Last updated 6 October 2026
Privacy Policy
This policy explains what Allace collects, why we collect it, and the choices you have. It is written for a product that stores exam attempts, scores and account details.
What we collect
Account data (name, email, password hash, locale, optional profile details), exam activity (attempts, answers, timings, results, bookmarks, study plans), technical data (session identifiers, IP address, device/browser metadata needed to keep tests secure), and messages you send via the contact form.
How we use it
To provide and score mock tests, to keep timers server-authoritative, to personalise practice and study plans, to secure accounts, to communicate with you, and to improve the product. We do not sell personal data.
Sharing
We share data with processors who host the application, send email, and store files (for example audio for listening tests), only as needed to run Allace. We may disclose information if required by law.
Retention
We keep account and attempt history while your account is active so you can see score progression. You may request deletion of your account and associated personal data, subject to legal retention requirements.
Your rights
Depending on where you live you may have rights to access, correct, export or delete your data, and to object to certain processing. Contact us using the details on the Contact page.
Security
Passwords are hashed. Sessions are protected against CSRF. File uploads are validated. Correct answers are never sent to the browser during an open attempt. No method of transmission is perfectly secure; we work to reduce risk.