Privacy policy

TestReady by Nexus is run by [COMPANY LEGAL NAME] (company number [COMPANY NUMBER]), [REGISTERED ADDRESS]. We are the controller of your personal data under UK data protection law. For anything on this page, email [CONTACT EMAIL].

• Your account: name, email address and password. The password is stored only as a one-way hash; we can’t read it. We use your email to sign you in, reset your password and send messages about your account.
• Your goal: the test you are preparing for, your target score and your test date, so we can build your study plan. We also keep a country and time zone on your account to show prices in the right currency and dates in your local time.
• Your practice: the answers you give, essays you write, speaking recordings you make, how long you took, and the marks and feedback you get. This is the service: without it we can’t mark your work or show your progress.
• Payments: which plan you bought, the amount, currency, date and status. For bank transfer, JazzCash or Easypaisa, the transaction reference and any screenshot of the receipt you upload, which our staff check by hand. We never see or store your card details.
• Security: when you sign in we record your IP address and browser (user agent) against that session, so you can see where you’re signed in and we can spot misuse. To stop password guessing and spam we count requests per IP address and email for short windows of up to an hour; those counters then expire.

Our legal bases under UK GDPR are: contract for running your account, marking and payments; legitimate interests for security, fraud prevention and improving the questions; and legal obligation for keeping payment records.

When you record a speaking answer, the audio is uploaded to our own servers and stored there. It is turned into text by a speech-to-text system (Whisper) that we run ourselves. The audio never leaves our servers. Only the written transcript, with simple measurements such as speaking speed and pauses, is sent on for marking (see below).

• Anthropic (Claude API, United States) marks your writing and speaking. It receives the task and your essay text or speaking transcript, not your name or email. Under its commercial terms Anthropic does not train its models on this data and keeps it only for a limited period for safety and abuse checks.
• Stripe processes card payments and recurring card subscriptions. It receives your email and payment details directly.
• Safepay processes payments in Pakistan. It receives the details you enter on its payment page.
• Our own servers hold everything else: your account, practice, recordings, transcripts, marks and payment records. They are servers we rent and run ourselves in [SERVER LOCATION, e.g. Germany]. Emails are sent through our own mail server.

We don’t sell your data, share it with advertisers, or use it to profile you for anything outside your test preparation.

Anthropic and Stripe are based in the United States. Where your data goes outside the UK we rely on the UK’s adequacy regulations or the standard contractual clauses in those providers’ data processing terms.

• Account, goal, practice, recordings, transcripts and marks: kept while your account is open, so you can look back at your progress. They are deleted when you delete your account.
• Sign-in sessions: expire after 30 days, or straight away when you sign out.
• Rate-limit counters: up to one hour.
• Payment records and receipt screenshots: kept for as long as tax and accounting law requires (usually six years in the UK), even after you delete your account.

Under UK GDPR you can ask us to:

• see the personal data we hold about you and get a copy of it;
• correct anything that is wrong (you can change your name, test and target yourself on your account page);
• delete your data (you can delete your account yourself on your account page; it asks for your password);
• export your data in a machine-readable format;
• object to or restrict how we use it.

Email [CONTACT EMAIL] and we will reply within one month. If you aren’t happy with our answer you can complain to the UK Information Commissioner’s Office at ico.org.uk.

If you live in Pakistan: we apply the same rights to you. Pakistan’s Prevention of Electronic Crimes Act 2016 protects your data from unauthorised access and disclosure, and we will follow any data protection law Pakistan brings into force.

We use one cookie: a session cookie that keeps you signed in. It is strictly necessary, so it doesn’t need your consent. We don’t use analytics, advertising or tracking cookies, and we don’t load third-party trackers. Stripe and Safepay may set their own cookies on their payment pages.

TestReady by Nexus is for adults and young adults preparing for English tests. You must be 13 or older to create an account. If you are under 18, a parent or guardian should agree to you using TestReady by Nexus and to any payment.

If we change this policy we will update the date at the top, and email you first if the change matters to how your data is used.