Privacy · REPS-IELTS

Who this is about

This policy covers REPS-IELTS at www.repsielts.com. We decide how your data is used, so we are the data controller. If you want to ask us anything about your data, write to support@repsielts.com.

What we collect

When you make an account

Your email address, and your first name if you give it.
Your password, which we never see. It is stored by Supabase as a hash, which is a one-way scramble that cannot be turned back into your password.
If you sign in with Google instead, Google sends us your name and email address. We do not receive your Google password.

What you tell us when you sign up

The questions in the sign-up flow: whether you are a student or a teacher, where you are in your studies, any IELTS score you have had before, the band you are aiming for, and when your exam is. We keep your answers because they are what your study plan is built from. If you tell us a previous score, we use it as your starting level instead of asking you to sit a test.

Your profile

Your country, your first language, your time zone, and which IELTS exam you take.
A profile photo, if you upload one.

All of these are optional. Your time zone is used so that a study day starts at midnight where you are, not where our servers are.

What you do when you practise

Every question you answer, what you answered, and whether it was correct.
Your band estimate for each of the four skills, and how it changes.
Your study plan, and which tasks you have finished.
The essays you write, and the feedback we give you on them.
The audio you record in a Speaking task, and the text version of what you said.

When you pay

Stripe takes the payment. Your card number goes to Stripe and never reaches us — we never see it and we could not store it if we wanted to. We keep a record of which plan you are on and whether it is active, so that we know what your account can use.

Technical records

Our host, Vercel, keeps normal server logs, which include your IP address and which pages you asked for. These are used to keep the site working and to find faults.

Why we are allowed to use it

Most of it is because you asked us to teach you: we cannot build a study plan or mark an essay without the data that goes into it. This is called performance of a contract. Server logs and fault reports are a legitimate interest, because a site that cannot be kept running is no use to you. We do not rely on consent for anything essential, and we do not do any advertising, profiling or automated decision-making that has a legal effect on you.

Who else sees it

These are the only companies your data reaches. Each one is given the smallest part of it that they need to do their job.

Supabase

Database, sign-in, and file storage

Your account, your profile, everything you practise, and your recordings

Vercel

Hosting

Technical request logs, including your IP address

Anthropic

Marking your Writing and Speaking answers

The essay text or the transcript of what you said, and the question it answered

Deepgram

Turning your Speaking recordings into text

The audio you record in a Speaking task

Stripe

Taking payment

Your email address and your card details, which go to Stripe and never to us

Google

Sign-in, only if you choose that button

Your name and email address, sent to us by Google

About the marking. When you submit an essay, the text goes to Anthropic, the company that makes Claude, which writes your feedback. When you record a Speaking answer, the audio goes to Deepgram, which turns it into text, and that text then goes to Anthropic to be marked. We use the paid business versions of both services, which under their current terms do not use what we send them to train their models. We do not send them your name or your email address, so what they receive is not connected to you by name.

These companies are based in the United States, so your data leaves your country if you are not there. We do not sell your data to anyone, and we do not share it with advertisers, because we do not have any.

Cookies

We use one kind of cookie: the one that keeps you signed in. It is set by Supabase when you log in, and without it you would be signed out every time you opened a new page.

There are no advertising cookies, no analytics, and no session recording on this site. We do not ask you to accept cookies because we do not set any that require your permission.

How long we keep it

While your account is open: we keep your practice history, because it is what your band estimate and your study plan are built from. Deleting it would reset your progress.
Your Speaking recordings: kept so that you can listen back to them next to your feedback. You can delete a recording without deleting your account.
Payment records: Stripe keeps these for as long as the law requires them to, which is longer than your account may last. This is a legal obligation and is out of our hands.
Server logs: kept by Vercel for a short period and then deleted automatically.

Your rights

You can ask us to:

Show you a copy of everything we hold about you.
Correct anything that is wrong.
Delete your account and everything in it.
Stop using your data for anything that is not essential.
Send your data to you, or to another service, in a file you can read.

Most of this you can do yourself in your account settings. For anything else, write to support@repsielts.com and we will answer within 30 days. You never have to pay to use these rights. If you think we have handled your data badly, you can complain to the data protection regulator in your country.

Deleting your account cannot be undone.When you delete it, we remove your profile, your practice history, your band estimates, your study plan, your essays, your Speaking recordings and your sign-up answers. None of it can be brought back, and we cannot restore your progress afterwards. If you are paying for a plan, deleting the account also stops the payments straight away, so you will not be charged again — but you lose the rest of the month you have paid for. To stop paying and keep the days you have already bought, cancel in your settings instead and delete the account later.

Children

This site is not for children under 16. If you are under 16, please ask a parent or guardian to make the account and agree to these terms for you. If we find out that we hold data about a child under 16 without that, we will delete it.

Keeping it safe

Your data is separated by account at the database level, so one student cannot read another student’s work even if they tried. All traffic to this site is encrypted. No system is perfect, and we will tell you without delay if anything happens that puts your data at risk.

Changes to this policy

If we change anything important, we will change the date at the top of this page and tell you by email before it takes effect. Small corrections of wording may be made without notice.