Privacy Policy

1. Scope

This policy covers the IELTSPrepHub website and everything you do inside it: practice, mock tests, AI feedback, course purchases and support. It does not cover the separate social media channels we post on, which are governed by those platforms' own policies.

IELTSPrepHub is the controller of the data described here. Where we use another company to process it for us, they are listed below.

2. What we collect

We collect what the platform needs to work, and nothing that exists only to profile you:

• Account details — your name and email address. Your password is stored only as an argon2id hash; we never hold the password itself and cannot recover it for you.
• Google sign-in — if you sign in with Google, we receive the name and email address on that Google account.
• Practice data — your answers, timings, scores, band estimates and per-question history.
• Writing and Speaking work — the essays you submit, the audio you record, and the transcripts and feedback produced from them.
• Payment submissions — the bKash or Nagad transaction ID, the amount, and any screenshot you upload as proof. No card numbers, PINs or wallet passwords.
• Support messages — what you write to us, so we can answer it and keep the thread.
• Technical data — IP address, browser and device information, and server logs, kept for security, abuse prevention and debugging.

3. Cookies

Cookies on this site are functional only. A sign-in cookie set by our authentication layer keeps you logged in, and a small preference cookie remembers whether you chose light or dark mode.

There are no advertising cookies and no cross-site tracking cookies on this platform. We do not sell or share your browsing behaviour with advertisers.

4. How we use it

• To run your account and keep you signed in.
• To score practice, generate feedback and build your progress and weakness analytics.
• To review and approve payments, open access, and keep the order and audit records we are required to keep.
• To answer support messages and send necessary service email such as a password reset or an order decision.
• To keep the service secure — rate limiting, abuse detection and investigating problems.

We do not sell your data, and we do not use it for advertising.

5. AI processing of your work

Essays, speaking audio and their transcripts are sent to our AI provider to be evaluated against the assessment criteria, and the result is stored against that attempt so you can review it later.

This happens only when you ask for feedback on a piece of work. The purpose is producing your feedback; we do not sell your work and we do not publish it.

Automated evaluation is assistive. Estimated bands it produces are labelled as estimates everywhere they appear, and are not an official IELTS result.

6. Who processes data for us

We use established providers rather than running this infrastructure ourselves. Each one processes data only to deliver its part of the service:

• Application hosting and content delivery.
• A managed Postgres database, which holds the live data described above.
• A managed Redis cache, used for rate limiting and quota counters.
• Private file storage, which holds uploads such as payment screenshots and handwriting photos.
• An email provider, for password resets, order decisions and other service email.
• An AI provider, for Writing and Speaking evaluation.

Payments are made directly through bKash or Nagad, in their own apps. We receive the transaction ID and the amount you tell us; we are not in the payment flow and we never see your wallet credentials.

7. Uploaded files

Payment screenshots, handwriting photos and course material are held in private storage and served through a route that checks who you are on every request. Knowing a file's identifier is not enough to open it.

8. Security

• Passwords are hashed with argon2id and are never stored or logged in readable form.
• All traffic is served over HTTPS.
• Sign-in attempts are rate limited to slow down credential guessing.
• Administrative permissions are checked on the server for every action, and every administrative change is written to an audit log alongside the change itself.

No system is perfectly secure. If we discover a breach affecting your data, we will tell you and describe what happened and what we did about it.

9. How long we keep it

• Account details, practice history, essays and recordings are kept while your account is open, so your progress stays meaningful over months of study.
• Order and payment records are kept for as long as we are required to keep financial and accounting records, even after an account closes.
• Support threads are kept while your account is open, so context is not lost between messages.
• Server and security logs are kept for a limited period and then discarded.

When you ask us to close your account, we delete or anonymise your personal data other than the records above that we are obliged to retain.

10. Your rights

You can ask us to show you the data we hold about you, correct anything wrong, export your practice history, or delete your account and its data.

Email support@ieltsprephub.com from the address on your account and we will act on it. We answer within a reasonable period and will tell you if anything has to be kept for legal or accounting reasons.

11. Children

This platform is not intended for children under 13, and we do not knowingly collect their data. If you are under 16, use it with a parent or guardian's permission. If you believe a child has given us data, contact us and we will remove it.

12. International transfers

Our hosting, database, storage, email and AI providers operate outside Bangladesh, so your data is processed abroad. We choose providers that offer recognised safeguards for data handled on our behalf.

13. Changes to this policy

When this policy changes, the date at the top of the page changes with it. Material changes — a new category of data, or a new purpose for existing data — will be announced in the app before they take effect.

14. Contact

Privacy questions, access requests and deletion requests go to support@ieltsprephub.com, or through the contact page.