1. What we collect
- Account data — your name, email address, and hashed password (or Google account ID if you use Google Sign-In).
- Learning data — essays you submit, practice answers, test results, vocabulary progress, and chat messages with our AI tutor (Liz).
- Payment data — processed by PayPal or SePay. We store the transaction ID and plan purchased, never your full card details.
- Technical data — basic request logs (IP, user agent, timestamps) for security and debugging.
2. How we use it
- To run the service: authenticate you, score your essays, track your progress, deliver lessons.
- To improve the product: aggregate, non-identifying metrics (e.g., average band scores by country). We do not train public AI models on your essays.
- To contact you: transactional emails (email verification, password reset, receipts). You can opt out of product updates at any time.
3. Who we share it with
We share data only with service providers needed to run ieltsace.app:
- Anthropic (AI evaluation and tutoring — your essay and chat text are sent to their API for processing).
- Azure (text-to-speech for Liz's voice).
- PayPal and SePay (payment processing).
- Google (if you use Google Sign-In).
We never sell your data and we don't use it for advertising.
4. How long we keep it
We keep your account and learning data while your account is active. If you delete your account, we remove personal data within 30 days. Anonymized aggregates and legally-required records (e.g., tax receipts) may be retained longer.
Specific retention windows:
- Essays you submit — kept in your account history so you can revisit feedback. We do not use your essays to train public AI models, and we don't sell them.
- Speaking audio recordings — retained for up to 90 days to let you replay your session and compare progress, then automatically deleted. Transcripts and band scores remain in your history.
- Session recordings & analytics — we use PostHog and Microsoft Clarity to debug UX issues. These tools record clicks and page navigation but mask all text inputs — your essay content, speaking audio, and chat messages with Liz are never captured by session recording. Analytics events are kept up to 12 months.
- Account deletion — request from your profile page or by emailing us. All personal data is removed within 30 days; backups are purged within 90 days.
5. Your rights
You can access, export, correct, or delete your data at any time from your profile page, or by emailing us. If you are in the EU/UK, you have rights under GDPR; if you are in California, under CCPA.