Privacy Policy

This policy covers the bandaz.app website and Android and iOS apps. Mobile sessions use operating-system secure storage; drafts and language/appearance choices use local app storage. The app does not request contacts or location access; it requests camera access only to take a profile photo, photo-library access only to send the picture you choose, and microphone access only to record your answers in Speaking practice, each at your choice; it may only ask for an optional system permission for notifications, and without that permission the app keeps working without notifications. It plays Listening audio and may use the device speech service for vocabulary pronunciation.

Writing evaluation and AI analysis require separate consent first. Your text, relevant questions and answers, results and study goals may be sent to OpenRouter and the model providers processing the request. Name and email are not separately added to AI requests; your own text may contain personal information. Do not include confidential information. Providers may process data abroad under their retention policies; we do not promise zero retention or exclusion from model training.

Withdraw consent in Profile → AI data sharing. This stops new AI transfers; a request already sent cannot be recalled. Other practice and saved results remain accessible. Without AI evaluation, Writing results and the associated complete LRW assessment may remain incomplete.

Using Report AI content in the app is optional. When you submit a report, we store your account identifier, the reported AI output identifier and a copy of that feedback, selected reason, any explanation you enter and submission time to address safety concerns and investigate content errors. Only authorized support staff can view this information. Reports are not sent to AI providers and your essay is not automatically attached. Do not enter confidential or personal information in the explanation. Reports are deleted when your account is deleted.

Delete your account using Profile → Delete account on the app or website, or bandaz.app/delete-account. The account, sessions and personal learning data are deleted; legally required accounting records may be retained. Offline copies on other devices and backups are not instantly erased remotely. Report privacy or AI content problems to [email protected].

This Privacy Policy informs you about the personal data collected, processed, and stored by the bandaz.app service (the «Service»).

The policy is drafted in accordance with the Law of the Republic of Azerbaijan «On Personal Data» (No. 998-IIIQ of 11 May 2010) and other applicable legislation.

The operator of the personal data is the person indicated at the top of this page. Send all privacy-related requests to the e-mail address listed there.

The Service collects only the data necessary to provide the service:

Your data is processed for the purposes below. Except where processing is required by law, it is based on your written or electronically recorded consent, or on information that you provide yourself:

Sending a push notification requires the system permission on your phone. When you allow it, the app sends your device's notification token, platform, app version and notification language to our server; the token is bound to that sign-in session. If someone signs in to another account on the same phone, the token moves to the account that signed in last.

When you turn on push notifications, the app tells you that notifications are delivered through Apple and Google and that your device token is passed to them for this, links this policy and asks for your consent. Your consent is recorded on your account with the policy version and time; without it no token is sent.

Notifications are delivered through the Apple Push Notification service (APNs) or Google Firebase Cloud Messaging (FCM). They receive the notification title and short text, the link, the identifiers of the notification and of your account, the category, the type and the number of unread notifications. Your name, e-mail, answers, essay text and band score are not sent; however, the title and text (for example, your streak length or the days left to your exam) may be visible on your phone's lock screen.

Promotional and special-offer notifications are sent only after you give separate consent. The study, new content, and app news categories are on by default after you allow notifications. You can turn notifications off at any time in your phone's system settings or in the app's «Bildiriş parametrləri» (Notification settings) section (categories, quiet hours, temporary pause).

Delivery to a device stops when you sign out, sign out of all devices, your session expires, or you delete your account. Whether a notification was opened is recorded only for aggregate reporting on campaign results.

Adding a promo code does not automatically share any learning data. Result summaries, text-free aggregate learning progress, and permission for a teacher to suggest a task from the approved catalogue are enabled separately; enabling one does not authorize another.

Your answers, essay text, detailed AI evaluation, and e-mail address are not shown to the teacher. A weekly teacher digest is also enabled separately by an eligible verified teacher account and contains only safe aggregates that you have authorized.

You may withdraw each permission at any time from Profile. Future access, digests, and suggestion authority then end immediately; existing discount, decision, delivery, and security audit records remain unchanged.

