Privacy Policy

Last updated:

Summary

The short version, in plain words. The full text below is what applies.

  • We collect what Testera needs to work: your email (and your name, if you give it), your practice answers and progress, your conversations with Tera, Language Lab transcripts, and your IP address and device details.
  • We use it to adapt your practice, track your progress, improve questions using anonymised data, keep the service secure and, if you want them, send study reminders.
  • AI replies come from Anthropic and Google models through EU endpoints, and voice from ElevenLabs, with Google Cloud Text-to-Speech as a fallback. Your prompts are not used to train those models.
  • We never sell your data or use it for advertising, and we do not keep voice recordings.
  • Your data is stored in the EU (Ireland). Ask for a copy, a correction or deletion at legal@testera.org; account data is deleted within 30 days of a deletion request.
  • Cookies are essential ones only, for signing in and sessions: no advertising or tracking cookies. The Language Lab keeps a random number in your browser only to count a guest's free daily conversation.
  • Testera news by email is optional: we write only after you confirm, keep only what that consent needs, and every email has a one-click unsubscribe link.

1. Information we collect

  • Email address and name (optional). We use passwordless sign-in (email magic-link or Google), no passwords are stored.
  • Practice answers, scores, study duration and progress
  • Session duration and focus patterns
  • Tera (AI study coach): Your messages and Tera’s replies, processed to deliver coaching and kept as your conversation history.
  • Language Lab (voice conversations): A transcript of the conversation, the corrections and the CEFR estimate produced from it, and the words you saved as flashcards. Audio is processed to produce that transcript and is not retained.
  • IP address, browser type, device information

2. How we use your information

  • Deliver personalised adaptive practice with tailored difficulty
  • Track progress, identify weak areas and provide score predictions
  • Improve question quality using anonymised data
  • Send optional study reminders (opt out anytime)
  • Ensure platform security and prevent fraud

3. Data sharing

  • Google Cloud (Cloud Run, EU): Application hosting and database, in EU regions, so your data stays under GDPR protections
  • AI processing: Questions, coaching replies and language feedback are generated by large language models from Anthropic and Google, accessed through EU endpoints. Your prompts are not used to train those models.
  • Voice: When you use Language Lab or ask Tera to speak, text is sent to ElevenLabs (speech synthesis and conversational voice) with Google Cloud Text-to-Speech as a fallback. Audio is streamed to your browser and is not stored by us. In a Language Lab conversation, what you say is transcribed so the tutor can reply and so you can see corrections afterwards; we keep the transcript, not the recording.
  • Request metadata: Every AI request carries metadata for security, cost control and abuse prevention. Prompt content is not stored beyond what your session needs.
  • Revolut Business: Secure payment processing (PCI DSS compliant)
  • We never sell your data to third parties or use it for advertising

4. How long we keep things

  • Voice recordings: not retained. Audio is processed to produce a transcript and discarded.
  • Practice history, transcripts and flashcards: kept while your account is open, so your progress and revision work.
  • Account data: deleted within 30 days of a deletion request.
  • Logs containing IP and device information: kept for up to 90 days for security and abuse prevention.
  • Abuse prevention: we keep hashed network counters to stop abuse, plus a reason on an account when its allowance is reduced.

5. Your rights (GDPR)

  • Access: Request a copy of your data (email: legal@testera.org)
  • Deletion: Request account deletion; account data is deleted within 30 days
  • Portability: Export your practice history in JSON format
  • Rectification: Correct inaccurate information
  • Opt-out: Unsubscribe from emails anytime

6. Security

  • Passwordless sign-in (email magic-link or Google); we never store account passwords. All connections use HTTPS/TLS encryption
  • Data stored in the EU (Ireland), inside GDPR jurisdiction
  • Practice data is retained for 2 years after your last session, then automatically deleted. Account data is deleted within 30 days of a deletion request.
  • Strict internal access controls

7. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this may affect platform functionality.

The Language Lab keeps a random number in your browser so that a guest's free daily conversation is counted for your device, not shared with everyone on the same connection. It holds nothing about you, is used for nothing else, and clearing your browser's site data removes it.

8. Testera news by email

Testera news is optional and separate from your account. If you sign up, we keep your email address, where on the site you signed up, any topics you chose, which version of the sign-up wording you saw, and when you asked, confirmed and, if you do, unsubscribed, plus one-way hashes of the codes in your confirmation and unsubscribe links. We do not keep your name or your IP address with it.

  • Basis: your consent (Article 6(1)(a) GDPR). We send nothing until you confirm, through the link in the confirmation email. A request that is not confirmed within 7 days stops working and is deleted.
  • Withdrawing consent: every email has a one-click unsubscribe link, signed-in learners can switch Testera news off in Settings, and you can write to legal@testera.org. After you unsubscribe we keep your address marked as unsubscribed, so that we do not write to you again; ask us and we will delete it.
  • Sending: these emails are sent through Resend, our email provider, which processes your address to deliver them.

9. Data controller

The data controller for Testera is Aqta Technologies Limited, registered in Ireland.

Aqta Technologies Limited
20 Harcourt Street
Dublin 2
D02 H364
Ireland

Questions? Email legal@testera.org