Prosefy

Privacy Policy

Last updated: December 28, 2025

Table of Contents

1. Introduction2. Information We Collect3. How We Use Your Information4. AI Processing & Third-Party Services5. International Data Transfers6. Data Storage, Security & Retention7. Your Rights8. GDPR Rights (European Users)9. CCPA Rights (California Residents)10. Cookies11. Children's Privacy12. Data Breach Notification13. Changes to This Policy14. Contact Us

1. Introduction

Welcome to Prosefy ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered writing practice application for IELTS and CELPIP exam preparation.

2. Information We Collect

We collect information in the following ways:

Account Information: When you sign in with Google OAuth, we receive and store your name, email address, and profile picture. We do not have access to your Google password.User Content: We store the writing samples you submit for practice and grading, including your answers to IELTS and CELPIP practice questions, AI-generated grades, feedback, and suggested improvements.Usage Data: We collect information about how you use the app, including practice attempts, scores, timestamps, and progress statistics.Technical Data: We automatically collect certain technical information including your browser type, device information, and IP address for security and analytics purposes.

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve our service• Process your writing samples using AI for grading and feedback• Track your progress and display statistics on your dashboard• Communicate with you about your account or service updates• Detect, prevent, and address technical issues or abuse• Comply with legal obligations

4. AI Processing & Third-Party Services

Your writing samples are processed by artificial intelligence to provide grading and feedback. Specifically, we use:

Third-Party AI Services: Your writing samples and related content are sent to our third-party AI service provider for analysis and grading. This provider processes data according to their own privacy policy and terms. The provider may use data to improve their services in accordance with their policies.Google OAuth: We use Google's authentication service for secure sign-in. Google's privacy policy governs how they handle your authentication data.Database Hosting: Your data is stored in a MySQL database hosted on secure cloud infrastructure.Payment Processing: When you purchase credits, your payment is processed by Stripe. We do not store your full credit card number. Stripe's privacy policy governs how they handle your payment information.

We do not sell your personal information to third parties.

5. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States, where our service provider's servers may be located. By using our service, you consent to this transfer. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

6. Data Storage, Security & Retention

Security: We implement industry-standard security measures including encryption in transit (HTTPS) and secure database access controls to protect your data.Retention Periods:

• Account data: Retained while your account is active, deleted within 30 days of account deletion request• Writing samples & grades: Retained while your account is active, deleted with account• Usage analytics: Retained for up to 2 years in anonymized form• Technical logs: Retained for up to 90 days for security purposes

7. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you• Correction: Request correction of inaccurate or incomplete data• Deletion: Request deletion of your data ("right to be forgotten")• Portability: Request your data in a portable, machine-readable format• Objection: Object to certain processing of your data

To exercise these rights, contact us using the information in Section 14.

8. GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your data based on: (a) your consent, (b) performance of our contract with you, (c) our legitimate interests, or (d) legal obligations• Right to Withdraw Consent: You may withdraw consent at any time by deleting your account• Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority• Automated Decision-Making: Our AI grading involves automated processing. You have the right to request human review of any automated decisions that significantly affect you

9. CCPA Rights (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected• Right to Delete: You can request deletion of your personal information• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights• Do Not Sell: We do not sell your personal information to third parties

To make a CCPA request, contact us using the information in Section 14.

10. Cookies

We use essential cookies to maintain your session and remember your preferences (such as dark/light mode theme). These cookies are necessary for the service to function and cannot be disabled. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

11. Children's Privacy

Our service is not intended for children under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.

12. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you via email within 72 hours of becoming aware of the breach, as required by applicable law. We will also notify relevant regulatory authorities where required.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page, updating the "Last updated" date, and sending you an email notification. Your continued use of the service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about our data practices, please contact us:

• Email: [email protected]• Response Time: We aim to respond to all requests within 30 days