Privacy Policy

AEAS Practice ("we", "us") runs aeaspractice.com. This page explains what we collect, why, and who it's shared with. We collect as little as the site actually needs to work.

What we collect

• Your email address. Sign-in is passwordless (a magic link sent to your inbox). We don't store a password, because there isn't one.
• Practice progress and scores. If you're signed in, your test results sync to your account so they follow you across devices. Signed out, the same data stays in your browser only (localStorage) and never reaches our servers.
• Purchases. Which modules you've bought, and Stripe's payment reference for each, but not your card number or any other payment detail. Card details go straight to Stripe and never touch our servers. Recent purchases may appear on the site as a short anonymous notice, such as "A student in Japan unlocked all of Year 7-9": the country and what was bought, never a name or email.
• AI feedback credit balance. A running count of how many AI-feedback requests you have left.
• Your profile and study settings. The student's name if you add one, the site language, the country we detect when you sign up, your test date if you set a study plan, and how much you practise each day (for your streak and progress emails).
• A parent's email, if you add one. If you add a parent or guardian's email, we use it only to send them a weekly progress report and a private link to view your progress. They can stop the reports from any report, and you can change or remove their email at any time.
• Printing. When you print a test, we record which test, when, and the reference code printed on it, and your name or email is printed on the pages. If the QR code on a printed page is scanned, we record the scan: the account, if signed in, and a scrambled code made from the device's internet address that can't be turned back into the address. We use this only to stop printed tests being shared.
• Signed-in devices. For each device you're signed in on: its type (for example "iPhone · Safari"), the city and country it's used from, and when it was last used. An account can be signed in on 2 devices at a time; you can see and sign out your devices in your account.
• Help chat questions. Questions you type into the "Questions? Ask us" chat and its answers are stored so we can improve the site and its answers. We store a scrambled code instead of your IP address, to limit how many questions can be asked. Please don't type personal details there.

What we don't store

When you request AI feedback, your written answer (or, for speaking, your recorded audio) is sent to our AI provider's API to generate feedback and, for speaking, a transcript. That content is used to produce the response shown to you; we do not save your essays, recordings, or transcripts in our own database afterwards. Requests are processed under our provider's API data-use terms, which do not use API content to train models by default.

Who we share data with

• Stripe: Processes payments. We receive a payment reference back, not your card details.
• Our AI provider: Processes AI feedback requests (writing text, and speaking audio for transcription), as described above.
• Resend: Sends our emails: sign-in links, progress emails, parent reports, and the other emails described below.
• Neon (Postgres): Hosts our database (accounts, purchases, progress, credit balance).
• Vercel Analytics: Aggregate, cookieless traffic stats (which pages get visited), not tied to you individually.

We don't sell your data or run any advertising. We use Vercel Analytics to see aggregate traffic like which pages get visited. It doesn't use cookies, doesn't track you across other sites, and doesn't identify you individually.

Cookies

One cookie keeps you signed in (a signed session token that isn't looked up against a database on every request). No advertising or tracking cookies.

Emails we send

Sign-in links when you ask for one. A welcome email when you join, and one reminder two days later if you haven't tried a test yet. An email about what's included, a week after you join, if you haven't bought anything. A weekly progress email, announcements now and then, and parent reports if you add a parent's email. You can turn off progress emails and announcements in your account or from any of those emails.

Children

Most of our students are at school, and an account is often set up and run by a parent. If you're under 15, please use AEAS Practice with your parent's or guardian's knowledge. A parent or guardian can ask us to see or delete their child's data at any time by emailing [email protected].

Your choices

Delete your account and all associated data at any time by emailing [email protected]. If you've only ever used the site signed out, clearing your browser's site data removes everything, since nothing was ever sent to us.

Changes

If this policy changes in a way that matters, we'll update the date at the top of this page.

Contact

Questions about this policy or your data: [email protected].