← Back to home

Privacy Policy

Last updated: June 2026

1. Information We Collect

We collect information you provide directly: name, email address, and usage data generated while using SimuIELTS (exam scores, vocabulary, session history).

2. How We Use Your Information

Your information is used to provide and improve our services, personalise your learning experience, process payments, and communicate important updates about your account.

3. Data Sharing

We do not sell your personal data. We may share data with service providers (hosting, payment processing, email delivery) strictly necessary to operate SimuIELTS. If you are part of an organization, your progress data is visible to your organization admins and teachers.

4. Data Storage and Security

Your data is stored on secure servers. We use industry-standard encryption and security practices. Authentication uses HTTP-only cookies and short-lived JWT tokens.

5. Cookies and Analytics

We use two types of cookies and similar technologies on SimuIELTS:

  • Authentication cookies — HTTP-only, first-party cookies that keep you logged in. These are strictly necessary and cannot be disabled.
  • Analytics cookies — We use Google Analytics 4 (GA4) and Vercel Analytics to understand how visitors use the platform. These tools collect anonymised data such as pages visited, session duration, device type, and approximate location (country/city level). GA4 sets first-party cookies (e.g. _ga, _ga_*) that persist for up to 2 years.

You are shown a consent banner when you first visit. You may decline analytics at any time by clearing your browser cookies or adjusting your browser settings.

For more information on how Google handles this data, see the Google Privacy Policy. No advertising or remarketing cookies are used.

6. Your Rights

You may access, correct, or delete your personal data at any time from your account settings. To request full data deletion, contact us at the email below.

7. Data Retention

We retain your data for as long as your account is active. Upon account deletion, personal data is removed within 30 days, except where retention is required by law.

8. Contact

For privacy-related questions or data requests, contact us at support@simuielts.com.

9. Data Processors

We use the following third-party services to operate SimuIELTS. Each processes personal data only as instructed and under appropriate data protection terms:

  • Railway — backend hosting and database (PostgreSQL). Data stored in the United States.
  • Vercel — frontend hosting and edge delivery. Data processed in the United States and edge regions worldwide.
  • Brevo (Sendinblue) — transactional email delivery (account verification, password reset, reminders). Data processed in the European Union.
  • Google Analytics (GA4) — website analytics. Data processed by Google LLC. See Google Privacy Policy.
  • Cloudflare R2 — file storage (uploaded media). Data stored at rest in the United States.
  • Stripe — international payment processing for premium subscriptions. Data processed by Stripe, Inc. See Stripe Privacy Policy.