Privacy Policy

01Who we are

AceEnglish is an IELTS preparation app operated by Xaltius Pte. Ltd., a company registered in Singapore. Xaltius is the data controller for the information described here.

This policy covers the AceEnglish mobile apps for iOS and Android and the web app at aceenglish.adroit-lms.com. It sits alongside our Terms of Use. It does not cover the Adroit LMS platform, other Xaltius products, or third-party sites we link to — those have their own policies.

02Data at a glance

Everything we collect falls into one of these six groups. This table maps directly to the disclosures in the App Store privacy label and the Google Play Data safety form.

You give us the first two groups directly. The rest is generated automatically as you use the app.

03How we use your data

• Run the app. Sign you in, save your answers, sync progress between your phone and the web.
• Mark your work and estimate your band. Score practice tests and generate written feedback.
• Personalise practice. Suggest the skills and question types your results say you should work on.
• Send you messages you asked for. Practice reminders and streak notifications, if you turn them on. You can turn them off at any time in your device settings.
• Send service messages. Password resets, receipts, security alerts and important changes. These are not optional while you have an account.
• Improve the product. Aggregated, de-identified statistics about which lessons are attempted and completed.
• Keep things safe and legal. Prevent fraud and abuse, and meet our accounting, tax and legal obligations.

Under Singapore's Personal Data Protection Act we rely on your consent, and on the legitimate interests of running and securing the service. If you are in the UK, EU or another region with equivalent laws, the equivalent bases are contract performance, legitimate interests, consent and legal obligation.

We do not use your practice work to train general-purpose AI models.

04Who we share it with

We share data with a small number of service providers who process it on our instructions, only for the purpose we engaged them for, and who are contractually barred from using it for their own ends. They fall into these categories:

• Cloud hosting and database infrastructure
• Account authentication and security
• Automated marking of writing and speaking tasks
• Analytics and crash reporting
• Push notification delivery
• Email delivery

Each provider receives only the data its function requires. None of them are advertising networks or data brokers, and none of them use your data to build profiles of you. If you want to know which providers we use in a particular category, email us and we will tell you.

We may also disclose data if the law requires it, to enforce our terms, to protect someone's safety, or as part of a merger or acquisition — in which case we will tell you before your data moves to a new controller.

05Automated marking

When you submit a writing task or a speaking recording, AceEnglish scores it automatically and returns feedback and an estimated band. To do this, the text or audio you submitted is sent to our marking provider, processed, and returned to your account.

Your estimated band is an indication to help you practise. It is not an official IELTS result and carries no standing with IELTS, the British Council, IDP or Cambridge. If you think a score is wrong, email us and a person will look at it.

Automated marking has no legal or similarly significant effect on you.

06How long we keep it

• Account and progress data — for as long as your account is open.
• Inactive accounts — deleted after 24 months with no sign-in. We email you before this happens.
• Speaking recordings — 90 days after marking, then deleted. Your score and feedback stay.
• Crash and diagnostic logs — 90 days.
• Support conversations — 24 months.

When you delete your account we remove your data within 30 days, except records we are legally required to keep and anonymised statistics that can no longer identify you. Backups are overwritten on a rolling 35-day cycle.

07Your choices and rights

You can, at any time:

• See and correct your data. Most of it is editable in Settings → Profile. For anything else, email us.
• Get a copy. Ask us and we will send your account and progress data in a machine-readable file within 30 days.
• Withdraw consent. Turn off notifications in your device settings. Withdrawing consent to core processing means closing your account, since we cannot run the app without it.
• Delete everything. See section 8.
• Complain. Write to us first — we would rather fix it. You can also contact Singapore's Personal Data Protection Commission at pdpc.gov.sg, or your local supervisory authority.

We may ask you to verify your identity before acting on a request, so that nobody else can make it on your behalf.

08Deleting your account

Two ways, both free:

• In the app. Settings → Account → Delete account. Confirm, and deletion starts immediately.
• On the web. Use the form at aceenglish.adroit-lms.com/delete-account. You do not need the app installed.

Deleting your account removes your profile, practice history, scores, essays and recordings. It cannot be undone.

09Age requirement

AceEnglish is for people aged 16 and over. We do not knowingly collect data from anyone younger. If you are between 16 and 18, please make sure a parent or guardian is happy for you to use the app and agrees to this policy.

If we learn that we hold data from a child under 16, we delete it. If you believe a child has given us their data, email learn@xaltius.tech and we will act promptly.

10Security

We encrypt data in transit with TLS and at rest. Passwords are stored as salted hashes and are never readable by us or by our staff. Access to production data is limited to the people who need it, logged, and protected with multi-factor authentication.

No system is perfectly secure. If a breach affects your data, we will notify you and the relevant authorities as the law requires.

11Where your data is stored

Your data is stored on servers in Singapore. Some of our providers operate in other countries, so your data may be processed outside Singapore.

When that happens, we make sure the recipient is bound to a comparable standard of protection — through contractual clauses that meet PDPA requirements, and Standard Contractual Clauses where UK or EU data is involved.

12Changes to this policy

When we change this policy we update the effective date at the top. If a change materially affects how we use your data, we will tell you in the app or by email before it takes effect, and where the law requires it we will ask for your consent again.

Continuing to use AceEnglish after a change means you accept the updated policy.

13Contact us

Privacy questions, data requests and complaints:

For help using the app, the support page is faster.