Privacy Policy

This page explains in plain words what SoSo.ielts collects about you, why, who receives it and how you can delete it.

1. Who handles your data

The SoSo.ielts website (the “Site”) belongs to [Ф.И.О. владельца или название ИП/ООО] ([ИНН, адрес регистрации]), referred to as “we”. We are the owner and operator of the personal data within the meaning of the Law of the Republic of Uzbekistan “On Personal Data”. Contact us at [email для обращений] or [Telegram для обращений].

2. What we collect

• Account: nickname, username and, if you give it, your email. Your password is stored only in encrypted form (an scrypt hash), so we do not know it.
• Telegram: your numeric Telegram ID and your username or name, when you connect our bot. We need them to check your channel subscription and to send a password reset link.
• Profile details you fill in: target band, exam date, avatar colour and privacy settings.
• Learning data: your test answers, bands, time, mistakes, saved words, essay texts and their scores, the mistakes you report, and the days you studied.
• Friends: your friends list, invitations and leaderboard position.
• Technical data: a session cookie, to keep you signed in, and an invitation cookie (7 days). Your IP address is used only briefly, in the server’s memory, to protect against password guessing, and is not saved in the database. Your browser (localStorage) keeps drafts of unfinished tests and essays, your highlights and the mascot setting. These are not sent to us until you submit your answers yourself.

We do not collect passport details, bank card numbers, biometric data or your location. The Site has no advertising and no advertising trackers.

3. Why we use your data

• to make registration and sign-in work;
• to mark tests and show your results, statistics and progress;
• to assess essays automatically with artificial intelligence (section 5);
• for friends and the leaderboard, only within your privacy settings;
• for security, to protect against hacking and abuse;
• to improve the Site, using overall statistics that are not linked to you.

We do not sell your data or share it for advertising.

4. Our legal basis

We process your data with the consent you give at registration and to perform the Terms of Use. You can withdraw your consent at any time (section 8), and we will then delete your account.

5. Essay checking by artificial intelligence

When you send an essay to be checked, the task text, the essay text and any chart picture you uploaded (Task 1) go to the Google Gemini API (Google LLC) for automatic assessment. If it is unavailable, this data goes through OpenRouter (OpenRouter, Inc.) to one of the AI models connected to it. Your nickname, username and email are not sent. The servers of Google, OpenRouter and the model developers may be outside Uzbekistan (section 6).

Questions you write to our Telegram bot go to the Anthropic API (Anthropic, PBC) so that the AI can answer them. The bot cannot see your account or results, so please do not write personal details to it.

An AI assessment is an estimate. It may be inaccurate and is not an official IELTS score. Please do not put personal details in your essays, such as full names, phone numbers or addresses.

6. Who receives your data

• the hosting provider whose servers run the Site;
• Google and OpenRouter (and the companies whose AI models work through it): only task and essay texts and uploaded chart pictures, for checking (section 5);
• Telegram (Telegram Messenger Inc.): our bot uses it to send messages and check your channel subscription;
• Anthropic: only the questions you write to the bot (section 5);
• payment systems (such as Payme or Click), once paid access appears. You enter your card details on their side and we do not receive them;
• other users: only what your settings allow, meaning your nickname, username and avatar, and your statistics according to the “who can see my statistics” setting;
• government bodies: only in cases directly required by law.

Some of this data (for example, essay texts and chart pictures at Google and OpenRouter) may be processed on servers outside the Republic of Uzbekistan. This transfer takes place with your consent and in the manner set by the personal data legislation of the Republic of Uzbekistan.

7. How long we keep your data

As long as your account exists. After you delete your account, your data is removed from the working database straight away and from backups within 30 days. Anonymous statistics (such as how many times a test was taken) may be kept longer.

8. Your rights

• to find out what data about you is stored;
• to correct it, in your Profile;
• to delete your account and all your data: Profile, then “Delete my account”;
• to withdraw your consent to processing;
• to choose who sees your statistics and whether you appear on the leaderboard.

For any question write to [email для обращений]. We usually answer within 10 working days. If you believe your rights have been violated, you can apply to the authorised state body for personal data or to a court.

9. Children

The Site is meant for users aged 16 and over (the IELTS exam itself is also recommended from 16). If you are under 16, you may use the Site only with the consent of a parent or legal guardian. If we learn that a child created an account without this consent, we may delete it.

10. Security

Passwords are stored only as hashes, sessions are protected, only administrators can reach the database, and once launched the Site works over the secure HTTPS protocol. No one can remove every risk on the internet, so please use a separate password for the Site.

11. Changes

We may update this Policy. We will announce significant changes on the Site. The date of the current version is at the bottom of the page.