Privacy Policy

1. Who we are

EzIELTS is an IELTS preparation service based in Türkiye. This website is ezielts.app.

For data protection law, EzIELTS is the data controller — that means we decide what is collected and why, and we are responsible for looking after it.

You can reach us any time at contact@ezielts.app, and a real person reads it.

2. What we collect

It depends on how you use the site. There are three different situations, and they are very different from each other.

a) If you just read the website

You do not give us anything. We do not ask for your name or your email to read a guide, a topic list, or a strategy page. Our analytics tool sees that a page was visited — see Cookies and analytics.

b) If you use the free essay check

You do not need an account. When you submit an essay at /essay-check we collect:

your name and email address — so your teacher knows who wrote it and where to send the feedback;
your essay, and the exam question if you paste it in;
whether it is Task 1 or Task 2;
a chart or graph image, only if you choose to upload one for a Task 1 essay.

We do not store your IP address for this. Your IP is passed to Cloudflare for a few seconds so it can check you are not a bot and apply a rate limit. It is never written to our database.

c) If you have a student account

Students who study with us have an account in the app. On top of everything above, that account may hold:

Sign-in details — your email address and a password. Your password is handled by our authentication provider and we never see it.
Your profile — your full name, and if you choose to tell us: your nationality, your first language, your target band, your exam date, how many hours a week you can study, and how you found us.
Your work — essays, your teacher's marking and band scores, your vocabulary list, listening and reading practice scores, which practice tests you have done, and which speaking topics you have practised.
Voice recordings of your speaking practice — see section 5.
Messages between you and your teacher.
Study plan answers — the answers you give when you ask for a study plan, kept alongside the plan that was produced from them. See section 4.
Technical event records — if something breaks, we log what went wrong, which screen you were on, your country, and your browser type, so the teacher can fix it. We never log the text you write — not your essays, not your answers, not your vocabulary — and we do not log your IP address.

d) The speaking fluency tool

The speaking fluency tool is different from everything else on this site. It runs entirely inside your browser. Your microphone audio is never uploaded, never sent to a server, and never stored anywhere. When you close the tab, it is gone. There is no account and nothing to delete.

3. Why we are allowed to use it

Data protection law says we need a reason — a "lawful basis" — for everything we do with your data. Ours are:

To do what you asked us to do (contract). You send an essay, we mark it. You ask for a study plan, we build one. We cannot do that without the data.
Because it is reasonable and you would expect it (legitimate interests). Keeping the site secure, stopping spam and abuse, fixing errors, and understanding roughly how many people use each page.
Because you agreed (consent). Analytics and advertising cookies. You can withdraw this at any time — see section 7.
Because the law requires it (legal obligation). Rare, but if we ever have to keep or hand over records, we will.

4. How we use AI

We want to be direct about this, because it involves your writing.

When you submit an essay, it is sent to a third-party AI service that we use under a paid business agreement. It produces a first draft assessment — suggested band scores and a list of errors. Your teacher then reads the essay themselves, corrects the AI where it is wrong, and decides your real band score. The feedback email you receive carries the teacher's numbers, not the AI's.

The same applies to study plans: your intake answers go to the same service, which drafts a plan.

No decision about you is made by a machine alone. Under GDPR Article 22 you have the right not to be subject to a decision based only on automated processing. We do not do that. A human teacher reviews every band score before you see it, and you can always ask your teacher to explain or reconsider any score.

Is your writing used to train AI models? No. We pay for the service we use, on a business plan whose terms state that the text we send is not used to train or improve the provider's models and is not read by its reviewers. It is kept only briefly, and only to check the service is not being abused.

This is one of the reasons we pay for it rather than using a free option, where those protections do not apply.

You can still opt out of AI entirely. If you would simply rather your writing never went near an AI, say so when you submit it, or tell your teacher at any time. They will mark your essay by hand. It may take a little longer; the feedback will be just as good, because it was always the teacher's feedback that counted.

We keep your study plan answers and the plan that was generated from them. We do this so we can see which plans worked and build a better planner over time. If you would rather we did not, email us and we will delete yours — it will not affect your teaching in any way.

Our messaging system has the technical groundwork for AI-assisted replies, but it is switched off. No message you receive today is written by AI. If we ever turn it on, AI-written messages will be clearly labelled as such, and we will update this page first.

5. Your voice recordings

If you record yourself answering a speaking question in the app, that audio is saved so you and your teacher can listen back to it and track your progress.

Recordings are stored in a private folder. Unlike an ordinary web address, it cannot be opened by guessing the link.
Only you and your teacher can play them. Playback uses a temporary signed link that expires.
We keep only your most recent recordings for each topic — older ones are removed automatically as you practise.
You can delete any recording yourself, and your teacher can clear all of them on request.

