Privacy Policy

TopPTE ("the Platform") is operated by PIXETORY, a sole proprietorship registered in Ontario, Canada. PIXETORY is responsible for personal information under its control.

We respect your privacy. This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you access or use TopPTE, as well as the choices and rights available to you.

To exercise any of the rights described in this Policy, or to ask a question or make a complaint about our privacy practices, contact us at:

contact@toppte.com

Depending on how you use the Platform, we may collect the following categories of information.

2.1 Account Information

When you create an account, we may collect:

• your email address;
• authentication credentials and related account-authentication information;
• account creation time, login status and related account information.

Account authentication is provided through Supabase Auth. Your password is not stored in plain text in the Platform's database.

2.2 Practice and Learning Data

When you use our practice features, we may collect and store:

• written responses;
• answers to multiple-choice, fill-in-the-blank and other question types;
• speaking responses and associated recordings;
• AI-generated scores and feedback;
• practice counts, completion status and practice history;
• favourites, flags, colour labels and word-list items;
• mock-test results and learning-progress data;
• other records associated with your use of learning features.

We use this information to provide core features such as practice, scoring, history and progress tracking.

2.3 Speaking Recordings and Voice Data

When you use speaking practice or AI speaking-scoring features, the Platform may record and store audio that you intentionally submit.

These recordings may be used to:

• convert speech to text;
• analyse pronunciation and fluency;
• generate AI scores and feedback;
• allow you to play back your own practice recordings;
• troubleshoot technical issues relating to speech processing or scoring.

Unless we clearly tell you otherwise and obtain any consent required by applicable law, we do not use your speaking recordings for advertising profiles or identity-recognition purposes unrelated to the TopPTE service.

2.4 Payment and Membership Information

When you purchase Premium membership, we may retain transaction-related information such as:

• order amount;
• purchase date and time;
• membership plan and duration;
• transaction status;
• order or transaction identifiers provided by the payment provider.

Payments are processed by our third-party payment provider, Stripe.

Full card numbers, card security codes and other complete payment credentials are processed directly by Stripe. The Platform does not store your full payment card details.

2.5 Device, Log and Access Information

When you access or use the Platform, we may automatically collect limited technical information such as:

• browser type;
• device type;
• operating system;
• IP address or related network information;
• login and access times;
• page-access information;
• error logs and basic diagnostic information.

We primarily use this information to protect accounts and the Platform, identify suspicious activity, troubleshoot technical issues and improve service reliability.

We collect and use personal information only to the extent reasonably necessary to operate and provide TopPTE.

We may use your information to:

• create, authenticate and manage your account;
• display questions and save your responses;
• maintain your practice history, favourites, word lists and learning progress;
• process speaking recordings and written responses;
• generate AI scores, feedback and related learning analysis;
• provide and manage Premium membership benefits;
• process orders, payments, refunds and related customer support;
• maintain Platform security and detect unauthorized access, automated scraping, malicious attacks or other misuse;
• diagnose errors, resolve technical problems and improve service reliability;
• respond to enquiries, privacy requests or customer-support requests that you submit;
• send account, service or important Platform communications where any consent required by applicable law has been obtained;
• comply with applicable legal obligations.

We do not sell or rent your personal information.

If we wish to use your personal information for a new purpose that is materially different from the purposes for which it was originally collected, we will explain the new purpose and obtain additional consent where required by applicable law.

We use certain third-party technology providers to operate TopPTE. These providers may process personal information only to the extent necessary to provide the relevant services.

Our main providers currently include:

Supabase

We use Supabase for certain:

• account-authentication services;
• database storage;
• practice-history and progress storage;
• speaking-recording and file storage;
• backend infrastructure services.

Microsoft Azure

We may use Microsoft Azure AI, speech-recognition and related cloud services to process certain practice data for functions such as:

• speech transcription;
• pronunciation and fluency analysis;
• AI speaking scoring;
• AI writing scoring and feedback generation.

When you use these features, the relevant written response, recording or other information necessary for scoring may be transmitted to Microsoft Azure for processing.

Stripe

We use Stripe to process membership payments and related transactions.

Stripe processes payment information, including card or other payment credentials, in accordance with its own terms and privacy practices.

Other Necessary Disclosures

We may also disclose personal information where reasonably necessary:

• to comply with applicable law, a court order or a lawful request from a government authority;
• to investigate fraud, security incidents, unlawful conduct or serious violations of Platform rules;
• to protect the legal rights, safety or property of TopPTE, our users or others;
• in connection with a business reorganization, sale or transfer of assets, where permitted by applicable law.

We do not authorize third-party service providers to use personal information obtained through TopPTE for their own independent advertising purposes unless you separately provide consent.

TopPTE relies on cloud-service providers to store and process information.

