Privacy Policy

IELTSway is an independent online IELTS preparation platform. We are not affiliated with the British Council, IDP, or Cambridge Assessment English. For any privacy question you can reach us at ieltswayonline@gmail.com or through the in-app Support page.

We collect only the data needed to run the Service:

• Account data: your name, email address, and a securely hashed password. We also store email-verification status and one-time codes used during sign-up.
• Profile data: name and phone number are required during onboarding. Optional profile information includes photo, country, native language, target band score, exam date, and notification preferences. The native app currently sets the registration country to Uzbekistan; website profile settings offer additional country and language choices.
• Learning & usage data: your test attempts, answers, band scores, progress history, saved mistakes, and game scores (e.g. Typing and Word Race leaderboards). While you are signed in, we also record foreground activity signals, broad section categories, client platform, last activity times and daily active-time estimates. Authorized administrators use these first-party records to understand service usage and purchase journeys, including Premium views, selected plans and payment methods. These signals do not include page URLs, search terms, answers or recordings.
• Speaking & writing submissions: the text you write and the audio you record for Writing and Speaking practice, which are processed to generate an automated band score and feedback.
• Payment data: if you upgrade to Premium, we record your plan and its expiry. Where purchases are offered, payment providers such as Payme, Click, Octo, Polar, or Google Play process the payment. We keep order references, amounts, status, selected plan, promo-code attribution and access expiry. We do not receive or store full card numbers. The Google Play consumption-only Android release offers no purchases; it reads access already associated with your account.
• Communications: messages you send through Support and referral activity (your referral code and who invited you).
• Technical data: essential cookies for authentication and basic log data (such as IP address, browser/client information, request times and errors) needed for security and reliability. The native app uses a revocable device-session token stored in Android Keystore-backed secure storage; only its hash is stored on our server. We keep first-party usage and AI-processing metrics, including activity, durations, errors and processing costs, to operate and improve the Service. No advertising ID or location permission is used by the native app.

• To provide and operate the Service, including grading tests and tracking progress.
• To generate AI-based scores and feedback for your Writing and Speaking practice.
• To create and secure your account and keep you signed in.
• To process Premium upgrades and manage access.
• To send essential emails such as verification codes and account notifications.
• To run referrals and leaderboards, and to respond to your support requests.
• To prevent abuse, fraud, and to keep the platform secure.

To score and give feedback on Writing and Speaking, the relevant text and audio recordings are sent to Google Gemini, through the Gemini API or Google Cloud Vertex AI as configured on our server, for processing. This data is used only to produce your results and is not used by us to build advertising profiles. We send only what is necessary for grading. AI feedback and band estimates are practice guidance, not official IELTS examination results.

Microphone permission is requested only when you choose to record a Speaking answer. Recording starts after you press Record and grant permission, stops when you stop it or leave the foreground, and is not used for background listening. Recordings are uploaded when you submit your answers for assessment. Submitted recordings, transcripts, Writing text and feedback are stored with your practice attempts until the attempt or account is deleted. Audio access is restricted to your account and authorized teaching/support functionality. Local unsubmitted drafts remain on the device until submitted, removed, or signed out; signing out or deleting the account clears native drafts and recordings.

We share limited personal data with trusted third parties solely to operate the Service. We do not sell your personal data. These include:

• Google Gemini / Google Cloud Vertex AI — AI processing of the practice text and recordings you submit.
• Payment providers — processing payments where offered and confirming order status. Card information is entered directly with the provider.
• Email providers (Gmail / Resend) — sending verification codes and notifications.
• Messaging (Telegram) — internal admin alerts for support and payment confirmations.
• Amplitude — product analytics: page categories, registration, test starts/completions, Premium views, promo discount percentages and checkout/payment status. Events use an internal account identifier when signed in. We do not send names, email addresses, phone numbers, passwords, essays, recordings, transcripts, promo-code text or full page URLs to Amplitude. Session Replay and automatic form/click capture are disabled.
• Google Analytics — website traffic and usage measurement, including page views, referring pages, browser/device information and interactions enabled in Analytics. Google Analytics uses cookies to distinguish visitors and sessions.
• Hosting infrastructure — secure servers that run the application and database.

We keep your personal data for as long as your account is active or as needed to provide the Service. You may ask us to delete your account and associated data at any time, after which we will remove it except where we must keep certain records for legal or security reasons. Account-linked practice attempts, private recordings, sessions and support records are removed by account deletion. Uploaded profile images are removed. Usage and AI-cost statistics may remain only after their account link and identifying references are removed. Provider-held records, support alerts, security logs and backups may have separate retention requirements; contact us about deletion of those copies. They are not used to restore a deleted account as an active account.

Live activity uses a 90-day retention window for daily totals and last-activity records; individual foreground-session details use a one-day window. Expired records are cleared by periodic cleanup when the service is used. These account-linked activity records are also removed when the account is deleted.

You can:

• Access and update most of your data directly from your Profile page.
• Request a copy of your data through Support or by email.
• Request deletion of your account and personal data.
• Withdraw consent or object to certain processing by contacting us.

To exercise any of these rights, email ieltswayonline@gmail.com or use the in-app Support page.

In the Android app, sign in, open Profile, select Delete account and confirm. On the website, open Profile → Edit → Delete account. This permanently deletes the account and associated personal data rather than only signing you out.

If you cannot access your account, or prefer email, send an Account Deletion Request from the email address associated with your IELTSway account to adiz.makhammadjonov@gmail.com. We may verify ownership before deleting your account. Do not send your password. Information required for legitimate legal, accounting, fraud-prevention, security or regulatory obligations may be retained separately.

Both methods are explained at https://ieltsway.online/delete-account. Deleting an account does not itself cancel an independently managed subscription; manage any existing subscription with its provider.

We use essential cookies to sign you in and keep your session secure, and Google Analytics cookies to measure website visits and usage. The Amplitude browser integration uses in-memory identifiers and does not persist analytics cookies or browser-storage identifiers. Signed-in Amplitude events can be associated with your internal account identifier. You can manage or block cookies through your browser settings. We do not use cookies for third-party advertising.

Passwords are stored using strong one-way hashing, traffic is encrypted with HTTPS/TLS, and access to personal data is restricted. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

The Service is intended for IELTS candidates and is not directed at children under 13. If you believe a child has provided us with personal data, please contact us so we can remove it.

Premium is an optional paid upgrade and access is digital and activated immediately after a confirmed payment. The same refund rules apply whether or not a promo code was used:

• If payment succeeds but access is not granted, we will activate access or refund the payment.
• Duplicate payments are refunded. Activated digital access is otherwise generally non-refundable, except where required by applicable law.

See the Public Offer for the complete purchase terms. To report an eligible issue, email ieltswayonline@gmail.com or use the in-app Support page.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Significant changes may also be communicated in-app or by email.

Questions about this policy or your data? Email ieltswayonline@gmail.com.