Legal

Privacy Policy

Last updated: 15 June 2026

This Privacy Policy explains how Examinerly ("we", "our", or "us") collects, uses, stores, and shares information when you use examinerly.com and app.examinerly.com (collectively, "the Service"). Please read it carefully. By using the Service, you agree to the practices described here.

Examinerly is an independent service operated by a single individual (a sole operator), not a registered company or incorporated entity. The data controller for the purposes of applicable data protection law is the individual operator of Examinerly, reachable at support@examinerly.com.

IELTS Trademark Notice

IELTS is a registered trademark of the British Council, IDP: IELTS Australia, and Cambridge Assessment English. Examinerly is independent and is not affiliated with, endorsed by, or connected to those organisations in any way.

1. What Data We Collect and Why

Account data

When you create an account, we collect your email address through Supabase Auth. We use this to authenticate you and to contact you about your account.

Essay submissions and grades

When you submit an essay, we collect the essay text and the task type you select (Task 1 or Task 2). We send this text to OpenAI (via Cloudflare AI Gateway) to generate a band estimate and a diagnostic report. We then store the resulting grade and diagnosis in your account so you can review your history.

Your essay is an AI input, not a human-reviewed document. The band you receive is an estimate, typically within about half a band of a human examiner, and is not an official IELTS score or a guarantee of any real exam result.

IP address (hashed) for rate limiting

The free tier (no account required) allows 2 essay checks per day. To enforce this limit, we hash your IP address using a one-way function and store the hash. We do not store your raw IP address. The hash cannot be reversed to identify you.

Public share pages

You may choose to create a public share link for a graded report. This is entirely opt-in. If you share a report, anyone with the link can view it. You are responsible for any personal information contained in an essay you choose to make public.

Technical and log data

Our hosting providers (Cloudflare, Supabase) may collect standard server log data such as request timestamps, response codes, and browser type as a matter of course. We use this only for security monitoring and diagnosing technical issues.

2. Legal Basis for Processing

Where applicable data protection law (such as the UK GDPR or EU GDPR) requires a legal basis, we rely on the following:

  • Contract performance: processing your email and essays is necessary to provide the grading service you requested.
  • Legitimate interests: storing a hashed IP for rate limiting and operating the service securely are necessary for our legitimate interest in preventing abuse, and do not override your rights.
  • Consent: where we ask for optional permissions (for example, marketing communications), we rely on your explicit consent, which you may withdraw at any time.

3. Third-Party Processors

We share data with the following third parties solely to operate the Service. Each is a data processor acting on our instructions (except where noted):

  • OpenAI (via Cloudflare AI Gateway): your essay text and task type are sent to OpenAI's API to generate the band estimate and diagnosis. OpenAI processes this data in accordance with its API data usage policy. Routing is performed through Cloudflare AI Gateway, which acts as a proxy and does not retain essay content.
  • Supabase: your account email, essay history, and grades are stored in Supabase's managed Postgres database. Supabase also handles authentication.
  • Cloudflare: our application is hosted on Cloudflare Workers and Pages. Cloudflare also provides bot protection via Turnstile (see Section 5). Cloudflare processes request data as part of its global edge network.
  • Dodo Payments: billing is handled by Dodo Payments, the merchant of record. Dodo processes your payment details, issues receipts, and handles VAT/GST. Examinerly does not receive or store your card number or any other payment credentials.

4. Cookies and Local Storage

We use a small number of technically necessary cookies and browser storage:

  • Authentication session cookie: set by Supabase Auth to keep you logged in. Without this, the Service cannot function for signed-in users.
  • Local storage: we may store lightweight preferences (such as your last-selected task type) in your browser's local storage. This data never leaves your device.
  • Cloudflare Turnstile: we use Cloudflare Turnstile on submission forms to detect bots. Turnstile may set a cookie or use browser signals as part of its challenge. No personally identifying data is sent to Cloudflare as part of this process beyond what is described in Section 3.

We do not use advertising cookies, tracking pixels, or analytics services that profile you across other websites.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we delete your email address, essay submissions, and grades. Anonymised or aggregated statistics that cannot be linked back to you may be retained indefinitely.

Hashed IP records used for rate limiting are rotated on a short cycle and are not retained long-term.

We may retain some data longer where required by law (for example, billing records that Dodo Payments is required to keep) or to resolve disputes.

6. International Data Transfers

Examinerly and its processors operate globally. Your data may be processed in countries outside your own, including the United States. Where transfers are subject to data protection law, we rely on Standard Contractual Clauses or equivalent safeguards provided by our processors (Supabase, Cloudflare, OpenAI, Dodo Payments) to ensure an adequate level of protection.

7. Your Rights

Depending on where you are located, you may have the following rights:

  • Access: request a copy of the personal data we hold about you.
  • Correction: ask us to correct inaccurate data.
  • Deletion: request that we delete your account and associated essays and grades. You can also do this yourself in the account settings.
  • Portability: request an export of your essay history and grades in a machine-readable format.
  • Objection / restriction: object to or ask us to restrict processing in certain circumstances.
  • Withdraw consent: where we rely on consent, withdraw it at any time.

To exercise any of these rights, contact us at support@examinerly.com. We will respond within 30 days. You also have the right to lodge a complaint with the supervisory authority in your country.

8. Children

The Service is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), row-level security on the database, and access controls that limit who can view user data internally. No system is completely secure, and we cannot guarantee absolute security, but we work to keep your data safe.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top and, where appropriate, notify you by email. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

11. Contact

Questions about this Privacy Policy or your data? Contact the operator at support@examinerly.com.