Privacy Policy

[Proposed — for review by qualified Uzbek legal counsel] You may provide profile and language preferences, support messages, and learning content you choose to submit (answers, essays, audio and, in Verified Mode, camera images).

We do not ask you to create a separate password-based BandScore account when sign-in is through Telegram.

[Proposed — for review by qualified Uzbek legal counsel] When you sign in with Telegram Login / bot authentication, we process Telegram identifiers and profile fields Telegram supplies for login (such as Telegram user id, username, display name and language where provided), plus session tokens needed to keep you signed in.

Telegram is the authentication provider for that flow. BandScore does not receive your Telegram password.

[Proposed — for review by qualified Uzbek legal counsel] Listening, Reading and other selected answers you submit in practice or mock exams are stored with the attempt so we can score, show results, support disputes and improve the learning experience.

[Proposed — for review by qualified Uzbek legal counsel] Writing Task responses and related feedback requests are stored with your account or attempt so AI or human-supported feedback, progress history and support can be provided.

[Proposed — for review by qualified Uzbek legal counsel] Speaking answer audio uploaded for assessment is stored in private object storage with a configured lifecycle of up to 7 days for the audio object, so transcription and scoring can run.

Signed-in learners may delete an attempt’s recordings early from Speaking history where that control is available; transcripts and feedback may remain.

[Proposed — for review by qualified Uzbek legal counsel] Speech-to-text transcripts and derived practice metrics may be stored with the Speaking attempt or report so you can review feedback after audio expires.

[Proposed — for review by qualified Uzbek legal counsel] Camera access is requested only for flows that need it (notably Verified Mode face check and periodic snapshots). Ordinary Speaking practice does not request the camera.

Verified reference photos and periodic exam snapshots are stored privately with a configured 30-day object-storage lifecycle.

Continuous video recording is not described as a standard product feature in the current Verified Mode controls; periodic snapshots and related integrity events are.

[Proposed — for review by qualified Uzbek legal counsel] We may process technical data needed to operate the service securely: browser and device characteristics relevant to exam checks, IP address and approximate network metadata, cookies or local storage for session continuity, and integrity events (for example fullscreen exit or tab focus changes in Verified Mode).

[Proposed — for review by qualified Uzbek legal counsel] For paid services we process order numbers, amounts, currency, payment status, timestamps and provider transaction references from Payme and/or Uzum when those methods are configured.

In the optional embedded Uzum card flow, BandScore may transiently forward card number, expiry and any one-time code to Uzum; the implemented payment database does not store those card credentials. Provider-hosted checkout keeps card entry on the provider page.

[Proposed — for review by qualified Uzbek legal counsel] A learner may create a seven-day, single-use family invitation. Accepting it lets that parent or guardian view the learner’s study plan, answers, essays, feedback, transcripts, scores, mistakes and any Speaking recordings that have not expired or been deleted, until either person revokes the connection.

Passwords, phone numbers, Telegram identifiers, payment-card data, face images, proctoring snapshots and internal moderation evidence are not shared through the parent portal. A parent may sponsor access for the learner; the parent remains the payer and the learner receives the purchased benefit. Revocation stops future access immediately but does not remove benefits already granted.

[Proposed — for review by qualified Uzbek legal counsel] BandScore may use operational product analytics and error logging needed to understand feature use, reliability and abuse. This page does not invent a third-party analytics vendor name; only providers actually configured in the live environment apply.

No compliance certification (for example ISO or SOC) is claimed on this page unless separately verified in writing.

[Proposed — for review by qualified Uzbek legal counsel] Learning content you submit may be sent to configured AI and speech providers solely to deliver the requested feature (for example Writing feedback, speech-to-text, pronunciation evidence or examiner TTS).

The backend configuration supports OpenAI (text/transcription models when OPENAI_API_KEY is set) and Azure Speech (pronunciation assessment when Azure Speech credentials are set). Anthropic may be configured for additional text processing when its key is set.

Exact model names and which provider handles a given request depend on the live server configuration. We do not invent additional vendor names or certifications here.

[Proposed — for review by qualified Uzbek legal counsel] We process information to authenticate users, deliver practice and mock exams, generate feedback and scores, operate Verified Mode integrity controls, fulfil paid access, provide support, prevent abuse, and meet legal and accounting duties related to payments.

[Proposed — for review by qualified Uzbek legal counsel] Depending on the activity and applicable Uzbekistan law, processing may rely on performance of the Public Offer / service contract, your consent for optional media capture, legitimate interests in security and fraud prevention, and legal obligations for payment and tax records. Counsel must confirm the final legal bases before this section is treated as binding.

[Proposed — for review by qualified Uzbek legal counsel] Account, attempt and payment records are stored in BandScore’s application database and related private object storage used for media.

The repository does not publish a verified public infrastructure-hosting provider name, so this policy does not invent one. AI and speech providers process relevant content in their own environments when a feature calls them.

[Proposed — for review by qualified Uzbek legal counsel] Approximate retention currently reflected in product configuration and UI copy:

Exact legal retention for accounting or disputes must be confirmed by counsel.

[Proposed — for review by qualified Uzbek legal counsel] We share information only with:

We do not sell personal data.

[Proposed — for review by qualified Uzbek legal counsel] AI, speech, Telegram and payment providers may process data outside Uzbekistan. Appropriate transfer wording and safeguards must be confirmed by qualified Uzbek legal counsel; this draft does not invent Standard Contractual Clauses or other transfer mechanisms that have not been verified for this product.

[Proposed — for review by qualified Uzbek legal counsel] We apply access controls, authenticated APIs, private media storage with time-limited object access where configured, and operational logging. No absolute security guarantee is given. No ISO/SOC or similar certification is claimed on this page.

[Proposed — for review by qualified Uzbek legal counsel] Subject to applicable law, you may request access to, correction of, or information about personal data we hold, and may object to certain processing. How rights apply under Uzbekistan law must be confirmed by counsel.

Use Support or the official Telegram bot to submit a request. We may need to verify that the request comes from the account holder.

[Proposed — for review by qualified Uzbek legal counsel] You may request deletion of account-linked personal data through Support or the official Telegram bot.

Some records may need to be retained where required for payments, security, fraud prevention, dispute handling or legal compliance. Counsel should confirm the final deletion timetable and exceptions.

[Proposed — for review by qualified Uzbek legal counsel] Speaking answer audio expires automatically under the configured ~7-day lifecycle. Where the product exposes early deletion for an attempt’s recordings, using that control removes the audio objects while transcripts and feedback may remain.

Verified Mode camera objects follow their configured ~30-day lifecycle unless a support deletion request is completed earlier.

[Proposed — for review by qualified Uzbek legal counsel] BandScore.uz is an IELTS practice service. Minimum age, parental-consent and capacity rules under applicable law must be confirmed by qualified Uzbek legal counsel before this section is treated as final. Until then, guardians should supervise use by minors.

[Proposed — for review by qualified Uzbek legal counsel] We may update this Privacy Policy when the product, providers or legal requirements change. The version and effective-date fields on this page will be revised. Material changes should be reviewed by counsel before production finalisation.

[Proposed — for review by qualified Uzbek legal counsel] Privacy, deletion and media questions:

This entire Privacy Policy is marked for professional legal review and is not final counsel-approved wording.