Privacy Policy

Verbaroo (“we”, “us”) is a practice tool for the TEF Canada and TCF Canada French examinations and the CELPIP-General and IELTS General Training English examinations, operated by Verbaroo, 6993 Marine Drive, British Columbia, Canada. We are the organisation responsible for the personal information described here.

For any privacy question or request, contact privacy@verbaroo.com.

Account information. Your email address, password (stored only as a secure hash — we never see it), the name you choose to display, and which exam you are preparing for.

Your practice work. Your answers to reading and listening questions; the text you write for writing tasks; and transcripts of what you say for speaking tasks. We also store the resulting scores, estimated CEFR and NCLC/CLB levels, and the AI feedback generated for each attempt.

Voice recordings. When you record a speaking response, the audio is transmitted for transcription and pronunciation analysis and is then discarded. We do not store your audio recordings on our servers. We do store the text transcript and the resulting scores. During a timed mock exam, your recordings are also kept temporarily in your own browser (browser storage called IndexedDB, on your device only) so an interrupted exam can be resumed and graded. They are deleted from your browser when the exam is submitted or abandoned, and automatically after 48 hours at the latest.

Payment information. If you subscribe, your card details are collected and processed directly by Stripe. We never receive or store your full card number. We store only Stripe's customer and subscription identifiers and your subscription status.

Cookies and technical information. We use only our own cookies, never advertising or third-party tracking cookies: session cookies that keep you signed in, and one small cookie that lets us count the days you use the app without recording every page you visit. We also keep standard server logs (such as IP address and browser type) for security and diagnostics.

Do Not Track and other sites. Verbaroo does not track you across other websites, and no third party collects information about your activity on Verbaroo to follow you across sites or services. Because we do no cross-site tracking, we do not respond differently to browsers' “Do Not Track” signals.

How you use the service. When you sign in, the days you use the app, which mock exams you open, and how many AI-graded answers you use. Our staff see this in an internal dashboard, alongside your email and progress, to understand how the service is used, where people get stuck, and what it costs to run. It is never sold or used for advertising.

• To create and secure your account and keep you signed in.
• To evaluate your answers and produce scores, feedback and estimated NCLC or CLB levels.
• To show your progress over time and let you review past attempts and feedback.
• To process subscription payments and send service emails.
• To maintain, secure and improve the service, and to meet legal obligations.

We rely on your consent and on the performance of our agreement with you. You may withdraw consent at any time by deleting your account, though this means we can no longer provide the service.

We do not sell your personal information or use it for advertising. We share it only with the service providers below, solely so they can perform these functions for us:

We may also disclose information if required by law, or to protect our rights, users or the security of the service.

We keep your account and practice data for as long as your account is open, so you can track progress over time. If you delete your account, we delete your personal information within 30 days, except where we must retain limited records (for example billing records) to meet legal or accounting obligations.

Voice recordings are discarded by our servers immediately after processing. Copies held in your browser during a mock exam are deleted when the exam ends, and after 48 hours at the latest. Our AI providers may keep the data they receive for a limited period under their own terms (for example, OpenAI retains API data for up to 30 days for abuse monitoring and does not use it to train its models).

Subject to applicable law, you may:

• Access the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Delete your account and associated personal information.
• Withdraw your consent to our processing.
• Complain to the Office of the Privacy Commissioner of Canada, or your provincial equivalent.

You can delete your account yourself at any time from your account settings. To exercise any other right, contact privacy@verbaroo.com. We will respond within the timeframes required by law.

We use encryption in transit, hashed passwords, and database access rules that restrict each user's data to that user. API credentials are held server-side and are never exposed to your browser. No system can be guaranteed perfectly secure, but we take reasonable steps appropriate to the sensitivity of the information.

Verbaroo is not intended for children under 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy from time to time. We will change the date at the top and, where the change is significant, notify you in the app or by email.