Privacy Policy

1. Who We Are

Cybrik IELTS is operated by CYBRIK SOLUTIONS (GLOBAL) PRIVATE LIMITED, 4090, Phase 2, Dugri Urban Estate, Ludhiana, Punjab 141001, India ("Cybrik", "we", "us"). We decide how and why your personal data is processed, which makes us responsible for it under Indian data-protection law, including the Information Technology Act, 2000 and its rules and, as its provisions come into force, the Digital Personal Data Protection Act, 2023.

2. Information We Collect

Information you give us

• Account details: first and last name, email address and password (stored only in hashed form). If you sign in with Google, we receive your name, email address and Google account identifier.
• Profile and onboarding details: phone number, why you are taking IELTS, test type (Academic or General Training), whether it is your first attempt, your target band, your planned exam date, and how you heard about us.
• Your work: typed Writing answers, photos of handwritten answers, Speaking audio recordings, Reading and Listening answers, and messages you send to the in-platform assistant (Cyra) or the writing coach.
• Support requests and any messages you send us.

Information created when you use the platform

• Test results, band estimates, feedback, attempt history, timings and progress analytics.
• Your plan and payment records: plan, amount, order and transaction IDs, payment status and invoices.

Information collected automatically

• IP address, browser and device type, pages visited and time on the platform.
• Login cookies, and advertising and analytics identifiers described in Section 7, including the ad or campaign you arrived from.

We do not receive or store your full card, UPI or bank account details. Those are collected by our payment partner, Cashfree Payments.

3. How We Use Your Information

• To create and run your account and let you sign in.
• To evaluate your answers and produce band estimates, feedback, reports and progress analytics.
• To provide the in-platform assistant, the writing coach and the examiner voice.
• To process payments, issue GST invoices and handle refunds.
• To send you service messages, such as sign-in codes, receipts, renewal reminders and important changes.
• To keep the platform secure, and to prevent fraud, account sharing and misuse.
• To measure how our advertising performs (see Section 7).
• To comply with legal, tax and accounting obligations.

We only send marketing messages where you have agreed to receive them or the law allows it, and you can opt out at any time. We do not sell your personal data.

4. AI Processing

To evaluate your work, we send it to AI systems. This is how the service works, and it is automated: no person reviews your evaluation unless your plan says so.

• Writing answers and Speaking audio are sent to Cybrik's evaluation service, which uses AI models to transcribe and score them.
• Photos of handwritten answers are sent to OpenAI to read the handwriting. We do not keep the photo after it is processed.
• Messages to the in-platform assistant and the writing coach, and some speech-to-text and voice features, are processed by OpenAI.

AI training: we do not use your identifiable submissions or recordings to train or fine-tune AI models. We use them only to provide the service to you. OpenAI processes content sent through its API to return results to us, and under its API terms does not use that content to train its models.

We may use aggregated statistics that cannot identify you, such as average scores across all users, to understand and improve the service.

5. Speaking Recordings

• Your browser asks for microphone permission when you start a Speaking task. You can refuse or withdraw it in your browser settings, but Speaking will not work without it.
• We record your spoken answer and process it to produce a transcript, a band estimate and feedback.
• We do not create voiceprints, and we do not use your recordings to identify or verify who you are.
• If you use Google Chrome, live captions during the Speaking test use your browser's built-in speech recognition, which may send audio to Google.
• If your account was created by an institute, your teachers may listen to your recordings for teaching.

6. Who We Share It With

We share personal data only with the following, and only as needed:

• OpenAI (United States): evaluating writing and handwriting, transcription, the in-platform assistant and the writing coach.
• ElevenLabs: generating the examiner's voice in Speaking tests.
• Cashfree Payments (India): processing payments and refunds.
• Google: Google sign-in, Google Tag Manager, and browser speech recognition in Chrome.
• Meta (Facebook/Instagram) and Reddit: advertising measurement (see Section 7).
• Our email delivery provider, to send account and service emails.
• Your institute, if it created your account (see Section 13).
• Government, courts or law-enforcement authorities, where the law requires it.
• A buyer or successor, if our business is reorganised or sold, subject to this policy.

These providers process data under their own terms and privacy policies.

7. Cookies & Tracking

Essential cookies

We use secure login cookies to keep you signed in (an access cookie lasting about an hour and a refresh cookie lasting up to 7 days, or 30 days for institute accounts), plus security cookies. The platform does not work without them.

Advertising and analytics

We use Google Tag Manager, the Meta Pixel and the Reddit Pixel to understand how people find us and to measure whether our ads work. These tools may set cookies and send information such as the pages you visit, your device and the ad you clicked to Google, Meta and Reddit. We also store the Reddit click ID from an ad you clicked so we can attribute your sign-up.

You can block or delete cookies in your browser settings, and use your Google, Meta and Reddit ad settings to limit personalised ads. Blocking essential cookies will stop you signing in.

8. Storage & International Transfers

Your account data, results and recordings are stored in databases and file storage operated by Cybrik. Some providers listed in Section 6, including OpenAI, process data outside India, including in the United States. We transfer data abroad only as needed to provide the service and in accordance with Indian law.

9. Security

• All traffic to the platform is encrypted with HTTPS.
• Passwords are stored only in hashed form.
• Uploaded files are served through temporary, expiring links.
• Access to production systems and personal data is restricted to authorised staff.

No system is completely secure, and we cannot guarantee that it is. If a personal data breach affects you, we will notify you and the relevant authorities as the law requires.

10. How Long We Keep It

• Account, profile, results and submissions: while your account is active. If you ask us to close your account, we delete or anonymise your personal data, except what we must keep by law.
• Invoices and payment records: for the period required by tax and accounting law.
• Handwriting photos: not kept after they are processed.
• Security and server logs: for a limited period, to investigate misuse.

11. Your Rights

Subject to applicable law, you can ask us to:

• tell you what personal data we hold about you and how we use it;
• correct inaccurate or incomplete data;
• delete your data and close your account;
• withdraw a consent you have given (this does not affect processing already carried out); and
• stop sending you marketing.

To make a request, email info@cybriksolutions.com from your registered email address. We may need to verify your identity first. If you are not satisfied with our response, you can contact our Grievance Officer (Section 15) and, once the relevant provisions are in force, the Data Protection Board of India.

12. Users Under 18

If you are under 18, a parent or lawful guardian must create or approve your account and consent to us processing your personal data, or your institute must have that consent. If we learn that we hold a child's data without that consent, we will pause the account and delete the data if consent is not provided.

A parent or guardian can ask to see, correct or delete their child's data by emailing info@cybriksolutions.com.

13. Institute Accounts

If a coaching centre, school or other institute created your account, it provides your details to us and can see your submissions, recordings, scores and reports. The institute is responsible for having a lawful basis to share your data with us, and its own privacy notice also applies to you. We do not use one institute's student data for the benefit of another institute.

14. Changes to This Policy

When we update this policy, we change the version number and the Last Updated date. If a change materially affects how we use your data, we will tell you by email or in-app notice before it takes effect and, where the law requires, ask for your consent again.