Privacy policy

Last updated: 11 October 2026

This policy explains what personal data IELTSKothon ("we", "IELTSKothon") collects when you use our IELTS Speaking practice service, why we collect it, and the choices you have.

1. What we collect

Account details: your name (if you give one), email address, and either a securely hashed password or your Google account identifier if you sign in with Google. We never see or store your Google password.
Practice data: the text of your answers, the examiner questions, your estimated band scores and feedback, the test type, dates and timing.
Your voice: while you answer, your recording is sent to our server and on to a speech-to-text service to create the transcript. We do not keep the audio files. We keep only the resulting text and counters such as seconds of audio processed.
Payment records: when you pay us manually (for example by mobile wallet or bank transfer) we record the payment method, transaction ID, amount, date and the number of tests assigned to you. We do not receive or store card or wallet PINs or passwords.
Refund requests: the reason you give, the number of tests and any transaction ID you enter.
Technical data: your IP address (used for a short time to limit abuse), a random device identifier stored in a cookie, and a sign-in cookie.
Messages: anything you send us by email or social media.

2. Why we use it

To provide the service: sign you in, run the speaking test, score it and show your results.
To manage purchases, test balances and refunds.
To keep the service secure and prevent abuse, such as account sharing or automated sign-ups.
To send emails that the service needs, such as email confirmation and password reset. We do not send marketing email unless you ask for it.
To monitor running costs and fix problems, using totals such as audio minutes and number of tests.

3. Who processes your data

We do not sell your personal data. We share it only with the providers that help us run the service:

OpenAI receives your recordings (to transcribe them) and your answer text (to generate examiner questions and your feedback). OpenAI states that data sent through its API is not used to train its models by default; see OpenAI's own policy for details.
Resend delivers our emails to your email address.
Google provides sign-in if you choose it, and the fonts used on our pages.
Your browser's speech recognition shows the live preview of your words while you speak. In Chrome and Edge this audio is processed by Google or Microsoft under their own privacy terms, not by us.
Hosting and database providers store our application and your data on our behalf.
Payment providers (such as your mobile wallet or bank) process your payment under their own policies.

These providers may process data in countries other than your own. We may also disclose data if the law requires it.

4. Cookies

We use only essential cookies: one to keep you signed in and one to recognise your device for security. We do not use advertising or tracking cookies. If you follow a link to Facebook or another social site, that site has its own cookies and policy.

5. How long we keep data

Account and practice results: until you ask us to delete your account.
Audio recordings: not stored.
Payment and refund records: as long as the law or our accounting needs us to keep them, even after account deletion.
Security records such as IP-based request counters: automatically removed after a short time.

6. Your rights

Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, or restrict how we use it, and you can object to some uses. To make a request, contact us from the email address on your account. We aim to reply within 30 days. You may also complain to your local data protection authority.

7. Security

Passwords are stored only as salted hashes. The site uses HTTPS, sign-in cookies that scripts cannot read, rate limits and access controls. No online service is perfectly secure, so please use a strong, unique password.

8. Children

IELTSKothon is meant for people aged 16 and over. If you are younger, use it only with a parent or guardian's permission. If you believe a child has given us data without permission, contact us and we will delete it.

9. Changes

If we change this policy we will update the date above, and for important changes we will tell you by email or on the site.