Privacy Policy
JumpInto ("JumpInto", "we", "our", or "us") provides an IELTS practice and shadowing-English learning app for iPhone and iPad. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the JumpInto app or this website, you agree to the practices described below.
1. Information we collect
1.1 Information you provide
- Account data: email address and authentication identifiers when you sign in with Apple or Google.
- Profile data: display name and other content you choose to add to reviews.
- User-generated content: IELTS writing drafts, transcripts of your speaking attempts, reviews of shadow videos, and content reports.
1.2 Information collected automatically
- Progress data: bookmarks, watched positions, completed items, and band scores produced by your practice attempts.
- Diagnostic data: anonymous error logs and performance metrics needed to keep the app reliable.
1.3 Information that stays on your device
- Audio recordings: speech captured for shadowing or speaking practice is processed by Apple's on-device speech recognizer. The audio never leaves your iPhone. Only the recognized text is transmitted to our servers when you submit it for AI feedback.
- Local cache: translations and dictionary lookups are cached on-device to reduce network usage.
2. How we use information
- To deliver the core features of the app: fetching catalog content, syncing progress, and producing IELTS band feedback.
- To compute your examiner-grade band scores, weekly chart, and skill summaries on the Profile tab.
- To protect against abuse, for example by rotation and reuse-detection of refresh tokens to neutralize stolen credentials.
- To moderate user-generated content (reviews and reports) before it is shown publicly.
- To respond to your support requests and improve the product.
3. AI examiner feedback
When you tap Submit for feedback on a writing or speaking task,
JumpInto sends the relevant text (the IELTS prompt plus your
essay or transcribed answer) to a third-party large language
model provider via our Cloudflare Worker. The model returns a
structured band-score rubric which we display in the app and
store as a ScoreEvent on your device. We never send your raw
audio, your name, or any other directly identifying information
to the provider.
4. Information we share
- Service providers: Cloudflare (Workers + D1) for backend hosting, Firebase (Auth + Firestore) for moderated reviews and content reports, OpenAI for AI feedback generation. Each operates under their own privacy and security terms.
- Public reviews: when you submit a review of a shadow video and it is approved by moderation, your display name, star rating, and review text become publicly visible inside the app.
- Legal compliance: when required by law, regulation, legal process, or governmental request.
We do not sell your personal information, and we do not use your practice data for advertising profiling.
5. Data retention
- Account & progress: kept while your account is active. You may request deletion at any time (see Section 7).
- Refresh tokens: rotated on every refresh and capped at 7 days.
- Public reviews: retained until you ask us to remove them or moderation determines they should be removed.
- Diagnostic logs: typically retained for 30 days for debugging and abuse prevention.
6. Security
We use HTTPS for all network traffic, App Transport Security on iOS, refresh-token rotation with reuse detection, and strict server-side schema validation on every endpoint. Sensitive credentials are stored in the iOS Keychain rather than UserDefaults. No system is perfectly secure, so please use a strong password and protect your device.
7. Your rights and choices
- Access: request a copy of the personal data we hold about you.
- Correction: update any inaccurate information.
- Deletion: ask us to delete your account and associated data. Deletion is permanent and cannot be reversed.
- Sign-in revocation: sign out at any time from the Profile tab; doing so leaves your account in an anonymous state but does not delete the underlying account.
- Permissions: Microphone and Speech Recognition can be revoked in iOS Settings → JumpInto. Doing so will disable shadowing and speaking feedback.
To exercise any of these rights, email privacy@jumpinto.app with the address attached to your account.
8. Children
JumpInto is not directed to children under 13 (or the applicable age of digital consent in your region). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.
9. International transfers
JumpInto's backend is hosted on Cloudflare's global edge network, with the primary database in the Asia-Pacific region. By using the app you consent to the transfer of your information to countries that may have different data-protection laws than your jurisdiction.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be announced in-app or via the email associated with your account. The "Last updated" date at the top of this page reflects the most recent revision.
11. Contact
Questions or requests about this Privacy Policy: privacy@jumpinto.app.