Privacy Policy

Who We Are

CELPIP Practice is operated by OCX Software Inc. and is an independent preparation tool for Speaking, Writing, Reading and Listening, with vocabulary and guided courses. It supplements official CELPIP preparation resources. We are not affiliated with, endorsed by, or connected to Paragon Testing Enterprises or any official CELPIP body. For official test preparation materials, we always recommend visiting celpip.ca or working with a qualified CELPIP instructor.

This policy describes how CELPIP Practice (“we,” “us,” “our”) collects, uses, and protects information when you use the CELPIP Practice mobile application and website (together, the “Service”).

What We Collect

We collect account, practice and usage data to provide the features you use:

• Account information: email address and display name provided through sign-in (Apple, Google or email). Authentication is handled by our identity provider.
• Audio recordings: voice recordings you make during speaking practice sessions. These are uploaded to our servers for AI transcription and scoring.
• Session data: task selections, scores, transcripts, written responses, answer selections and AI feedback across all four skills. This includes saved drafts, practice history, course progress and optional teacher notes.
• Vocabulary: saved words, definitions, translations, notes, personal examples and review history.
• Usage data: app interactions, session frequency, and device information to help us improve the service.
• Push notification tokens: device tokens used to notify you when AI scoring results are ready.
• Subscription information: purchase history and subscription status, managed through our payment and subscription providers.

How We Use Your Data

• AI scoring: your audio recordings are transcribed, and transcripts and written responses are evaluated to provide scores, feedback and model responses. Vocabulary lookup and enrichment use translation and AI providers. Data may be processed in Canada, the United States and other countries where our providers operate.
• Account management: to maintain your account, track credits, and manage subscriptions.
• Service improvement: aggregated and de-identified usage patterns help us improve scoring accuracy and the overall experience.
• Communications: push notifications for scoring results and, if you opt in, occasional product updates.

Third-Party Services

We use the following providers for processing. Which provider receives a particular request depends on the feature and whether a fallback is needed. We update this policy when our processing arrangements materially change.

• Microsoft Azure: hosts our backend and stores practice content, recordings and results.
• OpenAI and Deepgram: OpenAI transcribes your speaking recording; Deepgram may receive the audio as a fallback. Your audio is sent for transcription.
• Surplus Intelligence and OpenAI: Surplus Intelligence routes transcripts and written responses to model providers for scoring, feedback and model responses. OpenAI is also used as a fallback. This scoring path sends text, task context and, where relevant, task images; it does not send your speaking audio to the text grader.
• Microsoft Azure Translator and OpenAI: process vocabulary words and relevant examples for translations, definitions and enrichment.
• Clerk: signs you in and holds your email address and display name.
• RevenueCat, Stripe and Apple: process purchases and track subscription status, depending on where you subscribe. We never see or store your full card details.
• App stores: distribute our mobile apps and process in-app purchases.
• Email provider: delivers our transactional and product emails and stores the addresses subscribed to them.
• PostHog: receives screens viewed, features used, practice completion, score/CLB events, purchase events and technical usage information. When signed in, these events are linked to your account identifier and may include your email address and display name so activity across web and mobile can be connected. This is identified analytics, not anonymous data. We do not intentionally send audio recordings, full transcripts or full written responses in analytics event payloads. Mobile session replay is disabled.
• Website hosting provider: serves this site and processes request logs, including IP addresses.

Your AI Processing Choice on iPhone

The iPhone app asks for permission before sending your practice content for third-party AI or translation processing. You can decline and still use reading, listening and saved vocabulary review. You can change the choice for the signed-in account on that device in Settings → Privacy → AI processing.

Turning it off stops new requests and queued retries from that device. Requests already sent may finish processing; withdrawing permission does not recall data already received by a provider. Avoid including sensitive personal information in practice answers. You can delete saved sessions or your account separately.

Data Storage & Retention

Your data is stored with our cloud hosting provider. Audio recordings and session data are retained while your account is active so you can review your practice history and track progress, and you can delete individual sessions yourself at any time. If you delete your account, we delete your personal data, including audio recordings, within 30 days. We also delete the data of accounts that have been inactive for two years. Records we are required to keep for tax and accounting, such as proof of a payment, are kept for as long as the law requires and are not used for anything else.

