Privacy Policy

YourIELTSPrep is operated by Nishkarsh Dubb ("we", "us"), trading as YourIELTSPrep, who provides the website and application at yourieltsprep.com, an AI-assisted IELTS practice service. We are the data controller for the personal data described in this policy. You can reach us at privacy@yourieltsprep.com.

Payments for paid plans are handled by our online reseller and Merchant of Record, Paddle.com, which acts as an independent controller for the billing data it collects — see section 5 below.

YourIELTSPrep is an independent study tool. We are not affiliated with, endorsed by, or connected to the British Council, IDP: IELTS Australia, or Cambridge University Press & Assessment.

• Account data. Your email address, and — if you sign in with Google — the name and profile image your Google account shares with us. Passwords are stored only as salted hashes by our authentication provider; we never see them.
• Profile and study data. First and last name, exam type (Academic or General Training), current band, target band, planned test date, study streak and daily goals — all optional and supplied by you.
• Practice content. The essays, answers and task attempts you submit, together with the generated tasks, band estimates, examiner-style feedback, annotations and analytics derived from them.
• Waitlist and contact data. If you join the waitlist or use the contact form, we store the details you enter so we can reply and send you an invite.
• Subscription data. If you buy a paid plan, we store your plan, subscription status, billing period dates and the customer and subscription identifiers issued by Paddle. Your card details are entered directly with Paddle and are never seen or stored by us.
• Technical data. Standard server logs (IP address, browser type, timestamps) and error reports used to keep the service secure and working.

We do not knowingly collect special-category data. Please do not include sensitive personal information (health, religious, political or biometric details) in your practice answers.

• To provide the service — generating tasks, marking your work and showing your progress. Legal basis: performance of a contract.
• To personalise your practice — analysing your recent attempts so the next task targets your weakest criteria. Legal basis: performance of a contract.
• To keep the service secure and reliable — abuse prevention, rate limiting, debugging. Legal basis: legitimate interests.
• To communicate with you — service emails, waitlist invitations and replies to your enquiries. Legal basis: performance of a contract or consent.
• To manage subscriptions and billing — activating your plan, applying usage limits, handling upgrades, cancellations and refunds. Legal basis: performance of a contract, and compliance with legal obligations such as tax and invoicing.
• To improve accuracy — reviewing aggregated and de-identified scoring data to calibrate our models. Legal basis: legitimate interests.

We do not sell your personal data, and we do not use it for third-party advertising.

To estimate a band score and produce feedback, the text you submit is sent to third-party large language model providers through our AI gateway. Those providers process your submission to return a result. We instruct our providers not to use content submitted through our service to train their models, and we send your work without your name or email attached.

Band scores produced this way are estimates for practice purposes only. They are not official IELTS results and cannot be used for any application, visa or admission purpose.

We share personal data only with service providers who process it on our behalf:

• Cloud hosting, database, authentication and storage providers who run the application infrastructure.
• AI model providers who generate tasks, scores and feedback.
• Email delivery providers used to send account and service messages.
• Error-monitoring and analytics providers used to diagnose faults.
• Paddle.com Market Ltd ("Paddle"), our online reseller and Merchant of Record. When you buy or manage a paid plan, Paddle collects and processes your name, email address, billing address, payment details, tax location data and transaction history in order to take payment, run subscriptions, calculate and remit tax, issue invoices, and handle refunds, chargebacks and payment-related support. Paddle acts as an independent controller for that data, and its own privacy notice and buyer terms apply to it. Paddle shares your subscription status and identifiers back to us so we can unlock your plan.
• Professional advisers (for example accountants and legal advisers) where necessary.

We may also disclose data where legally required, or in connection with a merger or acquisition, in which case we will tell you before your data becomes subject to a different privacy policy.

Our providers may process data outside your country, including in the United States. Where personal data leaves the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

• Account, profile and practice data: for as long as your account is open.
• After you delete your account: erased or anonymised within 30 days, except where law requires longer.
• Waitlist entries: until launch communications finish, or until you ask us to remove you.
• Contact messages: up to 24 months, so we have a record of support history.
• Server and security logs: typically up to 90 days.
• Subscription and transaction records: kept for as long as required by tax and accounting law (normally 6–10 years), by us and by Paddle.

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to receive a portable copy, and to withdraw consent at any time. UK and EEA users may also complain to their local data protection authority.

To exercise a right, email privacy@yourieltsprep.com. We aim to respond within 30 days and will not charge you for a reasonable request.

Data is encrypted in transit with TLS and at rest by our infrastructure providers. Access to production data is restricted, and database access rules limit every record to the account that created it. No system is perfectly secure, so please use a strong, unique password and tell us immediately if you suspect a problem.

The service is not intended for children under 16. If you believe a child has given us personal data, contact us and we will delete it.

We keep cookies and local storage to the minimum needed to run the service. See our Cookie Policy for the full list.

If we make a material change we will update the date at the top of this page and, where appropriate, notify you by email or in the app.