Privacy Policy

1. Introduction

SharpScore (“we,” “us,” or “our”) operates the website https://sharpscore.io (the “Service”). This Privacy Policy explains how we collect, use, and protect your personal information when you use our AI-powered IELTS mock exam practice platform.

We are committed to protecting your privacy and handling your data transparently. Please read this Privacy Policy carefully.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Display name (optional)
• Authentication credentials (managed by Supabase)

2.2 Voice and Audio Data

When you use the Speaking practice feature:

• Your voice is transmitted in real time to ElevenLabs, our conversational AI provider, for AI examiner processing
• Voice recordings and conversation transcripts are retained for up to 12 months to support scoring quality, calibration and dispute resolution, and are then deleted
• You may request earlier deletion of your voice data at any time by contacting privacy@sharpscore.io
• ElevenLabs may process your audio according to its own privacy policy

Important: The AI examiner's underlying language model is provided through ElevenLabs' platform. We will update this policy if our providers or their data-handling practices change materially.

2.3 Written Content

When you use the Writing practice feature:

• Your essay text is sent to a third-party AI scoring provider for AI scoring
• Your essays, along with the resulting scores and feedback, are stored as part of your practice history while your account is active

2.4 Practice Data

• Your test scores, practice history, and performance metrics
• Your answers to reading and listening practice questions
• Time spent on each section

2.5 Technical Data

• IP address
• Browser type and version
• Device type
• Pages visited and time spent
• Referral source

2.6 Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

3. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Process your practice tests and generate AI-powered scores and feedback
• Track your progress and practice history
• Communicate with you about your account and service updates
• Improve the Service based on usage patterns
• Prevent abuse and enforce usage limits

We do NOT use your information to:

• Sell your personal data to third parties
• Send marketing emails without your consent
• Train our own AI models on your voice or writing data

4. Third-Party Service Providers

We share data with the following third-party services, solely for the purpose of providing the Service:

Each provider processes your data according to their own privacy policies.

5. Data Retention

• Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
• Practice scores and history: Retained while your account is active.
• Voice recordings and transcripts (Speaking practice): Retained for up to 12 months, then deleted. Deleted within 30 days if you delete your account or request earlier deletion.
• Written submissions: Your essays, scores and feedback are retained as part of your practice history while your account is active.
• Technical logs: Retained for up to 90 days for security and debugging purposes.

6. Your Rights

6.1 For All Users

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your practice history and scores
• Withdraw consent for data processing

6.2 For Users in the European Economic Area (GDPR)

In addition to the above, you have the right to:

• Data portability
• Restriction of processing
• Object to processing
• Lodge a complaint with a supervisory authority

Our legal basis for processing your data is:

• Consent: For voice data processing in Speaking practice
• Contract performance: For providing the Service you subscribed to
• Legitimate interest: For improving the Service and preventing abuse

6.3 For Users in India (DPDP Act)

In compliance with India's Digital Personal Data Protection Act 2023:

• We process your data only for the purposes stated in this policy
• You may withdraw consent at any time by contacting us
• We will delete your data upon request within the timeframe specified by applicable law
• We do not process children's data without verifiable parental consent (minimum age: 16)

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• HTTPS encryption for all data in transit
• Secure authentication via Supabase
• API key restrictions and rate limiting
• Regular security reviews

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

8. Children's Privacy

SharpScore is not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If we discover that we have collected data from a child under 16, we will delete it promptly. If you believe a child under 16 has provided us with personal data, please contact us at privacy@sharpscore.io.

9. International Data Transfers

Your data may be transferred to and processed in the United States and other jurisdictions where our service providers — including ElevenLabs (voice conversations) and a third-party AI scoring provider (scoring) — operate their servers. By using the Service, you consent to such transfers. We rely on our service providers' data protection measures and applicable legal frameworks for international data transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the “Last Updated” date. For material changes affecting how we handle your voice or written data, we will provide at least 14 days' advance notice via email.

11. ElevenLabs Voice Processing Disclosure

The Speaking practice feature uses ElevenLabs' conversational AI platform. This means:

• Your voice is streamed to ElevenLabs in real time and processed by an AI language model hosted on their platform
• Conversation recordings and transcripts are stored and retained as described in Section 5 (up to 12 months)
• ElevenLabs processes data according to its own privacy policy
• We will update this Privacy Policy if ElevenLabs makes material changes to its data practices

We recommend reviewing ElevenLabs' privacy policy for the most current information.

12. Contact Us

For privacy-related questions, data access requests, or complaints:

Email: privacy@sharpscore.io

We will respond to all privacy inquiries within 30 days.