Last updated: July 13, 2026
Privacy Policy
This Privacy Policy explains how Examling ("Examling", "we", "us") collects, uses, shares, and protects personal information when you use the Examling website and applications (the "Service"). We care especially about the privacy of children, and we've built the Service to collect as little as possible.
1. Who we are
The Service is operated by Examling, which is the data controller for the information described in this policy. For any privacy question, or to exercise any right below, contact us at [email protected] — this is our official contact point for privacy matters and is monitored.
2. Information we collect
Account information
- Email address and an encrypted password, to create and secure your account.
- Display name (optional), and your preferred language.
- Consent records — the date, version, and IP address at the time you accept our terms and (where applicable) provide parental consent, as required by law.
- Voice recordings — if you practise a speaking section, we record your spoken answer, send it to a third-party AI provider to be transcribed into text, and score the transcript. The recording is used for that purpose only. We store the transcript and your score with your practice history; we do not build a voiceprint and we do not use recordings to identify you. Speaking practice is entirely optional — every other section works without a microphone.
Your profile
- Optional, and none of it is required to use the service: a name, a photograph, a country, a phone number, a short bio, and social handles. You choose what to fill in and can remove any of it at any time.
- Your first language, if you tell us — it changes what the marking says, because it selects the error patterns speakers of that language typically produce.
- The phone number is a contact detail. It is not verified, it is never shown to other learners, and it is never used to sign you in.
Learning content & progress
- The practice questions and papers generated for you, your answers, scores, and progress statistics — so you can review history and we can show analytics.
Technical & security information
- Basic device and session information (a device fingerprint, browser type, approximate country from IP, and session timestamps) used to secure accounts, enforce device limits, and detect abuse. We do not use this to build advertising profiles.
Payment information
- Subscriptions are processed by Lemon Squeezy, our Merchant of Record. Card details are entered on their systems — we never receive or store your full card number. We receive only the subscription status and plan needed to grant access.
3. How we use information
- To provide the Service — generate stories and tests, grade answers, and track progress.
- To create and secure accounts, enforce plan limits, and prevent fraud and abuse.
- To process subscriptions and provide customer support.
- To comply with legal obligations and enforce our terms.
- To send essential service emails (e.g. verification, billing, security). We do not sell your data or use children's data for advertising.
4. Legal bases (GDPR)
Where the GDPR applies, we rely on: performance of a contract (to provide the Service you signed up for); legitimate interests (to secure the Service and prevent abuse); consent (where required, including parental consent for children); and legal obligation (to meet our legal duties).
5. Children's information
Examling is intended to be used by children only under the supervision of a parent or guardian, who creates and controls the account. Children provide only a nickname and age group. We do not knowingly collect personal information from a child beyond this. Parents can review, edit, or delete a child's profile at any time. See our full Children's Privacy Notice for COPPA-specific rights and our consent process.
6. How we share information
We do not sell personal information. We share it only with service providers who help us run the Service, under contract and only as needed:
- Hosting & database — our cloud infrastructure and database provider.
- AI processing — providers that generate and score learning content (see below).
- Speech transcription — a provider that converts a spoken practice answer into text so it can be scored.
- Payments — Lemon Squeezy, as Merchant of Record.
- Security & delivery — our content-delivery and security provider.
- Legal — where required by law or to protect rights and safety.
7. AI processing
Practice questions, papers and scoring are produced using third-party AI providers. We send providers only what is needed to produce the content, and never more.
What we send. The practice prompt and the answer you wrote, or the transcript of the answer you spoke. For speaking practice the audio recording itself is sent to a transcription provider. We do not send your name, email address, photograph, phone number or any other profile field with it — a marking request contains the task and your answer, and your first language where you have set one, because that changes what the feedback says.
Model training — stated plainly. One of our AI providers is currently used on a free service tier, and that provider’s terms permit them to use submitted content to help improve their models. In practice that means an essay you write for practice, or the transcript of a speaking answer, may be seen by that provider under those terms. We would rather say this than imply otherwise. Moving these workloads onto paid tiers whose terms exclude submitted content from training is a priority, and we will update this section on the day it is done rather than in advance of it.
If you would prefer not to have your written or spoken practice answers processed on these terms, please do not submit them for scoring; reading and listening practice is graded by us and does not involve sending your answers to an AI provider.
We apply a safety filter to generated content before it is shown.
8. Data retention
We keep personal information only as long as needed to provide the Service and meet legal obligations. When you request deletion, we remove your data within 30 days, except where we must retain limited records for legal, tax, or security reasons. Inactive child data may be purged after a period of inactivity following a warning.
9. Your rights & choices
Depending on where you live, you may have the right to access, correct, delete, export, or restrict processing of your personal information, and to withdraw consent.
You can exercise the two main ones yourself, immediately, without asking us. In Settings → Your data:
- Download my data — a JSON file containing everything we hold about you and your children.
- Delete my account — permanently removes your account, your children’s profiles, and every story, quiz and practice record. This takes effect straight away, not after a waiting period. Limited anonymised security logs are retained for fraud prevention and are no longer linked to you.
You can also delete a single child’s profile (and everything generated for them) directly in the app. For correction, restriction, or anything else, email [email protected] and we will complete it within 30 days. You may also lodge a complaint with your local data-protection authority.
10. Security
Data is encrypted in transit (TLS) and at rest. Access is restricted, passwords are hashed, and sensitive operations run server-side only. No system is perfectly secure, but we work continuously to protect your information.
11. International transfers
We operate globally and may process data in countries other than yours, including the United States. Where required, we use appropriate safeguards for such transfers.
12. Changes to this policy
We may update this policy from time to time. Material changes will be posted here with a new "Last updated" date, and where required we will seek renewed consent.
13. Contact us
Questions or requests: [email protected]. See also our Contact page.