of their child's data; and
• refuse or withdraw consent for optional features (such as the voiceprint).

Contact your school's data protection contact or privacy@vivaproof.com to exercise these rights.

Questions?

Contact your school: your school's data protection contact

Contact Viva directly: privacy@vivaproof.com · vivaproof.com

Your school is the data controller. Viva Proof, Inc. is the data processor.