Privacy Policy

1. Information We Collect

We only collect the minimum amount of data necessary to provide you with our English learning platform services. This includes:

• Account Information: When you sign up, we collect your email address and name. If you sign up using a third-party provider (like Google or GitHub via NextAuth), we receive your provider ID, email, profile image, and authentication tokens.
• Credentials: If you use email/password registration, your password is strictly encrypted using industry-standard hashing algorithms before being stored. We never store or see your plain-text password.
• Usage & Progress Data: To calculate your statistics, we store your test attempts (`test_attempts`) and detailed history of individual answers (`answer_history`), including timestamps, scores, and duration seconds.

2. How We Use Your Data

Your data is used strictly for the following purposes:

• To create and manage your personal user account.
• To track and display your English learning progress, scores, and response history.
• To maintain, secure, and optimize the performance of our website.

We do not use your data for targeted advertising, nor do we sell, rent, or trade your personal information to third parties.

3. Data Storage and Third-Party Providers

We rely on trusted cloud infrastructure partners to deploy, host, and deliver secure operational transactional services for the platform:

• Database: Our PostgreSQL database is hosted and managed securely through Supabase.
• Hosting & Deployment: The web application is hosted and served through Vercel.
• Email Delivery: We use Resend (Resend Labs Inc.) as our third-party email service provider to securely process your email address for account verifications, transactional updates, and secure sign-in links.

These sub-processors only handle your data to ensure service availability, account authentication, and comply with rigorous modern data security standards.

4. Cookies and Sessions

We use essential cookies and session tokens solely to keep you logged into your account and to securely process your requests. Since we do not run third-party marketing trackers or analytics networks, we do not deploy non-essential tracking cookies.

5. Your GDPR Rights (European Users)

Under the General Data Protection Regulation (GDPR), you have full control over your information:

• Right to Access & Portability: You can request a summary of the data we hold about you.
• Right to Rectification: You can update your profile details at any time.
• Right to Erasure (Right to be Forgotten): You have the right to request the complete deletion of your account. Due to our database structure, deleting your profile will trigger a cascade deletion that permanently removes all your session logs, test attempts, and answer history.

6. Data Retention

We retain your personal data and test progress logs for as long as your account remains active. If your account is deleted by your request, all related tables and records are immediately and permanently wiped out from our production databases.

7. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data deletion rights, you can contact us directly via email at: support.testandlearn@gmail.com.