The website uses an essential session cookie to maintain your login, a 15-minute HTTP-only cookie to preserve the legal-consent step during the OAuth redirect, and a signed HTTP-only referral cookie lasting up to 30 days so a teacher invitation can be recognized after registration. The referral cookie does not grant result-sharing access. The language preference, test answers and writing drafts, timer, and exam recovery state may be stored in localStorage; temporary combined-exam results may be stored in sessionStorage. This data remains on the user's device and is removed when the relevant test is completed or when the user clears it.

The website keeps cookieless visit statistics on its own server: the page opened, how long the page was visible on screen and how far it was scrolled, the labels of links and buttons clicked on public pages (home page, test catalogue, sign-in), the source of the visit (the previous site's address or the UTM parameters of an ad link), the device type (Android, iPhone or computer), whether a sign-up happened that day, and a visitor code that changes every day and cannot be reversed. Text you type and exam answers are not part of these statistics. No IP address, browser details or account are stored in these statistics, and they are not shared with third parties.

No advertising, profiling, or third-party tracking cookies are currently used. If such technology is added, this policy will be updated and prior consent obtained where required by law.

A signed HTTP-only cookie lasting 24 hours prevents duplicate guest presence counts; old activity records not linked to an account are periodically removed after expiry. When registration-source measurement is enabled, first-source and campaign labels are kept in a first-party cookie named bandaz_ft for up to 90 days and may be linked to the account at registration. This record contains source, campaign labels and landing path; the advertising click identifier itself is not retained. The source record is deleted with the account and is not shared with third parties. Anonymous visit records are periodically deleted after 180 days.

If you disable cookies in your browser, signing in may not work.

Your personal data is transferred to and processed by the following parties:

OpenRouter, Google, Apple, Resend, and RevenueCat may use servers outside the Republic of Azerbaijan. Signing in does not grant permission for AI data sharing. Separate permission is requested before the first AI data transfer; if you decline, your writing is saved and you can enable AI evaluation later from your results. Data is sent to Resend only when you separately enable the e-mail channel, and the notification token goes to Apple and Google only when you allow push notifications. Notification e-mails and push notifications do not contain raw test answers or essay text, and every transfer is limited to data necessary for the Service.

Account and learning data is retained while your account is active. Notification-consent history and delivery, scheduler, and audit metadata are retained during that period to enforce your choices, deduplicate delivery, apply the weekly cap, and investigate security events and complaints; e-mail delivery payloads are stored encrypted and are not exposed in the user interface or to a teacher.

The push token and the platform, version and language data attached to it are kept in order to deliver notifications. A token that is not used for 30 days is revoked, and a revoked token is deleted after 30 days. A token is also revoked straight away when you sign out, when the provider reports it invalid, or when more than five devices are registered on the account. When a session ends, notifications stop.

Read notification-inbox entries are deleted 180 days after they were read; records of unread notifications and of notifications sent only as push are kept while your account is active in order to check repeats and the daily/weekly cap. When you delete your account, all push tokens and notification-inbox entries are deleted.

Speaking voice recordings are kept on a private server for 30 days and then deleted; the transcript and feedback are kept until the account is deleted; you can delete any sitting and its recordings yourself.

When you request account deletion, or when data is no longer necessary for its purpose, it is deleted or anonymized without delay, except for tax, payment, security-audit, and other statutory retention duties. Withdrawing consent stops future processing but does not alter prior audit records required for legal or security purposes. The precise mandatory period depends on the record type.

Under the Law «On Personal Data», you have the following rights:

To exercise your rights, write to [email protected]. A request is answered within 7 business days; where contacting a third party is necessary, that period may be extended by a further 7 business days. A legally justified refusal is explained within 5 business days.

The Service is not directed at children under 13, and we do not knowingly collect their personal data. For a user under 18 who cannot lawfully provide consent personally, consent must be provided by a parent or legal guardian. If data was collected without that consent, processing is stopped and the data deleted without delay.

Data is transmitted encrypted over HTTPS, and access to the database is limited to authorized persons only.

No method of transmission or storage can be considered completely secure; we regularly review and improve our security measures.

This Privacy Policy may be updated from time to time. Material changes are notified in advance through your registered e-mail address or account. Fresh consent is obtained for changes that expand the purpose of consent, data categories, or the range of third parties. Where the expanded processing applies only to those who turn on an optional feature (for example, push notifications), consent is obtained at the moment you turn that feature on; existing users are then not asked for a general re-consent, and the change is announced in their account.