Privacy Policy

1. Information We Collect

When you create an account, we collect your name and email address. When you use our practice tests, we store your test results and progress data to provide personalised feedback. If you purchase a subscription, payment processing is handled by Stripe — we do not store your credit card details.

2. Voice Recordings

Mock tests and practice sessions require you to record yourself interpreting. Those recordings are sent to our servers, transcribed, and the transcript is marked against the NAATI CCL criteria. Both the recording and the transcript are personal information, and we treat them as such.

Why we keep the recording at all: so that an interrupted test can be finished. If your connection drops, your browser crashes, or transcription fails part-way through, the recording is what lets you resume or retry instead of losing the attempt and the credit you spent on it.

How long we keep it:

• Recordings from a test that has been marked are deleted within 24 hours.
• Recordings from an abandoned or failed attempt are deleted after 7 days.
• Transcripts from an attempt that was never marked are deleted after 30 days.
• Transcripts that form part of a completed result are kept with that result, so you can review your feedback. Deleting the result deletes them.

Recordings are held in private storage that is not publicly reachable and not shared between accounts. We do not use your recordings to train any model, and we do not sell or share them for advertising.

3. How We Use Your Information

We use your information to provide and improve our services, including personalised practice recommendations, progress tracking, and account management. We may send you service-related emails such as subscription confirmations and important updates.

4. Data Storage & Security

Your data is stored securely using Supabase infrastructure. We use industry-standard encryption and security practices to protect your personal information. Your data is hosted in secure data centres.

5. Third-Party Services

We use the following third-party services: Supabase for authentication and data storage, Stripe for payment processing, Vercel for hosting, OpenAI to transcribe your recordings, Anthropic to mark the resulting transcripts, and Google for the synthesised dialogue audio you listen to. Each has its own privacy policy governing the data it processes.

We also use error monitoring to find faults before they cost someone a test. Error reports are scrubbed before they leave our servers: they never carry recordings, transcripts, email addresses, or credentials. Where a session replay is captured after an error, all text is masked and all media is blocked.

6. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at support@naatiace.com. You can delete your account through your account settings.

7. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies.

8. Contact

For privacy-related enquiries, contact us at support@naatiace.com.