Privacy Policy

1. Introduction

SharpScore (“we,” “us,” or “our”) operates the website https://sharpscore.io (the “Service”). This Privacy Policy explains how we collect, use, and protect your personal information when you use our AI-powered IELTS mock exam practice platform.

We are committed to protecting your privacy and handling your data transparently. Please read this Privacy Policy carefully.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Display name (optional)
• Authentication credentials (managed by Supabase)

2.2 Voice and Audio Data

When you use the Speaking practice feature:

• Your voice is transmitted in real-time to Google Gemini for AI processing
• Voice data is streamed and processed in real-time; it is NOT permanently stored by SharpScore
• Google may process your audio data according to their own privacy policy

Important: Google Gemini's real-time voice API is currently in preview. Google's data handling practices for preview features may differ from their production services. We will update this policy if Google's data practices change.

2.3 Written Content

When you use the Writing practice feature:

• Your essay text is sent to Anthropic Claude (via SubRouter) for AI scoring
• Essay content is processed for scoring purposes and is not permanently stored by SharpScore

2.4 Practice Data

• Your test scores, practice history, and performance metrics
• Your answers to reading and listening practice questions
• Time spent on each section

2.5 Technical Data

• IP address
• Browser type and version
• Device type
• Pages visited and time spent
• Referral source

2.6 Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

3. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Process your practice tests and generate AI-powered scores and feedback
• Track your progress and practice history
• Communicate with you about your account and service updates
• Improve the Service based on usage patterns
• Prevent abuse and enforce usage limits

We do NOT use your information to:

• Sell your personal data to third parties
• Send marketing emails without your consent
• Train our own AI models on your voice or writing data

4. Third-Party Service Providers

We share data with the following third-party services, solely for the purpose of providing the Service:

Each provider processes your data according to their own privacy policies.

5. Data Retention

• Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
• Practice scores and history: Retained while your account is active.
• Voice data: Processed in real-time, not permanently stored by SharpScore.
• Written content: Processed for scoring, not permanently stored by SharpScore.
• Technical logs: Retained for up to 90 days for security and debugging purposes.

6. Your Rights

6.1 For All Users

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your practice history and scores
• Withdraw consent for data processing

6.2 For Users in the European Economic Area (GDPR)

In addition to the above, you have the right to:

• Data portability
• Restriction of processing
• Object to processing
• Lodge a complaint with a supervisory authority

Our legal basis for processing your data is:

• Consent: For voice data processing in Speaking practice
• Contract performance: For providing the Service you subscribed to
• Legitimate interest: For improving the Service and preventing abuse

6.3 For Users in India (DPDP Act)

In compliance with India's Digital Personal Data Protection Act 2023:

• We process your data only for the purposes stated in this policy
• You may withdraw consent at any time by contacting us
• We will delete your data upon request within the timeframe specified by applicable law
• We do not process children's data without verifiable parental consent (minimum age: 16)

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• HTTPS encryption for all data in transit
• Secure authentication via Supabase
• API key restrictions and rate limiting
• Regular security reviews

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

8. Children's Privacy

SharpScore is not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If we discover that we have collected data from a child under 16, we will delete it promptly. If you believe a child under 16 has provided us with personal data, please contact us at privacy@sharpscore.io.

9. International Data Transfers

Your data may be processed in countries outside your country of residence, including the United States (where Google and Anthropic servers are located). By using the Service, you consent to such transfers. We rely on our service providers' data protection measures and applicable legal frameworks for international data transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the “Last Updated” date. For material changes affecting how we handle your voice or written data, we will provide at least 14 days' advance notice via email.

11. Google Gemini Preview Disclosure

The Speaking practice feature uses Google Gemini's real-time voice API, which is currently designated as a “preview” service. This means:

• Google's data handling practices for this API may change
• The API may be discontinued or modified by Google
• Data processed through preview APIs may be subject to different retention policies than production APIs
• We will update this Privacy Policy if Google makes material changes to their preview data practices

We recommend reviewing Google's AI terms of service for the most current information.

12. Contact Us

For privacy-related questions, data access requests, or complaints:

Email: privacy@sharpscore.io

We will respond to all privacy inquiries within 30 days.