Privacy Policy

1. Introduction

ABCD IELTS (“we”, “us”) operates abcdielts.com. This Privacy Policy describes what information we collect, how we use it, who we share it with, and the rights you have over your data. It is effective from the “Last updated” date above and applies to all users of the Service.

2. Information We Collect

We collect three categories of information about you:

• Account data — name, email address, target IELTS band, planned exam date, and country of residence, provided when you create an account.
• Practice data — your question attempts, answers, time spent on each question, paragraph flags, bookmarks, and other interactions with the Service, generated as you use it.
• Technical data — IP address, user-agent string, HTTP referrer, and similar metadata captured by our hosting and analytics infrastructure.

3. How We Use Your Information

We use your information to deliver practice content tailored to your target band, to generate band-score estimates and personalised Smart Review Queue suggestions, to process payments and manage your subscription, and to send transactional communications (e.g. password resets, billing receipts). With your explicit consent, we may also send marketing emails covering new content drops, product updates, and study-tip series.

4. JARVIS — Your AI Study Assistant

JARVIS is our AI study assistant. When you use it, it assembles a study dossier from your own attempt history — your scores, accuracy by question type, and trends — to answer questions about your performance. It reads only your own data, never another student’s, and it never invents band scores.

• What we store. Your JARVIS chat conversations and messages, and your one-tap “did this help?” feedback. We also keep an aggregate usage record (token counts and an estimated cost per call) for billing and cost control — it contains no conversation content.
• How long. JARVIS conversations, messages, and feedback are kept on a 30-day rolling window and pruned after that — chat history is transient tutoring context, not a permanent record.
• If you cancel. Your JARVIS conversation data is deleted within 30 days of your subscription period ending. The aggregate usage record (tokens and cost, no conversation content) is retained as our billing record.

5. The Weekly JARVIS Digest

Free accounts receive a weekly JARVIS email digest summarising your practice that week, with a prompt to upgrade for the full analysis. Free accounts are opted in by default as a product-lifecycle email; premium accounts do not receive it. Every digest email carries a one-click unsubscribe link, and once you unsubscribe we honour that preference permanently. The digest names the analysis you could unlock; it never contains the locked explanations, answer keys, or other premium content itself.

6. Legal Basis for Processing

We rely on contract performance to deliver the Service you signed up for, legitimate interests for product analytics and security monitoring, your consent for marketing communications (revocable at any time), and legal obligation for tax records and regulatory reporting.

7. Data Processors and Sub-processors

We share your data with the following processors strictly to operate the Service: Supabase (database and authentication, hosted in Singapore region sin1), Stripe (payment processing, PCI-DSS Level 1), Vercel (application hosting and edge network), and Resend or equivalent (transactional email). We have a Data Processing Agreement in place with each.

8. Children’s Data

The Service is not directed at children under 13. Users aged 13 through 17 require verifiable parental or legal-guardian consent to create an account. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal data, contact us at privacy@abcdielts.com and we will delete it promptly.

9. Your Rights

You have the right to access your personal data, to request rectification of inaccurate data, to request erasure (subject to our retention obligations), to receive a portable copy of your data, to object to certain processing, and to withdraw consent for marketing communications at any time. Submit requests to privacy@abcdielts.com; we respond within 30 days.

10. Data Retention and Security

Account data is retained while your account is active and for 90 days after deletion to allow account recovery. Payment records are retained for 7 years to meet tax-compliance obligations. Data is encrypted in transit using TLS 1.3 and at rest using AES-256. We maintain access controls, audit logs, and incident-response procedures. In the event of a confirmed personal-data breach affecting you, we will notify you within 72 hours of confirmation.

Our product-analytics events carry no content and no personal data — no conversation text, no essay or Speaking transcript, no answer strings. We send only low-cardinality labels and numeric scores, keyed to an opaque account identifier, so there is nothing in analytics to link back to what you wrote or said.

For a full category-by-category breakdown — including how we handle your Writing essays, Speaking recordings, and JARVIS conversation data, and how to exercise your right to erasure — see our Data Retention & Your Rights statement.

Contact. Privacy questions and rights requests can be sent to privacy@abcdielts.com.