Privacy Policy

1. Data we collect

• Account data: your name, email address, and a securely hashed password.
• Study profile: target module, target band, exam date and country (optional).
• Practice data: your answers, including written responses and audio recordings, and the scores/feedback generated.
• Usage data: pages viewed and features used, to operate and improve the Service.
• Payment data: processed by our payment provider — we do not store your full card details.

2. How we use your data

• To provide practice, mock tests and AI band scoring.
• To maintain your account, history and progress tracking.
• To process payments and manage subscriptions.
• To improve the Service and provide support.
• To send essential service emails (and, only with consent, product updates).

3. Third-party processors

We share data with trusted service providers only as needed to run the Service:

• Cloud hosting and database providers (to run the platform).
• Amazon Web Services (S3) — to store Speaking audio recordings.
• Our IELTS Speaking evaluation service — to transcribe your audio and generate Speaking band scores from it.
• Google (Gemini) — to generate Writing band scores from your text.
• Our payment processor — to handle billing.
• These providers process data under their own terms; we share only what is necessary.

4. Cookies & sessions

We use a strictly-necessary session cookie to keep you signed in. We do not use advertising cookies. The session token is stored only as a hash on our servers.

5. Data retention

We keep your data while your account is active. If you delete your account, your personal data and practice history are permanently removed, subject to any retention required by law.

6. Your rights

Depending on your location, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. You can update your profile or permanently delete your account from your settings, or contact us to exercise any right.

7. Security

We use industry-standard measures including password hashing, encrypted connections and access controls. No system is perfectly secure, but we work to protect your data and will notify you of any breach as required by law.

8. Children

The Service is not directed at children under 16, and we do not knowingly collect their data.

9. International transfers

Your data may be processed in countries other than your own. Where required, we put appropriate safeguards in place for such transfers.

10. Changes & contact

We may update this policy and will notify you of material changes. For any privacy request, email support@ieltsvega.com.