KeenIELTS Privacy Policy

Last updated: 22 September 2026.

This Privacy Policy applies to the KeenIELTS website at keenielts.com, the KeenIELTS Android and iOS apps, and every service we provide through them (together, the “Service”). It explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and the choices you have.

In short: we collect only what we need to run an IELTS preparation platform. We never sell your personal data. Data received from Google or Apple sign-in is used only to create and sign you into your KeenIELTS account.

1. Who we are

KeenIELTS (“we”, “us”, “our”) operates keenielts.com and the KeenIELTS mobile apps, a free IELTS preparation platform offering practice tests, drills, AI band scoring and model answers for Listening, Reading, Writing and Speaking. We are the data controller for the personal data described in this policy. You can reach us at hello@keenielts.com.

2. Information we collect

Account information: your name, email address and a password when you register with email, or your name and email address when you sign in with Google or Apple (see section 3).

Profile and study preferences: your test type (Academic or General Training), target band, exam date, country, UI language and the answers you give in the onboarding questionnaire.

Test and practice data: your answers to practice tests and drills, your writing submissions, your speaking recordings and their transcripts, the scores and feedback generated for them, and how you worked through a paper (for example time spent per question and answer changes) so we can give you personalised insights.

Purchase data: if you buy a premium plan or an examiner marking add-on, our payment provider (Stripe) processes your payment details. We receive only a confirmation, the amount, the currency and a reference; we never see or store your full card number.

Communications: messages you send us through the contact form or by email, and feedback you submit in the app.

Usage and device data: pages visited, features used, time spent, approximate location derived from your IP address, browser and device type, and crash or error reports. This is collected through standard server logs and analytics.

3. Signing in with Google or Apple

You can create an account and sign in with your Google account (“Sign in with Google”) or your Apple ID (“Sign in with Apple”) instead of a password. This section explains exactly what we receive from Google and Apple when you do, and what we do with it.

What Google user data we access

When you sign in with Google we request only the basic OpenID Connect scopes (openid, email and profile). Google then sends us a signed identity token containing: your Google account identifier (a unique ID, not your password); your email address and whether Google has verified it; and your first name and last name.

We do not request or receive access to your Gmail, Google Drive, Calendar, Contacts, Photos, YouTube or any other Google service. We do not store your Google profile picture, and we never receive your Google password.

What Apple user data we access

When you sign in with Apple we receive your Apple user identifier, your email address (or the private relay address Apple creates for you if you choose to hide your email) and, on your first sign-in only, your name if you choose to share it.

How we use it

We use Google and Apple sign-in data to create your KeenIELTS account (or to match you to an existing account that uses the same email address), to sign you in on later visits, and to show your name in the app and address you in account emails such as receipts or password and security notices.

Google and Apple sign-in data is used only to provide and improve the sign-in and account features of the Service. It is not used for advertising, it is not used to train AI or machine-learning models, it is not sold, and it is not used to build a profile of you outside the Service.

Who we share it with

We do not share, transfer or disclose Google or Apple user data to any third party, except to the infrastructure providers that host our servers and database and deliver our email (who process it on our behalf under contract, see section 7), or where the law requires it. We never pass your Google or Apple account data to advertising partners or to the AI providers that score your work.

How we protect it

The identity token is verified on our servers against Google’s or Apple’s published public keys, used once to look up or create your account, and then discarded. We do not store Google or Apple access tokens or refresh tokens, so we hold no ongoing credential to your Google or Apple account. The details we keep (identifier, email, name) are stored in our database, encrypted in transit with TLS and encrypted at rest, and are accessible only to authorised staff. See section 8 for more on security.

How long we keep it and how to delete it

We keep your sign-in details for as long as your KeenIELTS account exists. You can delete your account, including all Google or Apple sign-in data we hold, at any time from keenielts.com/delete-account or by emailing hello@keenielts.com. Deletion is immediate in our live systems, and any copies in backups are removed within 30 days. You can also revoke KeenIELTS’s access at any time from your Google Account permissions page or your Apple ID settings; if you do, you can still sign in with your email and a password.

Google API Services User Data Policy

KeenIELTS’s use of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

4. How we use your information

We use your information to provide, operate and improve the KeenIELTS platform and apps; to score your Listening and Reading answers and to evaluate your Writing and Speaking submissions using AI examiners and, where you request it, human examiners; to generate personalised insights, progress tracking and study recommendations from your practice history; to display anonymised, high-scoring writing samples as model answers for other users (see section 5); to process purchases, issue receipts and handle refunds; to send you account-related messages such as email verification, password resets, receipts and important changes to the Service (marketing emails are sent only with your consent and always include an unsubscribe link); to respond to your support requests; to understand how the platform is used, fix technical issues and keep the Service secure; and to comply with legal obligations.

5. Model answers and anonymisation

IELTS Writing submissions that achieve a sufficiently high band score may be published as model answers visible to other users and to search engines. Before publishing, we automatically redact personal information such as email addresses, phone numbers and names appearing within the essay text. Your account name is never associated with a published model answer. Result pages for your practice attempts can be shared by you through a link; anyone with that link can view the attempt, but it never shows your name or email address.

6. AI processing

Your writing submissions and speaking recordings are processed by third-party AI services (currently Google’s Gemini models) to produce band scores, feedback and transcripts. We send only the content needed for the evaluation: the task, your text or audio, and non-identifying context. We do not send your name, email address or sign-in details. Our AI providers process this data under contract to return a result to us and, under the terms we use, do not use it to train their models.

