Privacy policy

• Account: your email address and, if you add them, a display name, target CLB, first language and country. If you sign in with Google, Google tells us your email address and name.
• Practice: your answers, the text you write, your Speaking recordings and their transcripts, your scores and feedback, and how you moved through a test (screen times, and events such as pasting text or leaving the test tab).
• Choices: the consents you give or withdraw, with the date and a scrambled (hashed) form of your IP address as proof.
• Technical: our servers log each request with the time, your account ID and IP address, to keep the service running and protect it from abuse.

Your browser also stores your sign-in session, theme and unsaved drafts on your device. We use no advertising or analytics cookies.

• To run timed tests, save your progress and show your results.
• To score Writing and Speaking. Speaking needs your separate consent before anything is recorded.
• To enforce fair-use limits and to stop abuse.
• Only if you opt in: to keep recordings longer, to improve our scoring with your answers (under a pseudonymous ID), or to contact you about research.

We don't sell your data and we never create a voiceprint from your recordings.

These services handle data for us, under their own security and privacy terms:

Where your data is stored: in the United States. Our database runs on Render in Oregon, and your recordings and files are stored with Supabase in the United States. This means your data may be subject to United States law.

Render (United States)

Runs our API and hosts our database, in Oregon. Receives: Everything in your account: email address, profile, answers and scores.

Supabase (United States)

Our sign-in service, and storage for recordings and practice audio and pictures. Receives: Your email address (and your name if you sign in with Google) and your Speaking recordings. It also sends sign-in links.

Vercel

Hosts the website. Receives: Your connection to the website, including your IP address. No account data.

OpenAI (United States)

Transcribes Speaking recordings and scores Writing and Speaking answers. Receives: The text you write and the audio you record for a task, with no name or email attached.

Google Gemini and ElevenLabs

Create practice pictures (Gemini) and Listening audio (ElevenLabs) from scripts we write. Receives: None of your personal data. They only see our practice material.

While you record a Speaking answer, your browser's own speech recognition writes a live transcript. In Chrome that is Google's speech service and in Safari it is Apple's; they handle that audio under their own terms. Our hosting providers (Vercel for the website, Render for the API) carry your connection, so they see your IP address.

• Recordings: deleted 30 days after you submit them. If you choose to keep them longer, up to 24 months. If you withdraw that choice, the extra recordings are deleted within 7 days.
• Answers, transcripts and scores: kept until you delete your account, so you can review your progress.

• Change your profile and turn each consent on or off at any time in Settings & privacy.
• Delete your account there too: it permanently removes your account, answers, scores and recordings straight away. It can't be undone.
• Downloading a copy of your data isn't built yet. Until it is, email us and we'll send it to you.

ScoreNorth is for people 18 and older.

Questions, requests or complaints about your data: privacy@…. If we change this policy in a way that matters, we will tell you in the app before it takes effect.