Legal
Privacy Policy
How Rock Face Limited (“we”, “us”) handles personal data when you use ScorePrep AI on scoremasterai.com.
Last updated: 28 September 2026. Operated by Rock Face Limited. Questions: kumaranup75@gmail.com.
1. Who is responsible for your data
Rock Face Limited is the data controller for ScorePrep AI. You can reach the team at kumaranup75@gmail.com. We are an independent practice platform and are not affiliated with IELTS, the British Council, IDP, Cambridge Assessment English or Pearson PTE.
2. What we collect
- Account details — your name and email address, plus the exam you are preparing for, your target score, current score, exam date and daily study time if you fill them in.
- Study records — questions you answered, accuracy, time spent, streaks, badges and the estimated scores we calculate from them.
- Your answers — the essays, emails and speaking responses you submit for AI feedback, including audio you record.
- Subscription status — whether your plan is active, its tier and renewal date. Card numbers, expiry dates and CVC codes are never sent to us; Paddle, our Merchant of Record and payment provider, handles them.
- Technical data — standard server logs such as request metadata used to keep the platform running and secure.
3. Why we collect it
To let you practise, mark objective questions, generate AI feedback and study plans, show your progress over time, administer accounts and subscriptions, respond to support requests, and spot practice questions that are too hard, too easy or worded badly. We do not sell personal data and we do not run behavioural advertising.
4. How AI feedback is processed
When you ask for writing or speaking feedback, your answer is sent from your browser to our server and then to a third-party large language model provider, which returns criterion scores, corrections and a model answer. Our model keys stay on our server and are never placed in your browser. We send only the text or audio needed for that evaluation — not your payment details — and we do not use your submissions to train third-party models.
5. Where things are stored on your device
A sign-in session is kept so you stay logged in. Your theme choice, exam preference and local practice history are kept in your browser's own storage. Clearing browser data or using a different device removes that local copy. No advertising or cross-site tracking cookies are used.
6. Who we share data with
- Our database and hosting providers, which store accounts and study records.
- Our AI provider, which generates writing, speaking and study-plan feedback.
- Paddle, our Merchant of Record and payment provider, which processes card payments, calculates applicable taxes, issues receipts and manages billing records.
- Public authorities, only where we are legally required to disclose information.
Each of these suppliers processes data under written terms that restrict them to doing the job we hired them for.
7. How long we keep it
Account and study data are kept while your account is open. When you close an account we delete identifying records, except anything we must retain for tax, accounting or legal purposes. AI evaluations are transient requests; the feedback you keep is stored with your account until you delete it.
8. Your rights and choices
Where the law gives them to you, you can request access to your data, correction of anything wrong, deletion, a portable copy, a restriction on processing, or object to processing. You can also withdraw a consent at any time without affecting processing that already happened. Email us at kumaranup75@gmail.com and we will respond within 30 days. You may also complain to your local data protection authority.
9. Children
ScorePrep AI is aimed at adult and late-teen test takers. We do not knowingly collect data from anyone under 16. If a younger learner uses the platform, it should be with a parent or guardian's agreement, and they can contact us to have the account removed.
10. International transfers
Our infrastructure runs in data centres outside your home country. Where personal data leaves a region with transfer rules, we rely on the standard contractual safeguards our providers offer.
11. Security
Traffic is encrypted in transit, access to production data is restricted to people who need it, and model and payment credentials live only in server-side environment variables. No system is perfectly secure, so please keep your password private and tell us immediately if you believe your account has been used without your permission.
12. Changes to this policy
If this policy changes in a way that affects you, we will update the date above and, for significant changes, email subscribed users before the change takes effect.