1. Scope & General Principle
1.1 This Policy applies to all pages and tools on wamiko.com and its subdomains ("the Site") — including without limitation the IELTS dictation trainer (dictation.wamiko.com), the IELTS mock-examination environment (mock.wamiko.com), the seasonal speaking question bank (speaking.wamiko.com), and the IELTS AI assistant (ai.wamiko.com) — and forms part of the Terms of Use. Capitalized terms have the meanings given there.
1.2 The Site is the personal, not-for-profit study tool of an individual. It is kept with a general intent to limit unnecessary collection and retention of data: no advertising, no cross-site behavioral tracking, no marketing profiling, and no sale of personal data. Processing is limited to what is reasonably necessary to provide, secure, and maintain the Site.
2. Data We Process
2.1 Account data. Your e-mail address, a salted cryptographic hash of your password (plaintext passwords are never stored), account role and status, and records of your acceptance of the legal documents (versions and timestamps).
2.2 Quota meter and usage records. The Credit meter (a record of residual prepaid computing quota, as defined in the Terms), a per-entry ledger (redemptions, consumption, waivers), and per-call AI usage records (feature used, token counts, metered cost, timestamps). These exist so that every meter change can be audited.
2.3 Study records. Data including but not limited to training progress, answers, scores, review flags, annotations and notes, essay drafts, and AI-tutoring conversation content, to the extent you use the corresponding features. Where you use the AI tutor, this also includes a study-memory it maintains for you — a short profile it derives from your conversations and your own study records (for example your stated goals, level, and areas to improve) so it can continue helping you across sessions. Some of these are synced to the server so that your progress follows your Account across devices; some are kept only in your browser (see Section 4).
2.4 Technical logs. Server, access, error, and security logs, which may include, without limitation, IP addresses, request methods and paths, user-agent strings, timestamps, response codes, authentication events, and rate-limit events.
2.5 The Site does not request, and you should not submit, sensitive personal data (including but not limited to government identifiers, financial account numbers, and health data). Payment-card data is never collected by the Site; Credits are added only through redemption codes.
3. Purposes of Processing
Data described above is processed only to: (a) provide the Site's features, including cross-device synchronization of study records; (b) authenticate Accounts and maintain session security; (c) meter and audit Credit consumption; (d) maintain the security and integrity of the Site, including abuse detection, rate limiting, incident response, and enforcement of the Terms; (e) debug and improve the reliability of features; (f) comply with legal obligations and respond to lawful requests; and (g) where you use the AI tutor, personalize its assistance using your own study records across the Site's IELTS tools and the study-memory it maintains for you.
4. Cookies & Local Storage
4.1 The Site uses a session cookie (HttpOnly) and/or an authorization token for login state, and browser local storage for functional preferences and working data — including but not limited to interface settings (contrast, text size, theme), in-progress exam sessions, locally cached study state, and per-question AI-tutoring conversation history.
4.2 No first-party advertising cookies, cross-site tracking technologies, or marketing-profiling mechanisms are knowingly deployed. Clearing your browser storage removes locally kept data; server-synced records remain associated with your Account.
5. AI Processing
5.1 When you use AI-assisted features (writing assessment, answer explanation, tutoring chat), the content reasonably necessary for the feature — your essay or question, any image you attach, relevant study material excerpts, your answers, and recent conversation turns — is transmitted to a third-party large-language-model provider for processing, over encrypted connections and under an API relationship.
5.2 Do not include personal data about yourself or others in content submitted to AI features, and do not upload images that contain such data. AI providers process such content under their own terms and policies; the Owner selects providers on an API basis and does not authorize them to use submitted content for advertising.
5.3 To give help tailored to your situation, the AI tutor may reference (i) your own study records from the Site's IELTS tools that are linked to your Account — for example your practice results and progress — and (ii) the study-memory described in Section 2.3. This is first-party personalization using only your own data within the Site; it is not cross-site behavioral tracking, advertising, or marketing profiling. Only the Account whose session is active is referenced, and the tutor accesses no other user's data. This study-memory is retained and may be deleted as described in Sections 7 and 9.
6. Third-Party Services & International Transfers
6.1 The Site relies on third-party services for purposes including but not limited to hosting, domain registration, DNS, transport security, edge delivery, and AI-model processing. Technical data generated by your access may be transmitted to, cached by, or logged by such providers under their own policies.
6.2 The Site's public-facing infrastructure is located in the United States (California). Because you may access the Site from other jurisdictions, your data may cross borders in transit; routing over the public internet is determined by third-party network operators beyond the Owner's control.
7. Retention
Account, ledger, and study records are retained while your Account exists, because they are the substance of the Site's function (auditable meters and cross-device progress). Technical and security logs are retained for as long as reasonably necessary for the security, evidentiary, and maintenance purposes described above. Records that must be preserved under applicable law (including but not limited to ledger and dispute records) may be kept in isolated storage after Account deletion for the legally required period.
8. Security
Reasonable technical and organizational measures are applied, including salted password hashing (PBKDF2), encrypted transport (HTTPS), token-based session management with expiry, server-side entitlement and rate-limiting controls, and audit logging of administrative actions. No internet service can guarantee absolute security; you are responsible for keeping your credentials confidential.
9. Your Choices & Rights
9.1 You can review your meter, ledger, and AI usage records at any time in the Account interface, and export or review study data through the features provided in each tool.
9.2 You may submit requests regarding access to, correction of, or deletion of your Account data by writing to support@wamiko.com from the registered e-mail address. Such requests are acted upon to the extent, and within the time limits, mandatorily required by applicable law, and only after the Owner is reasonably satisfied of the requester's identity. The Owner may decline requests that are unverifiable, manifestly unfounded, excessive, or inconsistent with retention required by law or with the establishment, exercise, or defense of legal claims. No processing commitment beyond mandatory applicable law is made or implied.
9.3 Rights granted to you by mandatorily applicable law remain unaffected; nothing in this Policy grants rights beyond those.
10. Children
The Site is not directed at children under the age of 13 (or the higher minimum age applicable in your jurisdiction). Minors should use the Site only with the consent and under the supervision of a parent or legal guardian. If you believe a child has provided personal data without such consent, you may notify the address below; verified data will be deleted to the extent required by applicable law.
11. Changes to This Policy
This Policy may be revised from time to time at the Owner's sole discretion. Revised versions become effective upon publication, and an updated version identifier is published with the revised text. Renewed consent may be sought where, and only to the extent that, applicable law mandatorily so requires. Continued use after a revision constitutes acceptance.
12. Contact
All privacy inquiries, requests, and complaints: support@wamiko.com. Write in English, identify yourself sufficiently for verification, and describe your request precisely. Requests are handled as described in Section 9.2; no response time beyond that mandatorily required by applicable law is promised or implied.