Privacy Policy

Overview

IALTS.ai ("we", "us", or "our") is committed to protecting your privacy and ensuring transparency in how we collect, use, store, and protect your personal data. This Privacy Policy explains how information is handled when you access or use the IALTS.ai platform, including our website (https://www.ialts.ai), assessment engines, practice modules, and certification services.

By registering, accessing, or using IALTS.ai, you acknowledge and agree to the practices described in this Privacy Policy.

1. Information We Collect

We collect information necessary to deliver educational and testing services effectively and securely:

• Personal Information: Full name, Arabic name, username, email address, password (stored in encrypted/hashed format), country, nationality, date of birth, and identity documentation for candidate verification.
• Google User Data: When you choose to sign in via Google Authentication, we collect your primary email address and full name to create and authenticate your account. We do not access contacts, drives, calendars, or private files.
• Account & Exam Records: Assessment attempts, listening, speaking, reading, and writing submissions, scores, audio responses, proctoring snapshots, and generated certificates.
• Technical Information: IP address, browser type, device information, operating system, and session performance telemetry.

2. How We Use Your Information

We use your information exclusively for the following purposes:

• To create, authenticate, and administer your IALTS.ai student or examiner account.
• To deliver Arabic language assessment tests (Modern Standard Arabic and regional dialects).
• To score and evaluate language proficiency, provide AI and human feedback, and generate verified credentials.
• To prevent fraud, impersonation, and unauthorized exam retakes through proctoring oversight.
• To comply with university admissions and institutional verification requests upon candidate authorization.

3. Google API Services User Data Policy & Limited Use

IALTS.ai's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements:

• We only request the minimum required Google OAuth scopes (email, profile, openid) strictly necessary to facilitate user authentication.
• We do not sell Google user data to any third party.
• We do not transfer Google user data for serving advertisements (including personalized, re-targeted, or interest-based advertising).
• We do not allow humans to read user data obtained via Google APIs unless: (a) we have obtained the user's affirmative agreement, (b) it is necessary for security purposes, (c) it is required to comply with applicable laws, or (d) the data is aggregated and anonymized for internal operations.

4. AI & Automated Processing

IALTS.ai uses advanced artificial intelligence models to assist with scoring written and spoken Arabic responses, measuring phonetic accuracy, fluency, vocabulary, and grammar. All automated scoring algorithms are calibrated against CEFR benchmarks and subject to auditor oversight to ensure fairness, accuracy, and reliability.

5. Data Sharing and Third Parties

We do not sell, rent, or lease your personal data. We only disclose information to:

• Verified Partner Institutions: Universities and employers you authorize to view and verify your official exam certificate.
• Secure Infrastructure Providers: Cloud hosting, database, and secure email relay services governed by strict confidentiality terms.
• Legal Authorities: When required by binding legal process or applicable statutory requirements.

6. Data Security & Retention

We implement enterprise-grade security controls including TLS/SSL encryption in transit, AES-256 encryption at rest, hashed credentials, role-based access control (RBAC), and periodic audits. Exam results and official certifications are preserved in the unified digital registry for credential verification for up to 5 years or as legally required.

7. User Rights & Data Deletion

You have the right to access, review, correct, or request deletion of your personal account data at any time. To request account deletion or data export, you may submit a ticket through your IALTS.ai dashboard or email our privacy team directly at info@ialts.ai. All valid requests are processed within thirty (30) days.

8. Contact Information

If you have questions, feedback, or concerns regarding this Privacy Policy or our data protection practices, please contact us: