Privacy Policy

Welcome to Practet! At Klix Soft PVT LTD ("Practet," "we," "us," or "our"), protecting your privacy isn't just a legal requirement—it's fundamental to our mission. This Privacy Policy outlines how we collect, use, and safeguard your personal information when you use our AI-powered IELTS preparation platform at practet.com and our related services.

Your trust is earned through transparency. This policy explains our data practices in clear, straightforward language. If you have questions or concerns about your privacy, we encourage you to contact us at [email protected].

By using our Services, you're agreeing to the practices described in this policy. If any part doesn't align with your expectations, please discontinue use of our platform.

This policy covers all information collected through our website, mobile applications, and related services (collectively referred to as "Services").

Content Overview

1. Information Collection Practices
2. Data Usage and Processing
3. Information Sharing Policies
4. Third-Party Service Providers
5. Cookies and Tracking Technologies
6. Social Media Integration
7. Data Retention Practices
8. Security Measures
9. Your Privacy Rights
10. Data Breach Procedures
11. Do-Not-Track Compliance
12. California Privacy Rights
13. Policy Updates
14. Contact Information

1. Information Collection Practices

Personal Information You Provide

We collect personal information that you voluntarily share when creating an account, using our services, or communicating with us. The scope of collection depends on how you interact with our platform and which features you choose to use.

Contact and Identity Information
We collect your full name, email address, and phone number to establish and maintain your account, provide customer support, and deliver our services effectively.

Payment and Billing Data
When you subscribe to premium features, we collect payment information necessary to process transactions. This includes payment method details and billing addresses. All payment processing is handled securely by our trusted partners: Stripe, eSewa, and Khalti, who maintain the highest security standards.

Voice and Audio Content
Our platform records and analyzes your spoken responses during IELTS speaking practice sessions. This audio data is essential for providing AI-powered pronunciation feedback, fluency assessment, and personalized coaching recommendations.

Academic Performance Information
We track your practice test scores, completion rates, study patterns, time allocation across different IELTS sections, and overall progress metrics to deliver personalized learning experiences and adaptive content recommendations.

Social Authentication Data
If you choose to register or sign in using Google or Apple accounts, we receive basic profile information including your name, email address, and profile image. This streamlines the registration process while maintaining security.

Automatically Collected Information

Our systems automatically gather certain technical and usage information to ensure optimal performance, security, and user experience.

Technical Specifications
We collect device information including IP addresses, browser types, operating systems, device identifiers, and network connection details. This information helps us optimize our platform for different devices and identify potential security threats.

Usage Analytics
We monitor how you navigate our platform, which features you use most frequently, session duration, and interaction patterns. This data helps us improve user experience and identify areas for enhancement.

Performance Data
We track platform performance metrics, loading times, error rates, and feature utilization to maintain service quality and identify technical improvements.

2. Data Usage and Processing

Service Delivery and Enhancement

Account Management
We use your personal information to create and maintain your account, authenticate your identity, and provide seamless access to our services across devices.

AI-Powered IELTS Preparation
Your voice recordings, written responses, and performance data fuel our artificial intelligence systems that provide instant scoring, detailed feedback, pronunciation analysis, and personalized study recommendations tailored to your specific learning needs.

Progress Tracking and Analytics
We analyze your study patterns, test performance, and engagement metrics to generate comprehensive progress reports, identify knowledge gaps, and suggest targeted improvement strategies.

Personalized Learning Experiences
Based on your performance data and learning patterns, we customize content difficulty, recommend specific practice exercises, and adapt our teaching approach to maximize your IELTS preparation effectiveness.

Communication and Support

Service Communications
We send important updates about your account, new features, system maintenance, policy changes, and other service-related information essential for your experience.

Marketing and Promotional Content
With your consent, we share news about new features, study tips, IELTS preparation guides, and special offers. You maintain complete control over these communications and can opt out at any time.

Customer Support
We use your information to respond to inquiries, troubleshoot technical issues, and provide personalized assistance with your IELTS preparation journey.

Security and Legal Compliance

Fraud Prevention
We monitor usage patterns and account activity to detect and prevent fraudulent behavior, unauthorized access, and security threats.

Legal Obligations
We process data as required to comply with applicable laws, respond to legal requests, and protect the rights and safety of our users and platform.

3. Information Sharing Policies

Legal Basis for Processing

We process your personal information based on several legal foundations:

Contractual Necessity
Processing required to deliver the services you've subscribed to and fulfill our obligations under our Terms of Service.

