BandUp

Privacy Policy

Effective date: 17 July 2026 · Last updated: 17 July 2026

This Privacy Policy explains how BandUp (“BandUp”, “we”, “us”, or “our”) collects, uses, shares and protects personal information when you use the BandUp mobile application (the “App”) and this website (together, the “Service”). BandUp is an AI-powered practice tool for IELTS-style speaking exams. By using the Service you agree to the practices described here.

The short version. We collect the information needed to run your mock exams and show your results: your email, the voice answers you record, the transcripts and scores generated from them, and basic usage and device data. We use trusted service providers to process this data on our behalf. We do not sell your personal data or use it for third-party advertising. You can access or delete your data at any time.

1. Who we are

BandUp is the provider of the Service and acts as the data controller for the personal information described in this policy. If you have any questions or wish to exercise your rights, contact us at privacy@band-up.app.

2. Information we collect

We collect the following categories of information:

Information you provide

  • Account information — your email address, and, if you sign in with a third-party identity provider (such as Apple or Google), the basic account identifier and email that provider shares with us.
  • Voice recordings and exam content — the audio of the spoken answers you record during a mock exam, and the text transcripts generated from that audio.
  • Support communications — the content of any messages you send us (for example, by email).

Information generated as you use the Service

  • Exam and results data — mock exam sessions, timings, the questions asked, your transcribed answers, the estimated band scores per criterion, written feedback, and your progress history over time.
  • Subscription and purchase status — whether you hold a free or premium entitlement and related purchase events. Payments are processed by the app stores; we receive your subscription/entitlement status, not your full payment card details.
  • Usage data — features you use, in-app settings and preferences (including notification choices), and fair-use counters.
  • Device and technical data — app version, device type and operating system, language/locale, general diagnostics and crash information, and IP address (from which an approximate, city-level location may be derived).
  • Website data — when you visit this website we process the minimal technical data needed to serve and secure the pages. We do not use advertising or cross-site tracking cookies.

3. How we use your information

  • To create and manage your account and authenticate you.
  • To deliver the core Service — run mock exams, record and transcribe your answers, and generate estimated band scores and feedback.
  • To save your exam history and show your progress over time.
  • To manage subscriptions and entitlements and enforce fair-use limits.
  • To send you service messages, such as sign-in links and notifications that your report is ready (where you have enabled them).
  • To maintain, secure, debug and improve the Service and prevent fraud or abuse.
  • To comply with our legal obligations and enforce our terms.

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:

  • Performance of a contract — to provide the Service you sign up for, including running and scoring your exams and managing your subscription.
  • Consent — for microphone access to record your answers, and for optional communications such as push or email notifications. You may withdraw consent at any time.
  • Legitimate interests — to secure and improve the Service and prevent abuse, balanced against your rights.
  • Legal obligation — where we must retain or disclose information to comply with the law.

5. How your recordings are processed

To turn your spoken answers into a scored report, BandUp sends your audio and the resulting transcripts to specialist service providers that perform speech-to-text transcription, language understanding, speech synthesis and pronunciation assessment on our behalf. This processing is carried out solely to operate and score your exam and to generate your feedback. These providers act as our processors under contract and are not permitted to use your content for their own purposes. We describe such providers by category rather than by name because the specific providers we use may change over time.

6. How we share information

We do not sell your personal data. We share it only in these circumstances:

  • Service providers (processors) — companies that process data on our behalf under contract, described by category:
    • speech-to-text, language-model and text-to-speech providers;
    • pronunciation-assessment providers;
    • cloud hosting, storage and content-delivery providers;
    • email delivery providers (for sign-in links and notifications);
    • payment, subscription-management and entitlement providers, including the mobile app stores and their in-app billing systems;
    • error-monitoring and analytics providers used to keep the Service reliable.
  • App stores — where you make a purchase, the relevant app store processes the transaction and shares subscription status with us.
  • Legal, safety and rights protection — where we reasonably believe disclosure is required by law or necessary to protect the rights, safety or property of users, the public or BandUp.
  • Business transfers — if BandUp is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction, subject to this policy.

7. International data transfers

We and our service providers may process your information in countries other than the one in which you live, including countries that may not provide the same level of data protection as your home jurisdiction. Where we transfer personal data internationally, we rely on appropriate safeguards where required, such as the European Commission’s Standard Contractual Clauses (or the UK equivalent).

8. Data retention

We keep your personal information for as long as your account is active or as needed to provide the Service. Your exam recordings, transcripts, scores and progress history are retained so you can track your progress, until you close your account. You can delete your account at any time in the app (Settings → Delete account); deletion is immediate, and you can choose to receive a copy of your reports and transcripts by email first. Email requests are completed within a reasonable period (generally within 30 days). In either case we delete or anonymise your personal data, except where we must retain certain records to comply with legal, tax or accounting obligations, resolve disputes, or prevent abuse. Residual copies may persist in secure backups for a limited period before being overwritten. For details, see our Account & Data Deletion page.

9. Security

We use technical and organisational measures designed to protect your information, including encryption of data in transit and access controls that limit who can reach it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to respond appropriately to any incident.

10. Your privacy rights

Depending on where you live, you may have some or all of the following rights over your personal information:

  • access to the personal data we hold about you;
  • correction of inaccurate or incomplete data;
  • deletion of your data (“right to be forgotten”);
  • restriction of, or objection to, certain processing;
  • portability of the data you provided to us, in a machine-readable format;
  • withdrawal of consent at any time, without affecting prior processing;
  • the right to lodge a complaint with your local data protection authority.

You can exercise deletion and portability directly in the app: Settings → Delete account deletes your account immediately and can first email you a machine-readable copy of your reports and transcripts. For any other request, email privacy@band-up.app. We will respond within the time required by applicable law. We will not discriminate against you for exercising your rights.

Region-specific notes. If you are in the EEA or UK, the GDPR / UK GDPR rights above apply and you may complain to your national supervisory authority. If you are in Türkiye, you have rights under the KVKK (Law No. 6698), including learning whether your data is processed and requesting its correction or deletion. If you are a California resident, you have rights under the CCPA/CPRA, including to know, delete and correct your personal information and to opt out of “sale” or “sharing” — note that we do not sell or share personal information as those terms are defined.

11. Children’s privacy

The Service is not directed to children under 13 (or under the minimum age required in your country, such as 16 in parts of the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide a more prominent notice. Your continued use of the Service after an update means you accept the revised policy.

13. Contact us

For any privacy question or request, contact us at privacy@band-up.app.