Privacy Policy
Last updated: 19 July 2026
This Privacy Policy explains how English with Arik(“we”, “us”, the “Service”) collects, uses, shares, and protects your personal data when you use our TOEFL iBT practice and mock‑test platform. The data controller is [LEGAL ENTITY NAME], contact infoenglishwitharik@gmail.com ([registered address / country]).
1. Data we collect
- Account data — your email address and name, and an encrypted password (managed by our authentication provider; we never see your plaintext password).
- Learning content you submit — your answers to practice and mock questions, your written responses (essays), and voice recordings of your spoken answers.
- Progress & results — scores, estimated band levels, feedback, usage counts, and activity history.
- Subscription & credit data — your plan tier, credit balances, and a ledger of credit changes. We do not collect or store card/bank details; payments are arranged manually (see §5).
- Technical data — a session cookie to keep you logged in, and standard server logs (e.g. IP address, timestamps) used for security and debugging.
2. How we use your data
- To provide the Service: deliver tests, score your answers, and show feedback and progress.
- To score Writing and Speaking, your text and audio are sent to AI processors for automated evaluation (see §4).
- To manage your subscription, credits, and access levels.
- To secure the Service (rate limiting, abuse prevention) and to provide support.
- To comply with legal obligations.
3. Legal bases (GDPR / UK GDPR)
Where the GDPR applies, we rely on:
- Performance of a contract — to provide the features you sign up for.
- Consent — for processing your voice recordings for Speaking assessment. You can withdraw consent at any time by not using the Speaking features and by deleting your recordings/account.
- Legitimate interests — to keep the Service secure and working, balanced against your rights.
- Legal obligation — where we must retain or disclose data by law.
4. Who we share data with (sub‑processors)
We do not sell your personal data. We share it only with service providers who process it on our behalf to run the platform:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database, authentication, hosting | Account, progress, submissions |
| Vercel [if used] | Application hosting | Technical/log data |
| OpenAI | Automated Writing & Speaking scoring | Your essay text and speaking transcripts |
| Microsoft Azure (Speech) | Speech transcription & pronunciation assessment | Your voice recordings |
| Anthropic (Claude) | Exam‑grade mock scoring | Your essay text and transcripts |
| Cloudinary | Storage of audio recordings & images | Your voice recordings |
| Meta / WhatsApp | Payment & plan‑activation messaging | Whatever you send us in chat |
Some of these providers are located outside your country (for example, in the United States). Where required, such transfers are covered by appropriate safeguards such as Standard Contractual Clauses.[Confirm each provider’s transfer mechanism.]
5. Payments
We currently activate paid plans and credits manually. When you contact us (e.g. via WhatsApp) to purchase, we process the details you provide to enable your plan. We do not store payment‑card numbers on the Service.
6. Data retention
We keep your data for as long as your account is active. When you delete your account (see §8), your account and associated data — including submissions and voice recordings — are permanently deleted from our systems, except where we must retain limited records to meet legal obligations.[State any statutory retention period that applies to you.]
7. Cookies
We use only essential cookies necessary to keep you signed in and secure. We do not use advertising or third‑party tracking cookies. [Update this if you add analytics.]
8. Your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you, and receive a copy (portability).
- Correct inaccurate data.
- Delete your account and data — you can do this yourself from Account & data, or email us to request it.
- Restrict or object to certain processing, and withdraw consent (e.g. for voice recordings).
- Lodge a complaint with your local data‑protection authority.
To exercise any right, use the in‑app controls or contact infoenglishwitharik@gmail.com.
9. Children
The Service is not directed to children under [16 / the age required in your country]. If you believe a child has provided us personal data, contact us and we will delete it.
10. Security
We protect data with access controls, encryption in transit, and least‑privilege server access. No method of transmission or storage is 100% secure, but we work to protect your information and to notify you of serious breaches where legally required.
11. Changes
We may update this policy; we will change the “Last updated” date above and, for material changes, notify you in‑app or by email.
12. Trademarks
TOEFL iBT® is a registered trademark of Educational Testing Service (ETS). This Service is an independent preparation tool and is not affiliated with, endorsed by, or sponsored by ETS. Scores shown are unofficial estimates.