Privacy policy

Account data: name, email address, password hash, and the preferences you set during onboarding — target band, test date and which test you are preparing for.

Learning data: your test attempts, individual answers, essays, band scores, study plan and progress.

Voice recordings: audio you record in the Speaking Studio, and the transcripts produced from it.

Technical data: IP address, device and browser information, and pages visited. Used for security, fraud prevention and improving the service.

Payment data is handled entirely by Stripe. We store only a customer reference, the plan, and invoice history — never your card number.

To provide the service you asked for — performance of a contract.

To keep the platform secure and prevent abuse — legitimate interests.

To send marketing email — consent, which you can withdraw at any time without affecting the service.

To process voice recordings for assessment — explicit consent, collected separately before your first recording and withdrawable at any time.

Your written and spoken submissions are sent to third-party AI providers to be assessed against the IELTS criteria. Our providers do not use your submissions to train their models.

When the model is uncertain, a human examiner employed or contracted by us reviews the submission. Examiners see your first name and band history, and the submission itself. They do not see your email address, phone number or payment details.

You can opt out of AI assessment. Doing so means Writing and Speaking are marked only by human examiners, which is slower and may be limited by your plan.

Voice recordings: 12 months by default. You can shorten this to 30 days, or delete individual recordings at any time, in your settings.

Essays, transcripts, attempts and results: for the life of your account.

Security and audit logs: up to 7 years, as required for fraud investigation.

After account deletion we keep only anonymised attempt statistics, which cannot be linked back to you.

Access and portability: export everything we hold about you as machine-readable data, from Settings → Data.

Erasure: delete your account from the same screen. Deletion is soft for 30 days so it can be undone, then permanent.

Rectification, restriction and objection: contact us and we will action it.

Complaint: you may complain to your local data protection authority at any time.

We share data only with the processors needed to run the service: hosting, database, object storage, email delivery, payment processing, AI assessment, speech-to-text, and error monitoring.

Where a processor is outside your region, transfers are covered by standard contractual clauses or an equivalent safeguard.

We never sell your personal data.

Data is encrypted in transit and at rest. Passwords are stored as salted hashes and are never recoverable.

Access to production data is restricted, logged, and requires two-factor authentication.

If a breach affects your data and poses a risk to you, we will tell you and the relevant authority within the legally required time.