Legitimate Business Interests
Activities necessary for our business operations, including service improvement, security measures, and customer support, balanced against your privacy rights.

Consent
Processing based on your explicit permission, particularly for marketing communications and optional features.

Legal Compliance
Processing required to meet our legal obligations, respond to lawful requests, and protect legal rights.

Controlled Information Sharing

Service Providers and Contractors
We engage trusted third-party providers who assist with payment processing, cloud hosting, AI processing, customer support, and marketing services. These partners are contractually bound to protect your information and can only use it for specified purposes.

Business Operations
In the event of mergers, acquisitions, or business transfers, your information may be transferred as part of the transaction, subject to the same privacy protections.

Legal Requirements
We may disclose information when required by law, court orders, government requests, or to protect the safety and rights of our users and the public.

4. Third-Party Service Providers

We carefully select and monitor our service providers to ensure they meet our privacy and security standards:

Cloud Infrastructure
Amazon Web Services (AWS) provides secure, scalable hosting and data storage with enterprise-grade security measures and compliance certifications.

Payment Processing
Stripe, eSewa, and Khalti handle all payment transactions using industry-standard security protocols and encryption to protect your financial information.

Authentication Services
Google OAuth and Apple Sign-In provide secure, convenient login options while maintaining your privacy and security.

AI and Voice Processing
Specialized AI service providers help power our voice recognition, pronunciation analysis, and feedback systems using secure, privacy-focused processing methods.

5. Cookies and Tracking Technologies

Cookie Usage

We use cookies and similar technologies to enhance your experience, maintain security, and analyze platform performance.

Essential Cookies
Required for basic platform functionality, user authentication, security measures, and service delivery. These cannot be disabled without affecting core features.

Analytics Cookies
Help us understand user behavior, measure feature effectiveness, and identify areas for improvement. This data is aggregated and anonymized.

Preference Cookies
Remember your settings, language choices, and customization preferences to provide a personalized experience across sessions.

Managing Cookie Preferences

You can control cookie settings through your browser preferences. However, disabling certain cookies may limit platform functionality and your overall experience.

6. Social Media Integration

Authentication Integration

Our platform integrates with Google and Apple authentication services to provide convenient, secure account access.

Information Received
When you use social authentication, we receive basic profile information including your name, email address, and profile image. The specific data varies by provider.

Data Usage
Social authentication data is used solely for account creation, authentication, and basic profile setup. We don't access your social media content, contacts, or other personal information.

Provider Policies
Your relationship with social media providers is governed by their respective privacy policies. We recommend reviewing their data practices to understand how they handle your information.

7. Data Retention Practices

Retention Principles

We retain personal information only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, and protect our legitimate interests.

Active Account Data
While your account remains active, we retain your personal information, practice data, and progress records to provide continuous service and track your improvement.

Voice Recordings
Audio recordings from practice sessions are retained to enable progress tracking and historical performance analysis. You can request deletion of specific recordings at any time.

Inactive Accounts
When you close your account, we delete most personal information within 30 days. Some data may be retained longer for legal compliance, fraud prevention, and legitimate business purposes.

Legal Requirements
Certain information, particularly payment records and legal documentation, must be retained for specified periods to comply with applicable laws and regulations.

8. Security Measures

Technical Safeguards

Encryption Standards
All data is encrypted both in transit and at rest using industry-standard encryption protocols to prevent unauthorized access.

Access Controls
We implement strict access controls, ensuring only authorized personnel can access personal information on a need-to-know basis.

Infrastructure Security
Our cloud infrastructure includes firewalls, intrusion detection systems, regular security audits, and 24/7 monitoring to protect against threats.

Organizational Measures

Staff Training
All team members receive regular privacy and security training to ensure proper handling of personal information.

Incident Response
We maintain comprehensive incident response procedures to quickly address any security concerns or data breaches.

Regular Audits
We conduct regular security assessments and compliance audits to identify and address potential vulnerabilities.

Your Security Responsibilities

While we implement robust security measures, protecting your account also requires your participation:

• Use strong, unique passwords
• Enable two-factor authentication when available
• Log out from shared or public devices
• Report suspicious activity immediately

9. Your Privacy Rights

Universal Rights

Regardless of your location, you have fundamental rights regarding your personal information:

Access Rights
Request a complete copy of all personal information we hold about you, including how it's used and with whom it's shared.

