Privacy Policy

OpenIELTS ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the OpenIELTS platform at https://openielts.org.

By using our Service, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not use the Service.

We collect several categories of information to provide and improve the Service:

We use the information we collect for the following purposes:

• To create and manage your account and provide you with access to the Service
• To deliver and personalise your IELTS practice experience, including progress tracking and study recommendations
• To generate AI-powered feedback on your writing, listening, reading, and speaking submissions
• To process subscription payments and manage billing
• To communicate with you about your account, updates, and support requests
• To send optional product updates and educational content (you may opt out at any time)
• To detect, prevent, and respond to fraud, security incidents, and abuse
• To analyse usage patterns and improve the Service
• To comply with applicable legal obligations

Your data is stored using Google Firebase (Firestore and Firebase Storage), which provides industry-standard security infrastructure. Your password is never stored in plain text — it is hashed using bcrypt before being stored.

We implement technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include encrypted data transmission (HTTPS), access controls, and regular security reviews.

Despite our efforts, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use a strong, unique password for your account.

We retain your data for as long as your account is active or as needed to provide the Service. If you request account deletion, we will delete your personal data within 30 days, except where we are required by law to retain certain records.

We use cookies and similar tracking technologies to operate and improve the Service. Cookies are small data files stored on your device.

You can control cookies through your browser settings. Disabling essential cookies will prevent you from signing in to the Service.

We do not sell your personal data. We share your information only in the following limited circumstances:

• Service providers — we share data with trusted third-party providers who help us operate the Service (e.g. Firebase for database/storage, payment processors for billing). These providers are contractually required to protect your data and use it only for the services we request.
• Legal requirements — we may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, safety, or property of OpenIELTS, our users, or the public.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity. We will notify you via email or a prominent notice on the Service before your data is transferred or becomes subject to a different privacy policy.
• With your consent — we may share your information for other purposes with your explicit consent.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your personal data (subject to legal obligations)
• Portability — request your data in a structured, machine-readable format
• Objection — object to processing of your data for certain purposes, including direct marketing
• Withdrawal of consent — withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at privacy@openielts.org. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@openielts.org.

Our Service is operated using infrastructure that may process data in various countries. By using the Service, you consent to your information being transferred to and processed in countries other than your country of residence, which may have different data protection laws.

Where required, we take steps to ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place to protect your information.

The Service may contain links to third-party websites and services. This Privacy Policy applies only to OpenIELTS. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies before providing any personal information.

Our AI feedback features may be powered by third-party AI providers. Any data processed by these providers is subject to our data processing agreements with them and is used solely to generate the requested feedback.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on the Service before the change takes effect. The effective date at the top of this page will always reflect the most recent version.

Your continued use of the Service after changes are posted constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: