Privacy Policy

1. Who we are / Data controller

The LangPrep Apps are operated by, and your data is controlled by:

For the purposes of the EU General Data Protection Regulation (GDPR), Scootapi OÜ is the "data controller" of your personal data. If you have any questions about this policy or how we handle your data, contact us using the details above.

2. What data we collect

We collect only the data we need to provide and improve the Apps:

• Account information — your email address, name (or display name), and authentication details when you create an account.
• Learning content you submit — the practice content you create or upload for grading, including essay and written-answer texts and speaking audio recordings, along with the resulting scores and feedback.
• Usage & analytics data — how you interact with the Apps, such as exercises attempted, features used, session length, scores over time, and crash/diagnostic events.
• Device & technical information — device model, operating system version, app version, language settings, approximate region, and identifiers used for analytics and security.
• Purchase data — your subscription status and transaction history. Payments are processed by Apple (App Store) and Google (Google Play); we do not receive or store your full payment card numbers.
• Support communications — the content of messages you send us, e.g. by email.

3. How and why we use your data

We use each category of data for specific, limited purposes:

• To provide the service — create and secure your account, deliver practice tests, and sync your progress across devices (account info, device data).
• To grade your essays and speech — process the essays and audio you submit so we can return scores, corrections and feedback (learning content). See Sharing & third parties for how AI grading works.
• To improve the product — understand which features help learners, fix bugs, and refine our content and grading quality (usage & analytics, learning content in aggregated or de-identified form).
• To provide support — respond to your questions and resolve issues (support communications, account info).
• To manage subscriptions — confirm entitlements and handle renewals via the app stores (purchase data).
• For safety, security & legal compliance — prevent fraud and abuse, enforce our Terms, and comply with legal obligations.

4. How we share data / Third parties

We do not sell your personal data. We share it only as described below, and only with service providers bound by appropriate confidentiality and data-protection obligations:

• Third-party AI providers (grading) — when you request grading, the essay text or speaking audio you submit is sent to third-party AI/LLM and speech-processing providers (for example, providers operating large language models, transcription and text-to-speech services) so they can analyze your submission and generate scores and feedback. These providers process your content on our behalf to return the result.
• Analytics & crash-reporting providers — to help us understand usage and diagnose stability issues.
• App stores (Apple & Google) — to process subscription payments and manage in-app purchases. They act as independent controllers for the payment data they handle under their own privacy policies.
• Cloud hosting & infrastructure providers — to store data and run the service.
• Legal & safety — we may disclose data if required by law, to enforce our agreements, or to protect the rights, safety and property of our users or others.
• Business transfers — if Scootapi OÜ is involved in a merger, acquisition or asset sale, data may be transferred as part of that transaction, subject to this policy.

Your personal data is shared only as described in this policy. We do not sell your personal data, and we do not "share" it for cross-context behavioral advertising.

5. Legal bases and your rights (GDPR)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases to process your data: performance of a contract (to provide the Apps you sign up for), our legitimate interests (to secure and improve the service), your consent (where required, e.g. for certain analytics — which you can withdraw at any time), and compliance with legal obligations.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data ("right to be forgotten") — see Account & data deletion;
• Restrict or object to certain processing;
• Data portability — receive your data in a portable, machine-readable format;
• Withdraw consent at any time, without affecting prior processing;
• Lodge a complaint with your local supervisory authority (in Estonia, the Estonian Data Protection Inspectorate — Andmekaitse Inspektsioon).

To exercise any of these rights, email contact@langprep.online. We will respond within the timeframes required by law.

6. California privacy rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you the right to:

• Know what personal information we collect, use and disclose;
• Delete the personal information we hold about you;
• Correct inaccurate personal information;
• Opt out of the "sale" or "sharing" of your personal information; and
• Non-discrimination for exercising your rights.

To make a request, email contact@langprep.online. We will verify your request and respond as required by law. You may use an authorized agent to submit a request on your behalf.

7. Account and data deletion

Once your account is deleted, we remove your personal data from our active systems within 30 days, except where we are legally required to retain certain records (for example, tax and transaction records) or need limited data to resolve disputes or prevent abuse. Backups containing residual data are overwritten on a rolling schedule. De-identified or aggregated data that can no longer be linked to you may be retained.

8. Data retention

We keep your personal data only for as long as necessary to provide the Apps and for the purposes described in this policy. Account data is retained while your account is active. Submitted essays, audio recordings and grading results are retained so you can review your progress, until you delete them or your account. Diagnostic and analytics data is retained for a limited period and then deleted or de-identified. We may retain certain records longer where required by law.

9. Security

We use technical and organizational measures designed to protect your data, including encryption in transit, access controls, and the principle of least privilege for staff and service providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; if we become aware of a breach affecting your data, we will notify you and the relevant authorities as required by law.

10. International data transfers

We are based in Estonia (EU), and our service providers may process data in other countries, including outside the EEA. Where we transfer personal data internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or transfers to countries with an adequacy decision, to ensure your data remains protected.

11. Children's privacy

The Apps are intended for users aged 13 and older (or the higher minimum age required in your country). They are not directed to, and we do not knowingly collect personal data from, children under 13. In line with the U.S. Children's Online Privacy Protection Act (COPPA), if we learn that we have collected personal data from a child under 13 without verifiable parental consent, we will delete it promptly. If you believe a child has provided us with personal data, contact us at contact@langprep.online.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide a more prominent notice (for example, in the App). Your continued use of the Apps after an update takes effect means you accept the revised policy.

13. Contact us

For any questions, requests, or complaints about this Privacy Policy or your personal data, contact: