Privacy Policy

The data controller is Khojiakbar Nazarov, Tashkent, Republic of Uzbekistan. Contact: support@oet-trainer.com.

• Account data — your name, email address and a one-way hash of your password (never the password itself).
• Practice data — the letters you write, the audio recordings and transcripts of your Speaking sessions, and the feedback and bands generated for them.
• Purchase data — which credit pack you bought, when, and the amount. Payments are handled by Polar; we never receive your card details.
• Technical data — your IP address and basic request logs, used for security, abuse prevention and rate limiting.
• Usage data — which pages you visit and actions such as signing up or buying a pack, collected with Google Analytics (see section 6).

• To provide the Service: run your account, assess your practice attempts and keep your history and feedback available to you (performance of our contract with you).
• To process purchases and keep records required by tax and accounting law (legal obligation).
• To keep the Service secure and prevent abuse (legitimate interest).
• To send you service emails such as email-address confirmation.

We use Google Analytics to understand how the Service is used and improve it (legitimate interest, or your consent where the law requires it). We do not sell your data, show advertising, or use advertising trackers.

Only with the service providers needed to run the Service:

• Anthropic (Claude AI) — receives your Writing letters to produce feedback.
• Google (Gemini AI) — receives your Speaking audio and transcript for the live role-play and its assessment.
• Polar (Polar Software, Inc.) — our reseller and Merchant of Record; processes payments, receipts and refunds under its own privacy policy.
• Resend — delivers our service emails.
• Cloudflare (Turnstile) — protects sign-up and sign-in from bots.
• Google (Google Analytics) — receives pseudonymous usage data under its own privacy policy.
• Our hosting provider — stores the Service’s data on servers in Germany (EU).

Some of these providers are located in the United States, so your data may be transferred outside your country; we only use providers that commit to protecting it. Authorised staff of the Service may review practice attempts to provide support and check the quality of feedback.

Your account data and practice history — including Speaking recordings — are kept for as long as your account exists, so you can always return to your past attempts and feedback. If you ask us to delete your account, we delete this data within 30 days, except purchase records that tax law requires us to keep.

We use one essential, http-only cookie to keep you signed in, and your browser’s local storage to save drafts of letters you are writing. Google Analytics sets cookies to measure visits — in the EEA, the UK and Switzerland only after you accept them. You can decline them in the cookie banner or change your choice at any time from “Cookie settings” in the footer. We do not use advertising cookies. The payment checkout runs on Polar’s own site, and the bot-protection check loads a script from Cloudflare; both may set their own cookies.

You can ask us to access, correct, export or delete your personal data, or object to how we use it, by writing to support@oet-trainer.com. We answer within 30 days. You may also complain to the data protection authority in your country.

The Service is not intended for anyone under 16. If you believe a child under 16 has created an account, contact us and we will delete it.

Data travels over encrypted connections (HTTPS), passwords are stored only as hashes, and access to stored data is restricted to what is needed to run the Service.

We may update this policy; the effective date above shows the latest version. For significant changes we will notify you by email or in the Service.