Depending on the data-centre locations and infrastructure used by Supabase, Microsoft Azure, Stripe or other service providers, your personal information may be stored or processed inside or outside Canada.

When personal information is processed in another country or jurisdiction, it may be subject to the laws of that jurisdiction and may, where legally permitted, be accessible to courts, law-enforcement agencies or national-security authorities in that jurisdiction.

We take reasonable steps, appropriate to the nature of the information involved, to require service providers to maintain safeguards consistent with applicable privacy requirements.

We use reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, use, disclosure, modification or loss.

These safeguards may include:

• account-authentication controls;
• Supabase Row Level Security (RLS) policies to restrict access to user data;
• separation of private practice records, recordings and progress data between users;
• encrypted transmission using HTTPS and similar technologies;
• restrictions on administrative and system access;
• processing sensitive payment information through a specialized payment provider rather than storing full card details ourselves.

Under normal operation, other TopPTE users cannot view your private practice responses, recordings or learning progress.

However, no internet-based service can guarantee absolute security, and we cannot guarantee that the risk of unauthorized access, cyberattacks or other security incidents can be completely eliminated.

If the Platform provides comments, discussion areas or other public interaction features, information you choose to post there may be visible to other users.

Please do not post information in public areas that you do not want others to see, including:

• government identification numbers;
• passport numbers;
• payment-card or financial-account details;
• home addresses;
• passwords;
• immigration application numbers;
• medical information;
• other sensitive personal information.

You should consider the privacy implications before posting information publicly.

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Policy, provide the service, resolve disputes, maintain security or comply with applicable legal obligations.

Different categories of information may be retained for different periods.

For example, while your account remains active, we will generally retain practice records and learning data associated with your account so that we can provide history and progress-tracking features.

When information is no longer reasonably required for a business or legal purpose, we may delete, anonymize or otherwise securely dispose of it as appropriate.

If you request deletion of your account, we will process the deletion of personal information associated with that account. However, certain information may be retained for a reasonable period where necessary, including:

• information that must be retained for legal or regulatory purposes;
• payment, refund, tax or financial records;
• information reasonably necessary for fraud prevention, security or dispute resolution;
• aggregated or anonymized information that can no longer reasonably be linked to you;
• information temporarily retained in secure backups as part of normal backup cycles.

The Platform may use necessary cookies, browser local storage or similar technologies to:

• keep you signed in;
• perform authentication and security functions;
• remember your language selection;
• remember certain interface preferences or filter settings;
• support the normal operation of core Platform features.

TopPTE currently does not use these necessary technologies for cross-site or cross-platform advertising tracking.

If we introduce analytics, marketing or other non-essential cookies in the future, we will provide appropriate information and choices where required by applicable law.

You may be able to delete or restrict cookies through your browser settings. However, disabling necessary cookies or local storage may cause some Platform features to stop working properly.

Subject to applicable law, you may contact us to:

• ask whether we hold personal information about you;
• request access to personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request an export of certain information associated with your account;
• request deletion of your account and associated personal information;
• ask questions or make a complaint about our privacy practices;
• withdraw consent where withdrawal is permitted by law.

You may also be able to manage certain information directly through the Platform, including:

• viewing your practice history;
• managing word-list items and favourites;
• deleting comments or public content you have posted, where that functionality is available.

To submit a privacy request, contact:

contact@toppte.com

To protect your account and personal information, we may need to verify your identity before processing an access, export or deletion request.

We will respond to privacy requests within a reasonable period and in accordance with applicable law.

TopPTE is primarily intended for users preparing for PTE Core and similar language examinations and is not specifically designed or directed toward children.

If you are under 13 years of age, please do not independently create an account or provide personal information through the Platform unless a parent or legal guardian has provided any consent required under applicable law.

For young people who are capable of providing meaningful consent themselves, we encourage them to read this Policy carefully and discuss their use of personal-information features with a parent or guardian where appropriate.

If you are a parent or guardian and believe that a child has provided personal information to TopPTE without appropriate consent, please contact us at contact@toppte.com. We will review the circumstances and, where appropriate, take steps to delete the information or otherwise address the issue.

We may update this Privacy Policy from time to time to reflect changes to Platform features, technology providers, legal requirements or our privacy practices.

The updated version will be posted on this page together with a revised "Last updated" date.

If a change materially affects how we collect, use or disclose personal information, we will provide additional notice where appropriate, such as through an in-app notice, email or another reasonable method.

If a change introduces a significant new purpose for processing personal information and applicable law requires new consent, we will obtain the required consent before carrying out that processing.

If you:

• have questions about this Privacy Policy;
• wish to access, correct, export or delete your personal information;
• wish to delete your account;
• have a question or complaint about how we handle personal information;

please contact us at:

contact@toppte.com

We will review privacy-related enquiries and complaints and respond as required by applicable law.