We use recordings only to help you improve your speaking. We do not use your voice to identify you, we do not run voice recognition on it, and we do not share it with anyone outside EzIELTS.

We use a small number of specialist companies to run the service. They act on our instructions and may not use your data for their own purposes.

Company	What they do for us	What they see
Supabase	Database, sign-in, and file storage	Everything in your account
Cloudflare	Hosting, security, bot checks, email forwarding	Your IP address and request details, briefly, for security
An AI service provider	Drafts the first assessment of an essay or study plan	Your essay text and your study plan answers
Google	Analytics — how many people visit which pages	Page visits. Not your work, and not your account
Resend	Sending your feedback emails	Your email address, your name, and your feedback

We do not sell your data, and we never share it for anyone else's advertising or marketing. No data broker has ever received anything from us.

If you click our Preply link to book a lesson, you leave this site and Preply's own privacy policy applies from that point. We do not send Preply any information about you — clicking the link is the only thing that happens.

7. Cookies and analytics

We use Google Analytics 4 to count visits and see which pages are useful. It sets cookies in your browser and gives us grouped, anonymous numbers — we cannot see who you are from it.

Google Analytics also loads a Google advertising pixel, which can be used to show EzIELTS ads to people who have visited the site before.

Being honest about where we are today: we do not currently show a cookie consent banner, which means analytics cookies are set as soon as you arrive. We know this needs to change for visitors in the EU and UK, and we are working on it.

In the meantime, you can block these cookies yourself: use your browser's cookie settings, or install Google's official Analytics opt-out add-on. Blocking them does not affect anything on this site.

We do not use cookies to track you across other websites, and we have no advertising partners beyond Google's own tools described above.

8. How long we keep things

What	How long
Free essay check submissions	12 months, then deleted
Student account and coursework	While you are studying with us, and for 24 months after your last activity
Voice recordings	Only the most recent per topic; deleted with your account
Messages with your teacher	Deleted with your account
Error and event logs	90 days
Analytics data	Controlled by Google's own retention setting

If you ask us to delete your data sooner, we will — see the next section.

9. Your rights, and how to use them

Wherever you live, we will honour all of these. They are also your legal rights if you are in Türkiye (under KVKK, Law No. 6698), in the EU or UK (under GDPR), or in another country with similar laws.

See your data — ask for a copy of everything we hold about you.
Fix your data — correct anything wrong. Most of it you can edit yourself in your profile.
Delete your data — ask us to erase your account and everything in it.
Take your data with you — get your essays, feedback and vocabulary in a portable file.
Object, or ask us to pause — tell us to stop using your data in a particular way.
Withdraw consent — for anything you agreed to, at any time.
Complain — to your national data protection authority, if you think we have got it wrong. We would rather you told us first so we can fix it.

How to ask: email contact@ezielts.app and say what you want. We will reply within 30 days, and it is free. We may ask you to confirm your identity first, so that nobody else can request your data.

What "delete" really means here. When we delete your account, everything linked to it in our database goes with it — essays, feedback, vocabulary, scores, recordings, messages. A very small number of leftover files may need to be removed by hand, and your teacher does that as part of the same request. We will confirm to you in writing when it is done.

Emails already sent to you stay in your own inbox, and we cannot remove those.

10. How we protect your data

Everything travels over an encrypted connection (HTTPS), always.
Our database enforces row-level security: one student's account cannot read another student's work, even if something else goes wrong.
Voice recordings sit in a private store reachable only through expiring signed links.
We never see your password. It is held, hashed, by our authentication provider.
We never take payment details on this site, so there are no card numbers here to lose.
The free essay form is protected by a bot check and a rate limit.

No system is perfect. If a breach ever happens that puts you at risk, we will tell you and the relevant authority without delay.

11. Where your data is stored

EzIELTS is run from Türkiye, and our providers operate internationally, so your data may be processed outside your own country — including in Türkiye, the European Union, and the United States.

When data moves between countries, our providers rely on the safeguards approved for this purpose — most commonly the European Commission's Standard Contractual Clauses. Wherever it sits, this policy still applies to it.

12. Age limit

EzIELTS is for people aged 16 and over. This matches IELTS itself, which is not recommended for candidates under 16.

If you are under 16, please ask a parent or guardian to contact us before using an account. If we learn that we hold data about someone under 16 without that permission, we will delete it.

13. Changes to this policy

If we change how we use your data, we will update this page and change the date at the top. If the change is significant — a new AI feature, a new company handling your data — we will tell account holders by email before it takes effect.

14. Contact us

Questions, requests, or complaints about your privacy all go to the same place, and a real person reads them.

The short version