Correction Rights
Request updates or corrections to inaccurate or incomplete personal information in your account.

Deletion Rights
Request deletion of your personal information when it's no longer necessary for our services or legal obligations.

Portability Rights
Request your personal information in a structured, machine-readable format for transfer to another service provider.

Objection Rights
Object to certain types of processing, particularly for marketing purposes or automated decision-making.

Account Management

Profile Updates
Access and modify your account information, communication preferences, and privacy settings through your account dashboard.

Communication Control
Manage your email preferences, opt out of marketing communications, and customize notification settings.

Data Downloads
Export your practice history, progress reports, and other account data for your records or transfer to other platforms.

Exercising Your Rights

To exercise any privacy rights or submit requests:

• Email us at [email protected] with specific details
• We'll verify your identity and respond within 30 days
• No fees are charged for reasonable requests
• We'll explain any limitations or legal requirements that may apply

10. Data Breach Procedures

Incident Response

Detection and Assessment
We maintain continuous monitoring systems to detect potential security incidents and assess their scope and impact on user data.

Immediate Response
Upon discovering a potential breach, we immediately contain the incident, assess the risk to user data, and begin remediation efforts.

User Notification
If a breach poses significant risk to your privacy or security, we'll notify you promptly via email and through our platform with details about:

• What information was involved
• Steps we've taken to address the breach
• Recommended actions you should take
• How to contact us for additional information

Regulatory Compliance
We comply with all applicable breach notification laws, including notifying relevant authorities within required timeframes.

11. Do-Not-Track Compliance

Current Standards

Currently, there's no universally accepted standard for recognizing and responding to Do-Not-Track (DNT) browser signals. As such, our platform doesn't respond to DNT signals at this time.

Our Approach

Instead of relying on DNT signals, we provide granular privacy controls within your account settings, allowing you to customize your privacy preferences and control how your information is used.

Future Developments

If a standardized DNT protocol is established that we're required to follow, we'll update our practices accordingly and notify users of any changes.

12. California Privacy Rights

California Consumer Privacy Act (CCPA)

California residents have additional rights under the CCPA:

Information Categories
You can request details about the categories of personal information we collect, the sources of that information, and the business purposes for collection.

Disclosure Information
Request information about any personal information we've disclosed to third parties and the categories of recipients.

Deletion Rights
Request deletion of personal information, subject to certain exceptions for legal compliance and legitimate business purposes.

Non-Discrimination
We won't discriminate against you for exercising your CCPA rights, including denying services, charging different prices, or providing different service levels.

California Shine the Light Law

Under California Civil Code Section 1798.83, California residents can request information about our disclosure of personal information to third parties for direct marketing purposes during the previous calendar year.

Exercising California Rights

California residents can exercise these rights by contacting us at [email protected] with "California Privacy Rights" in the subject line.

13. Policy Updates

Change Management

We may update this privacy policy periodically to reflect changes in our practices, services, or applicable laws. Updates will be managed as follows:

Notification Methods

• Email notification to your registered address for significant changes
• Prominent notice on our website and platform
• Updated "Last Modified" date at the top of this policy

Effective Dates
All changes include clear effective dates, and continued use of our services after the effective date constitutes acceptance of the updated policy.

Material Changes
For significant changes that affect how we collect, use, or share your information, we'll provide advance notice and may request your renewed consent.

Review Recommendations

We encourage you to review this policy periodically to stay informed about how we protect your privacy and handle your personal information.

14. Contact Information

Privacy Inquiries

For questions, concerns, or requests related to this privacy policy or our data practices:

Primary Contact
Email: [email protected]
Response Time: We aim to respond within 48 hours

Postal Address
Klix Soft PVT LTD
Rajkulomarg, Hadigaun
Ward 05
Kathmandu 44600
Nepal

Data Subject Requests

For formal requests to exercise your privacy rights, please include:

• Your full name and email address associated with your account
• Specific request type (access, deletion, correction, etc.)
• Any additional information needed to verify your identity
• Preferred method for receiving our response

Response Commitments

• Acknowledgment: Within 48 hours of receiving your inquiry
• Resolution: Within 30 days for most requests
• Complex Requests: May require additional time with advance notification
• Verification: We may request additional information to verify your identity before processing certain requests

This privacy policy reflects our commitment to transparency and your privacy rights. We believe that clear communication about data practices builds trust and enables you to make informed decisions about using our services.