Your Rights

You have the right to:

• Access your personal data: you can view your session history and account information within the app.
• Delete your account and all associated data. You can do this yourself in the mobile app under Settings, Delete account, or by emailing us at hello@practicecelpip.ca.
• Correct any personal data that is inaccurate.
• Export your data, or ask us to send it to another provider, upon request.
• Object to or restrict how we use your data, and withdraw consent at any time. Withdrawing consent does not affect processing already carried out.
• Opt out of push notifications through your device settings, and of product emails through the unsubscribe link in any of them.
• Complain to a regulator. In Canada that is the Office of the Privacy Commissioner, in Quebec the Commission d’accès à l’information, and in the UK or EU your local supervisory authority.

We answer these requests within 30 days and never charge for them.

Cookies and similar technologies

We use cookies and local storage for keeping you signed in, which the Service cannot work without, and product analytics, which help us see which features are used and where people get stuck, and remembering where visitors found us. We do not sell your data. You can clear or block cookies in your browser, though signing in will stop working if you block the essential ones.

Optional Reddit ad measurement

If you arrive from a Reddit ad and choose Allow measurement, we share that ad’s click identifier and verified initial purchase details (amount, currency, time and an anonymous transaction reference) with Reddit to measure and improve our ads. We do not send your name, email, recordings, writing, scores or other practice content. No Reddit advertising script is loaded by this feature. We use a 28-day click window for Reddit purchase measurement. Your choice expires after 90 days. Choosing No thanks does not affect access to practice. Browser Do Not Track and Global Privacy Control signals disable this optional sharing.

Use the Reddit ad measurement controls on this page to change your choice. When signed in, it is also saved to your account. Withdrawal stops future sharing after it reaches our server; it does not undo events already sent. Reddit handles received data under its Privacy Policy. Contact us to request deletion of previously shared data.

What other people can see

• Leaderboard: if you appear on it, your display name and XP are visible to other signed-in users. Your recordings, transcripts, scores and email address are never shown.
• Teachers: if you choose to connect your account to a teacher using their code, that teacher can see the practice work covered by your sharing choice. Sharing is optional. You can remove a teacher in Settings → Teacher to revoke access, and report inappropriate feedback from the teacher note in the iPhone app.

We do not sell your personal information, and we do not disclose it to anyone else except the providers listed above, or where the law requires it.

Where your data is processed

We are based in Canada. Your data is stored with our cloud hosting provider and processed by the providers above, some of which operate in the United States and elsewhere. This means your personal data may be processed outside your province or country and may be accessible to courts and authorities there under local law. Where we transfer data out of the UK or EEA, we rely on the standard contractual clauses our providers offer.

Why we are allowed to use your data

If the UK or EU GDPR applies to you, our legal bases are:

• Performing our contract with you, for everything needed to run your account and score your practice: sign-in, recordings, transcripts, scores, credits and subscriptions.
• Our legitimate interests, for product analytics, security and abuse prevention, and for emailing our own users about the Service. You can object to these at any time.
• Your consent, for push notifications and any optional marketing. You can withdraw it at any time.
• Legal obligation, for tax and accounting records tied to payments.

Automated scoring

Your practice answers are scored automatically by AI models without a human reviewing each one. These scores are practice estimates only. They are not official CELPIP results, they are not shared with Paragon Testing Enterprises or any immigration authority, and they have no bearing on your legal rights or on any real test outcome. If you think a score is wrong, contact us and a person will look at it.

Children’s Privacy

CELPIP Practice is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it.

Data Security

We use industry-standard encryption (HTTPS/TLS) for all data in transit and encrypt data at rest with our cloud provider. Authentication tokens are stored securely on your device. While no system is 100% secure, we take reasonable measures to protect your information.

Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you through the app or by updating the date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

Contact Us

Questions about this policy or your data? Reach us at hello@practicecelpip.ca.