This Privacy Policy explains how SoloFluency ("SoloFluency", "we", "us") collects, uses, and shares personal data when you visit solofluency.com or use the SoloFluency product.
Who is responsible for your data
SoloFluency is the data controller for personal data processed in connection with our product. If you have questions or requests, contact us at support@solofluency.com.
Personal data we collect
We collect the minimum data needed to provide an IELTS learning experience, keep accounts secure, prevent abuse, and operate billing.
Account and identity
- Email address and authentication identifiers (for example, provider and user ID).
- Optional profile details you provide (for example, display name).
- Sign-in method metadata (for example, email sign-in or Google sign-in).
Learning and assessment data
- Diagnostic and practice answers, writing submissions, feedback, and scoring outputs.
- Progress signals (for example, mastery, confidence, and mistake reconfrontation history).
- Speaking audio may be processed and stored when required for scoring and audit. We prefer expiring URLs and store only what is necessary.
Billing and subscription data
- Plan tier, subscription status, and usage counters associated with your account.
- Payment processing is handled by Stripe. We do not store full card numbers; Stripe stores payment instrument details.
- Invoice identifiers and payment status for reconciliation and support.
Support and communications
- Messages you send to us (for example, support requests) and our responses.
Device, security, and usage data
- Approximate device and request data (for example, browser type, timestamps, and pages viewed).
- Security logs used for fraud detection, rate limiting, and abuse prevention.
How we use personal data
- Provide, personalize, and operate the SoloFluency product and IELTS training loop.
- Authenticate users, secure accounts, and prevent abuse.
- Process subscriptions and billing, and provide invoices and account history.
- Improve reliability, performance, and product quality.
- Measure website performance and engagement (see "Analytics" below).
- Comply with legal obligations and enforce our Terms of Service.
Analytics
We use Ahrefs Web Analytics to understand how our website is used and to improve content and onboarding. Ahrefs reports aggregated website usage (for example, pages viewed and referrers) and is designed to be cookie-free. Ahrefs may process IP-based location signals to derive country-level metrics and uses techniques to count unique visits without using cookies.
How we share personal data
We share personal data only with service providers as needed to run the product, including:
- Supabase (authentication and primary database).
- OpenAI (AI-based scoring and feedback generation based on your submitted content).
- Stripe (payment processing and customer portal for subscription management).
- Ahrefs (website analytics, cookie-free by design).
- Hosting and infrastructure providers (for example, our deployment platform and monitoring tools).
We may also disclose information if required by law or to protect the rights, safety, and security of users and the platform.
Data retention
We retain personal data for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. Some operational logs are retained for shorter periods for security and debugging. Learning artifacts may be retained while your account is active to support progress tracking and auditability.
Security
We use technical and organizational measures designed to protect your information, including access controls, encryption in transit, and secure secret management. No method of transmission or storage is 100% secure, but we work to reduce risk and respond quickly to incidents.
Your choices and rights
Depending on where you live, you may have rights to:
- Access, correct, or delete your personal data.
- Export certain account data.
- Object to or restrict certain processing.
You can request account export and account deletion from within product settings (if available) or by contacting support@solofluency.com. For security, we may need to verify your identity before fulfilling requests.
International transfers
SoloFluency and our service providers may process data in countries other than your own. Where required, we rely on appropriate safeguards for cross-border transfers.
Children
SoloFluency is not intended for children under 16 (or the age required by your jurisdiction to consent to data processing). If you believe a child has provided us personal data, contact support@solofluency.com.
Changes to this policy
We may update this Privacy Policy from time to time. We will update the "Last updated" date and, when changes are significant, we may provide additional notice in the product.