Privacy Policy

1. Who We Are

S-EVAL ("we," "us," "our") provides AI-assisted English speaking practice, grading, progress reporting, and classroom-management features for schools, teachers, and learners. This policy explains what personal data we process, why, with whom we share it, how long we keep it, and the choices and rights you have.

For any privacy request, contact .support@s-evaluation.online.

2. Data We Collect

• Account & profile data: name, email address, authentication identifiers (Google / Apple Sign-In subject IDs when used), role (student, teacher, admin), school / class assignment.
• Authentication data: password hash (never the plaintext password), session and refresh tokens, device identifier for push notification routing.
• Voice recordings & transcripts: audio you record during speaking practice, server-side transcripts derived from that audio, and the AI-generated evaluation, scoring, and feedback produced from it.
• Assessment activity: practice sessions, attempts, grades, progress metrics, time spent, and teacher comments.
• Device & technical data: app version, operating system version, device model, language preference, push notification token, crash diagnostics, and basic performance telemetry.
• Support communications: any message you send to support@s-evaluation.online and our reply.

We do not collect precise geolocation, contacts, calendar, photos, SMS, call logs, browsing history outside our app, or biometric data.

3. Microphone & Audio (Sensitive Permission)

S-EVAL uses the device microphone (Android permission android.permission.RECORD_AUDIO / iOS NSMicrophoneUsageDescription) for the sole purpose of capturing your speech during a speaking practice exercise so the application can transcribe it and produce an AI-generated evaluation.

• The microphone is only activated when you explicitly start a speaking practice session. It is not used in the background.
• Audio is transmitted to our servers over TLS for transcription and scoring. After processing, audio is retained in encrypted storage and linked only to your account.
• We do not use the microphone for advertising, profiling, surveillance, or any purpose unrelated to your speaking practice.
• You can revoke microphone access at any time in your device's system settings; doing so will disable speaking-practice features until you grant it again.

4. Why We Process Your Data

• To authenticate you and operate role-based school workflows (student, teacher, admin).
• To deliver AI-assisted speaking feedback: transcribing your audio, scoring fluency / pronunciation / grammar / vocabulary, and showing corrective feedback.
• To produce progress reports for you, your teachers, and authorized school administrators.
• To send transactional and assignment-related push notifications.
• To detect abuse, prevent fraud, and maintain audit and security controls.
• To diagnose crashes and improve reliability and performance.
• To comply with applicable laws and respond to lawful requests.

5. Legal Bases (EEA / UK / Türkiye / GDPR-aligned)

• Contract performance — delivering the educational service you or your school signed up for.
• Legitimate interest — securing the service, preventing abuse, debugging.
• Consent — recording audio via the microphone, push notifications, and any optional features that ask for explicit permission.
• Legal obligation — record-keeping required by applicable education or data-protection regulations.

6. Third-Party Services (Sub-Processors)

We share strictly the minimum data required with the following processors, each governed by their own privacy terms:

• Google Firebase (Cloud Messaging for push, Crashlytics for crash reporting, Authentication where applicable) — device token, crash logs, account identifier.
• Google Sign-In — name, email, Google subject ID, only if you choose to sign in with Google.
• Apple Sign-In — name, email (real or relay), Apple subject ID, only if you choose to sign in with Apple.
• OpenAI and equivalent AI providers — transcribed text and / or audio segments necessary to score your speaking exercise. We do not allow our providers to use your data to train their general-purpose models, and audio / transcript content is not tied to your real-world identity at the provider boundary.
• Hosting infrastructure — our application servers, object storage for audio, and managed PostgreSQL database, all operated under contractual data-protection terms.
• Apple App Store / Google Play — for app distribution, beta delivery (TestFlight / Internal Testing), and crash diagnostics.

We do not sell personal data and we do not share data with advertising networks. We do not use your data for cross-app or cross-site tracking.

7. Data Retention

• Active accounts: account, profile, and assessment data are retained for as long as the account is active.
• Voice recordings & transcripts: retained while your account is active and the related assessment record is relevant. You can request deletion of individual recordings from the app.
• After deletion: profile data is anonymized, sessions and tokens are revoked. Aggregated and anonymized assessment metrics may be retained for institutional reporting integrity and legal compliance.
• Backups: deleted data may persist in encrypted backups for up to 30 days before being overwritten.
• Server & security logs: retained for up to 90 days for abuse and incident investigation, then deleted.

8. Account Deletion

You can delete your account at any time from the in-app Settings screen on iOS, Android, and web. Deletion removes your profile, voice recordings, transcripts, and individual scores in line with Section 7 above.

Alternatively, you may email support@s-evaluation.online with the subject "Account deletion request" and we will process it within 30 days.

9. Your Rights

Subject to your local law, you may have the right to:

• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• delete your data ("right to be forgotten");
• restrict or object to certain processing;
• data portability (receive a copy in a structured format);
• withdraw consent for processing that relies on consent;
• lodge a complaint with your local supervisory authority (for Türkiye: KVKK; for the EEA: your national DPA; for the UK: ICO).

To exercise any of these rights, contact support@s-evaluation.online.

10. Children's Privacy

S-EVAL is designed for school use and may be used by students under 18. When the service is used by minors, it is provided through the minor's educational institution under that institution's authority. We do not knowingly collect data from children outside this educational context. If you believe a child has signed up without their school's authorization, contact us and we will delete the account.

We do not show behavioral advertising to any user, do not allow third parties to track users, and do not use children's data for any purpose other than delivering the educational service.

11. Security

• All client/server traffic is encrypted in transit over HTTPS / TLS.
• Passwords are stored as salted hashes; we never store plaintext passwords.
• Audio recordings and database records are encrypted at rest by our hosting provider.
• Access to production data is limited to authorized personnel under contractual confidentiality, and is audit-logged.

No system can be guaranteed completely secure. If you believe your account has been compromised, contact support@s-evaluation.online immediately.

12. International Transfers

Some of our processors (e.g. Google, Apple, OpenAI) may process data outside your country, including in the United States. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

13. Changes to This Policy

We may update this policy as the service evolves. The "Effective date" above will be updated, and material changes will be announced in-app and / or by email to your account address.

14. Contact & Data Controller

Data controller and point of contact for privacy matters:

S-EVAL — Privacy Team
Email: support@s-evaluation.online