English with Arik← Back to home

Privacy Policy

Last updated: 19 July 2026

This is a general template provided for convenience and is not legal advice. Review it with a qualified professional before relying on it.

This Privacy Policy explains how English with Arik(“we”, “us”, the “Service”) collects, uses, shares, and protects your personal data when you use our TOEFL iBT practice and mock‑test platform. The data controller is [LEGAL ENTITY NAME], contact infoenglishwitharik@gmail.com ([registered address / country]).

1. Data we collect

  • Account data — your email address and name, and an encrypted password (managed by our authentication provider; we never see your plaintext password).
  • Learning content you submit — your answers to practice and mock questions, your written responses (essays), and voice recordings of your spoken answers.
  • Progress & results — scores, estimated band levels, feedback, usage counts, and activity history.
  • Subscription & credit data — your plan tier, credit balances, and a ledger of credit changes. We do not collect or store card/bank details; payments are arranged manually (see §5).
  • Technical data — a session cookie to keep you logged in, and standard server logs (e.g. IP address, timestamps) used for security and debugging.

2. How we use your data

  • To provide the Service: deliver tests, score your answers, and show feedback and progress.
  • To score Writing and Speaking, your text and audio are sent to AI processors for automated evaluation (see §4).
  • To manage your subscription, credits, and access levels.
  • To secure the Service (rate limiting, abuse prevention) and to provide support.
  • To comply with legal obligations.

3. Legal bases (GDPR / UK GDPR)

Where the GDPR applies, we rely on:

  • Performance of a contract — to provide the features you sign up for.
  • Consent — for processing your voice recordings for Speaking assessment. You can withdraw consent at any time by not using the Speaking features and by deleting your recordings/account.
  • Legitimate interests — to keep the Service secure and working, balanced against your rights.
  • Legal obligation — where we must retain or disclose data by law.

4. Who we share data with (sub‑processors)

We do not sell your personal data. We share it only with service providers who process it on our behalf to run the platform:

ProviderPurposeData involved
SupabaseDatabase, authentication, hostingAccount, progress, submissions
Vercel [if used]Application hostingTechnical/log data
OpenAIAutomated Writing & Speaking scoringYour essay text and speaking transcripts
Microsoft Azure (Speech)Speech transcription & pronunciation assessmentYour voice recordings
Anthropic (Claude)Exam‑grade mock scoringYour essay text and transcripts
CloudinaryStorage of audio recordings & imagesYour voice recordings
Meta / WhatsAppPayment & plan‑activation messagingWhatever you send us in chat

Some of these providers are located outside your country (for example, in the United States). Where required, such transfers are covered by appropriate safeguards such as Standard Contractual Clauses.[Confirm each provider’s transfer mechanism.]

5. Payments

We currently activate paid plans and credits manually. When you contact us (e.g. via WhatsApp) to purchase, we process the details you provide to enable your plan. We do not store payment‑card numbers on the Service.

6. Data retention

We keep your data for as long as your account is active. When you delete your account (see §8), your account and associated data — including submissions and voice recordings — are permanently deleted from our systems, except where we must retain limited records to meet legal obligations.[State any statutory retention period that applies to you.]

7. Cookies

We use only essential cookies necessary to keep you signed in and secure. We do not use advertising or third‑party tracking cookies. [Update this if you add analytics.]

8. Your rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you, and receive a copy (portability).
  • Correct inaccurate data.
  • Delete your account and data — you can do this yourself from Account & data, or email us to request it.
  • Restrict or object to certain processing, and withdraw consent (e.g. for voice recordings).
  • Lodge a complaint with your local data‑protection authority.

To exercise any right, use the in‑app controls or contact infoenglishwitharik@gmail.com.

9. Children

The Service is not directed to children under [16 / the age required in your country]. If you believe a child has provided us personal data, contact us and we will delete it.

10. Security

We protect data with access controls, encryption in transit, and least‑privilege server access. No method of transmission or storage is 100% secure, but we work to protect your information and to notify you of serious breaches where legally required.

11. Changes

We may update this policy; we will change the “Last updated” date above and, for material changes, notify you in‑app or by email.

12. Trademarks

TOEFL iBT® is a registered trademark of Educational Testing Service (ETS). This Service is an independent preparation tool and is not affiliated with, endorsed by, or sponsored by ETS. Scores shown are unofficial estimates.