Privacy Policy

Last updated: April 5, 2026

1. Introduction

BandNine.ai ("we", "our", or "us") is an AI-powered IELTS preparation platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at bandnine.ai. By using BandNine.ai, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and authentication credentials. If you sign up via Google or GitHub OAuth, we receive your name, email, and profile picture from those services.

2.2 Profile & Preferences

We collect your IELTS target band score, planned test date, test type (Academic or General Training), and immigration destination country to personalise your learning experience.

2.3 Exercise & Performance Data

We store your writing submissions, speaking recordings, reading and listening answers, band scores, AI feedback, time spent, and progress data. This data is used to track your improvement and adapt exercises to your level.

2.4 Payment Information

Payments are processed by Stripe. We do not store your credit card number, CVV, or full payment details. We receive and store your Stripe customer ID, subscription plan, and payment status.

2.5 Usage & Analytics Data

We use PostHog for product analytics. We collect page views, feature usage, session duration, device type, browser, and approximate location (country level). We do not sell this data to third parties.

3. How We Use Your Information

  • To provide and maintain our IELTS preparation services
  • To personalise exercises, scoring, and feedback to your level
  • To process payments and manage your subscription
  • To send transactional emails (welcome, score reports, streak reminders)
  • To monitor and improve the quality of our AI scoring
  • To detect and prevent fraud or abuse
  • To comply with legal obligations

4. AI Processing

Your writing submissions and speaking transcriptions are sent to Anthropic (Claude AI) for scoring and feedback generation. Your text is processed in real-time and is not used by Anthropic to train their models when sent via the API. Audio for listening exercises is generated using OpenAI text-to-speech or Microsoft Edge TTS.

5. Data Sharing

We do not sell your personal data. We share data only with:

  • Anthropic — for AI scoring and exercise generation
  • OpenAI — for text-to-speech audio generation
  • Stripe — for payment processing
  • Supabase — for database hosting and authentication
  • Resend — for transactional email delivery
  • PostHog — for product analytics
  • Sentry — for error monitoring
  • Vercel — for website hosting

6. Data Storage & Security

Your data is stored securely in Supabase (PostgreSQL) with Row-Level Security (RLS) enabled, ensuring users can only access their own data. All data is transmitted over HTTPS. We use industry-standard security practices including encrypted connections, secure authentication tokens, and regular security reviews.

7. Data Retention

We retain your account and exercise data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes. Anonymised, aggregated data may be retained indefinitely for analytics.

8. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Withdraw consent for data processing
  • Object to automated decision-making

To exercise any of these rights, email us at hello@bandnine.ai.

9. Cookies

We use essential cookies for authentication and session management. We use PostHog for analytics which may set cookies to understand how you use our service. We do not use advertising cookies or trackers.

10. Children's Privacy

BandNine.ai is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. Continued use of BandNine.ai after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

Email: hello@bandnine.ai