Privacy Policy
Last updated: August 2025
1. Introduction
This Privacy Policy explains how IELTSflow ("we", "us", "our") collects, uses, and protects your personal information when you use our Platform. By using IELTSflow, you agree to the practices described here.
2. Information We Collect
Account information: When you register via Google OAuth, we receive your name and email address. If you register via email OTP, we collect your email address.
Practice data: Your exam responses, writing submissions, speaking recordings, quiz answers, study plan interactions, and vocabulary entries are stored to provide personalised diagnostics and progress tracking.
Usage data: We collect standard analytics including page views, feature usage, session duration, and device information to improve the Platform.
3. How We Use Your Information
We use your information to:
- Provide and maintain the Platform's features
- Generate AI-powered diagnostics and study recommendations
- Track your progress and band score progression
- Process subscription payments through Stripe
- Improve the Platform's features and user experience
- Communicate important updates about the Platform
4. AI Processing
Your writing submissions and speaking recordings are processed by AI models to generate evaluations. This processing occurs on our servers. We do not use your practice data to train external AI models. AI-generated evaluations are stored in your account to provide longitudinal progress tracking.
5. Data Sharing
We do not sell your personal information. We share data only with:
- Stripe: For payment processing. Stripe handles card data and is PCI DSS compliant.
- Supabase: For database hosting and authentication infrastructure.
- Cloudflare: For hosting and CDN services.
6. Data Retention
Your account and practice data are retained as long as your account is active. If you delete your account, we will remove your personal information within 30 days. Some anonymised, aggregated data may be retained for analytics purposes.
7. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Export your practice data
- Opt out of non-essential analytics
8. Security
We use industry-standard security measures including encrypted data transmission (TLS), encrypted data at rest, and secure authentication. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Children's Privacy
IELTSflow is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you are under 13, do not use the Platform.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform or by email. The "Last updated" date at the top reflects the most recent revision.
11. Contact
Questions about this Privacy Policy? Contact us at hello@ieltsflow.com.