7. Data sharing

We do not sell your personal data. We share it only with: service providers who process data on our behalf and under our instructions (cloud hosting and database infrastructure, content delivery and security (Cloudflare), transactional email delivery, error monitoring, and the AI services described in section 6); our payment provider Stripe, which processes payments for premium plans and add-ons under its own privacy policy; analytics and advertising partners (Google Analytics for usage measurement, and Mediavine for advertising on the website as described in section 11; on the mobile apps, ads are served through Google AdMob only where you have allowed it); your institution, if you use KeenIELTS through a school or coaching centre that has a partner portal with us, whose staff can see the practice you complete on their portal and can mark your writing and speaking papers; and for legal reasons, if required by law, regulation or legal process, or to protect the rights, safety and property of KeenIELTS, our users or others.

Our providers may be located outside your country, including in the United States. Where personal data is transferred internationally we rely on appropriate safeguards such as standard contractual clauses.

8. How we protect your data

All traffic between your device and our servers is encrypted with TLS (HTTPS). Data is stored on encrypted disks and backups are encrypted. Passwords are stored only as salted hashes; we cannot read them. Sign-in tokens from Google and Apple are verified and discarded, never stored. Access to production systems and personal data is restricted to authorised staff who need it, and is logged. Payment card details are handled entirely by Stripe and never touch our servers.

No method of transmission or storage is completely secure. If we become aware of a breach affecting your personal data we will notify you and the relevant authorities as required by law.

9. Data retention and deletion

Account and practice data is kept for as long as your account is active so that your history and progress remain available to you.

Account deletion: you can permanently delete your account and everything linked to it at any time from keenielts.com/delete-account or by emailing us. Deletion takes effect immediately in our live systems; copies held in backups are removed within 30 days.

Published model answers are already anonymised and are removed on request. Purchase records are retained for as long as tax and accounting law requires, typically seven years, even after the account is deleted. Server logs and analytics data are kept for a limited period for security and troubleshooting and then deleted or aggregated.

10. Cookies and local storage

We use cookies and local storage to keep you signed in, protect the Service from abuse and remember your preferences such as Academic vs. General Training and your UI language. Analytics cookies help us understand how the site is used. Third-party advertising cookies may also be set by our advertising partner as described in section 11. On the website you can accept or refuse non-essential cookies in the consent banner and change your choice at any time; you can also block cookies in your browser settings.

11. Mediavine Programmatic Advertising

Mediavine Programmatic Advertising (Ver 1.1)

The Website works with Mediavine to manage third-party interest-based advertising appearing on the Website. Mediavine serves content and advertisements when you visit the Website, which may use first and third-party cookies. A cookie is a small text file which is sent to your computer or mobile device (referred to in this policy as a “device”) by the web server so that a website can remember some information about your browsing activity on the Website.

First party cookies are created by the website that you are visiting. A third-party cookie is frequently used in behavioral advertising and analytics and is created by a domain other than the website you are visiting. Third-party cookies, tags, pixels, beacons and other similar technologies (collectively, “Tags”) may be placed on the Website to monitor interaction with advertising content and to target and optimize advertising. Each internet browser has functionality so that you can block both first and third-party cookies and clear your browser’s cache. The "help" feature of the menu bar on most browsers will tell you how to stop accepting new cookies, how to receive notification of new cookies, how to disable existing cookies and how to clear your browser’s cache. For more information about cookies and how to disable them, you can consult the information at All About Cookies.

Without cookies you may not be able to take full advantage of the Website content and features. Please note that rejecting cookies does not mean that you will no longer see ads when you visit our Site. In the event you opt-out, you will still see non-personalized advertisements on the Website.

The Website collects the following data using a cookie when serving personalized ads:

Mediavine Partners (companies listed below with whom Mediavine shares data) may also use this data to link to other end user information the partner has independently collected to deliver targeted advertisements. Mediavine Partners may also separately collect data about end users from other sources, such as advertising IDs or pixels, and link that data to data collected from Mediavine publishers in order to provide interest-based advertising across your online experience, including devices, browsers and apps. This data includes usage data, cookie information, device information, information about interactions between users and advertisements and websites, geolocation data, traffic data, and information about a visitor’s referral source to a particular website. Mediavine Partners may also create unique IDs to create audience segments, which are used to provide targeted advertising.

If you would like more information about this practice and to know your choices to opt-in or opt-out of this data collection, please visit National Advertising Initiative opt out page. You may also visit Digital Advertising Alliance website and Network Advertising Initiative website to learn more information about interest-based advertising. You may download the AppChoices app at Digital Advertising Alliance’s AppChoices app to opt out in connection with mobile apps, or use the platform controls on your mobile device to opt out.

For specific information about Mediavine Partners, the data each collects and their data collection and privacy policies, please visit Mediavine Partners.

12. Children

KeenIELTS is intended for people preparing for the IELTS exam and is not directed at children under 13 (or the age of digital consent in your country). We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete it.

13. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you and receive a copy of it; correct inaccurate data (most profile fields can be edited in the app); delete your data (see section 9); object to or restrict certain processing, and withdraw consent where processing is based on consent; and complain to your local data protection authority. To exercise any of these rights, email hello@keenielts.com. We respond within 30 days.

14. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top shows when it was last changed. If we make a significant change, in particular to how we use data received from Google or Apple, we will notify you by email or by a notice in the app before the change takes effect.

15. Contact

Questions about this policy or about your data? Email hello@keenielts.com or use the contact form at keenielts.com/contact.