Privacy Policy

1. Introduction

ABCD English (“we”, “us”) operates abcdenglish.net. This Privacy Policy describes what information we collect, how we use it, who we share it with, and the rights you have over your data. It is effective from the “Last updated” date above and applies to all users of the Service.

2. Information We Collect

We collect three categories of information about you:

• Account data — name, email address, target IELTS band, planned exam date, and country of residence, provided when you create an account.
• Practice data — your question attempts, answers, time spent on each question, paragraph flags, bookmarks, and other interactions with the Service, generated as you use it.
• Technical data — IP address, user-agent string, HTTP referrer, and similar metadata captured by our hosting and analytics infrastructure.

3. How We Use Your Information

We use your information to deliver practice content tailored to your target band, to generate band-score estimates and personalised Smart Review Queue suggestions, to process payments and manage your subscription, and to send transactional communications (e.g. password resets, billing receipts). With your explicit consent, we may also send marketing emails covering new content drops, product updates, and study-tip series.

4. Legal Basis for Processing

We rely on contract performance to deliver the Service you signed up for, legitimate interests for product analytics and security monitoring, your consent for marketing communications (revocable at any time), and legal obligation for tax records and regulatory reporting.

5. Data Processors and Sub-processors

We share your data with the following processors strictly to operate the Service: Supabase (database and authentication, hosted in Singapore region sin1), Stripe (payment processing, PCI-DSS Level 1), Vercel (application hosting and edge network), and Resend or equivalent (transactional email). We have a Data Processing Agreement in place with each.

6. Children’s Data

The Service is not directed at children under 13. Users aged 13 through 17 require verifiable parental or legal-guardian consent to create an account. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal data, contact us at privacy@abcdenglish.net and we will delete it promptly.

7. Your Rights

You have the right to access your personal data, to request rectification of inaccurate data, to request erasure (subject to our retention obligations), to receive a portable copy of your data, to object to certain processing, and to withdraw consent for marketing communications at any time. Submit requests to privacy@abcdenglish.net; we respond within 30 days.

8. Data Retention and Security

Account data is retained while your account is active and for 90 days after deletion to allow account recovery. Payment records are retained for 7 years to meet tax-compliance obligations. Data is encrypted in transit using TLS 1.3 and at rest using AES-256. We maintain access controls, audit logs, and incident-response procedures. In the event of a confirmed personal-data breach affecting you, we will notify you within 72 hours of confirmation.

Contact. Privacy questions and rights requests can be sent to privacy@abcdenglish.net.