Privacy Policy

LanguagePrep ("we", "us", "our") is an online platform that provides mock exam preparation materials for German language qualifications. Our service is accessible at this website.

If you have any questions about this policy or how we handle your data, you can contact us at support@languageprep.de.

We collect the following categories of personal data:

• Account information — your name and email address when you register, either directly or via Google Sign-In.
• Exam results and answers — your responses to mock exam questions, scores, time spent per section, and estimated band grades. This data is stored to power your dashboard and allow you to review past attempts.
• Usage data — pages visited, features used, and session duration, collected to improve the platform.
• Technical data — IP address, browser type, and device type, collected automatically when you access the service.

We do not collect payment card details directly. Any future payment processing will be handled by a PCI-compliant third-party provider.

We use your personal data to:

• Create and manage your account.
• Store and display your exam history in your dashboard.
• Authenticate you securely on each visit.
• Improve the platform based on aggregate usage patterns.
• Send transactional emails (e.g. email confirmation, password reset). We do not send marketing emails without your explicit consent.

Under UK GDPR, we process your personal data on the following grounds:

• Contract performance — processing necessary to provide the service you signed up for.
• Legitimate interests — improving the platform and preventing fraud.
• Legal obligation — where we are required to comply with applicable law.

Your data is stored securely using Supabase, a cloud database platform hosted on AWS infrastructure in the EU. Data is encrypted in transit (TLS) and at rest. Row-level security policies ensure that your exam data can only be accessed by your own account.

Authentication is managed by Supabase Auth, which follows industry-standard security practices including bcrypt password hashing and secure session token rotation.

We use the following third-party services to operate LanguagePrep:

• Supabase — database, authentication, and file storage.
• Google OAuth — optional sign-in via your Google account. If you use this option, Google shares your name and email address with us in accordance with Google's own privacy policy.
• Vercel — hosting and content delivery.

We do not sell your personal data to third parties, nor do we share it for advertising purposes.

We retain your account data and exam history for as long as your account is active. You can delete individual exam attempts from your dashboard at any time. To request full account deletion, contact us at support@languageprep.de and we will remove your data within 30 days.

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your data ("right to be forgotten").
• Restriction — ask us to limit how we process your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.

To exercise any of these rights, email us at support@languageprep.de. We will respond within 30 days.

We use essential cookies to maintain your login session and a small number of analytics cookies to understand how the platform is used. For full details, see our Cookie Policy.

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of LanguagePrep after changes are posted constitutes your acceptance of the revised policy.