Privacy
What we collect, why we collect it, and who else can see it. The factual sections below are written from what the service actually does, not from a template.
Draft — not yet in force
This document is under review and is not a binding agreement. The factual sections describe what the service does today; the highlighted gaps are still to be settled. Nothing here should be relied on until this notice is removed.
What we collect
When you create an account we store your name, email address, and — if you sign up with a password rather than Google — a hashed password. We never store a password in a form we can read.
As you practise we store your exam attempts: your answers, when each section started and was submitted, and the bands awarded. For Listening we also record which audio tracks you have played, because each track can only be played once.
Speaking practice records your voice. Those audio files are stored on our own server so they can be listened to and scored against the band descriptors. They are never public: every playback goes through an access check, and the file location is never a link anyone can share.
Who else sees it
We keep the number of third parties small, and none of them receives your exam answers or your Speaking recordings:
- Google — only if you choose to sign in with Google, which tells us your name and email address.
- Resend — sends our transactional email (password resets, address verification), and therefore handles your email address.
- Sentry — receives technical error reports when something breaks, so we can fix it.
- Amplitude — receives product analytics about which features are used.
- Cloudflare — sits in front of the site and tells us the country your request came from, so we can show relevant destination information. We do not look your IP address up in any other service.
We do not sell your data, and we do not run advertising.
Deleting your account
You can delete your account yourself from account settings. Deleting removes your account, your attempts, your answers and your results — and it deletes your Speaking recordings from our servers, rather than merely unlinking them. It cannot be undone.
To be confirmed: how to request deletion or a copy of your data by email, and the address to use
How long we keep it
Today, data stays until you delete your account. We have not yet set automatic retention limits.
To be confirmed: retention periods for accounts, exam attempts and Speaking recordings, including inactive accounts
Where your data is held
Your account and exam data sit in a PostgreSQL database, and Speaking recordings sit on a disk, both on a server we control.
To be confirmed: the hosting region, and the basis for any transfer outside it
Who we are, and your rights
To be confirmed: the legal entity operating this service, its registered address, the governing law, and the rights that follow from it (access, correction, portability, complaint)