Privacy Policy

What we collect

• Account details — your name, email address and password (stored only as a cryptographic hash, never as text we can read).
• Your practice work — answers you type, essays you write, and audio recordings of your voice when you answer speaking questions.
• Results and progress — band scores, per-criterion feedback, and when you attempted what.
• Payment records — what you bought, when, and for how much. We never see or store your card number; that is entered on our payment processor's page, not ours.
• Basic technical data — the kind of device and browser you use, and security logs of sign-ins, which we keep to detect account sharing and abuse.

Why we collect it

To run the service you asked for: to score your work, show you your progress, keep your account secure, and meet our record-keeping obligations for payments. We do not sell your data, and we do not use your practice work to advertise to you.

Your writing and voice go to AI providers

This is the part most people want to know about, so it gets its own section. To produce a band score for writing and speaking, we send the relevant work to specialist AI providers acting as our processors:

• Your essay text is sent to be assessed and returned with a band and feedback.
• Your speaking recording is sent to be transcribed, and the transcript is then assessed.

These providers process the content to return a result to us. We do not permit them to use your work to train their models. Your name and email are not sent with it — the work is submitted without the identifying details attached to your account.

Who else can see your work

• If an institute enrolled you, that institute's staff can see your attempts, scores and feedback. That is the point of them enrolling you, and it is how they teach you. They cannot see your password.
• If you signed up yourself, no institute can see anything of yours.
• Nobody else. Institutes are strictly separated from one another at the database level, and no institute can see another's students.

Who we share data with

• Cloud hosting and database providers that run the service.
• AI providers that score writing and transcribe speech, as described above.
• Payment processors, which handle your payment and tell us whether it succeeded.
• Email and notification providers, to send you account and result emails.
• Law enforcement or regulators, where we are legally required to.

Some of these operate outside Pakistan, so your data may be processed abroad. We use established providers with contractual data-protection obligations.

How long we keep it

• Your account and results: while your account exists, so you can track progress over time.
• Speaking recordings: retained with the attempt they belong to, and deleted when you delete your account.
• Payment records: kept for as long as tax and company law requires us to, even after account deletion.
• Security logs: a rolling period, then discarded.

Your choices

You can ask us to:

• Send you a copy of the data we hold about you.
• Correct anything that is wrong.
• Delete your account and the practice work attached to it.

Email admin@prepwyn.com from your account address and we will action it within 30 days. If an institute enrolled you, tell them too — they hold their own record of your enrolment.

Children

Prepwyn is intended for people preparing for IELTS or PTE and is not designed for children under 13. If you believe a child under 13 has an account, contact us and we will remove it.

Changes

If we change this policy materially we will update the effective date above and notify account holders by email. Continuing to use Prepwyn after that means you accept the revised policy.