Privacy Policy

Effective date: June 1, 2026

This Privacy Policy explains how engsteady.com ("EngSteady", "we", "us") collects, uses, and shares information when you use the EngSteady mobile app, website, or related services (collectively, the "Service").

1. Information we collect

At a glance, EngSteady collects the following categories of data:

Contact info — name, email address.
User content — audio recordings of speaking tasks, written and multiple-choice answers, in-app feedback messages.
Identifiers — a user ID linked to your account.
Purchases — subscription status, renewal dates, and a reference to your Stripe customer (we do not store card numbers).
Usage data — pages viewed, taps, navigation, and session replays captured on the website by FullStory; device, browser, and IP address.
Diagnostics — error logs and performance traces.

Account information

When you sign in we receive your name, email address, and (if available) a profile picture from Google Sign-In or Apple Sign-In. You can update your name and avatar from your account settings.

Practice data

We store your test attempts, answers, scores, progress, and any audio recordings you submit for speaking tasks. Recordings and answers are used to grade your test and to show you a review of your performance.

Payment information

Subscription purchases are processed by Stripe. We do not store your card number; we only keep a Stripe customer reference, subscription status, and renewal date.

Device and usage data

We collect device, browser, IP address, and interaction data (pages viewed, taps, navigation) to operate the Service, debug issues, and improve the product. Session-replay data is captured via FullStory on the website.

Feedback

If you submit feedback inside the app, we store your message together with your account.

2. How we use information

To create and authenticate your account.
To deliver tests, grade responses, and show your history and progress.
To process payments and manage your subscription.
To send transactional emails (account, billing, feedback responses).
To debug, secure, and improve the Service.
To respond to your support requests.

3. Service providers we share information with

We use the following processors. Each one handles your data under their own privacy policy, which we comply with:

Supabase — authentication, database, and storage (your account, attempts, recordings, avatars). Privacy policy.
Stripe — payment processing and subscription billing. Privacy policy.
Google — Google Sign-In and Google Gemini (used to grade open-ended writing and speaking responses). Privacy policy.
Apple — Apple Sign-In on iOS. Privacy policy.
SendGrid (Twilio) — delivery of transactional emails. Privacy policy.
FullStory — session replay and product analytics on the website. Privacy policy.

We do not sell your personal information, and we do not share it with advertisers.

4. Data retention

We keep your account, attempts, recordings, and other data for as long as your account is active.

You can delete your account at any time from within the app (Account settings on the web, and the Account screen on mobile), or by emailing [email protected] from the address associated with your account. When you delete your account:

You are signed out immediately and can no longer sign in.
Your personal data, including your attempts and recordings, is permanently erased within 7 days, except where we are required to retain it (e.g. tax and billing records).
You stop receiving all further communication from EngSteady.

If you later want to use the same email address for a new account, contact [email protected].

5. Your rights

You may:

Access the personal data we hold about you.
Correct inaccurate data (you can edit your name and avatar in the app).
Request deletion of your account and associated data.
Withdraw consent or object to processing where applicable.

To exercise any of these rights, email [email protected].

EU / UK (GDPR)

If you are in the European Economic Area or the United Kingdom, you also have the right to data portability and the right to lodge a complaint with your local supervisory authority. Our legal basis for processing is the performance of our contract with you (delivering the Service) and, for diagnostics and analytics, our legitimate interest in operating and improving EngSteady.

California (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information as those terms are defined under the CCPA.

6. Children

The Service is not intended for users under 16 years of age. If you believe a child has provided us with personal information, please contact us and we will delete it.

7. Security

Traffic is encrypted in transit (HTTPS). Authentication and storage are managed by Supabase. No system is perfectly secure, but we take reasonable measures to protect your data.

8. International transfers

Our service providers operate in the United States and other regions. By using EngSteady you understand your information may be transferred to and processed in countries other than your own.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email. The "Effective date" at the top reflects the latest revision.

10. Contact

Questions or requests? Email [email protected].