Aprubo · Clear information
Privacy Notice
How Aprubo uses your information when you practise, receive feedback and buy complete Speaking tests.
Effective 30 September 2026 · Aprubo S.L.
Who is responsible
Aprubo is operated by Aprubo S.L., Calle Garganta de los Montes 22, 28045 Madrid, Spain (“Aprubo”, “we”, “us”). We are the controller of the personal information described in this notice.
For any privacy question or request, write to [email protected].
Information we collect
- Email and access information: your email address, the private links we send you, whether you confirmed your email, your email preferences and the exact consent text you accepted, with its date.
- Speaking responses: the audio you record, its transcript, the question it answers, recording length and simple measurements of the recording (such as pauses and speaking rate). If you type an answer instead of recording one, we keep that text.
- Practice history: task results, feedback, overall estimates, which questions you have already seen, and whether a test is finished or paused.
- Purchases: order references, the pack bought, the tasks you have left, and payment and refund status as reported by Paddle. We never receive your card number.
- Support messages: what you send us through the contact form or by email.
- Technical information: time zone, browser language, screen size, whether your device can record audio, the page that sent you to us and campaign tags in the link (for example
utm_source), plus server logs with IP addresses kept by our hosting provider for security and troubleshooting.
Your spoken answer may contain information about you or other people. Avoid names, contact details, financial, health or other sensitive details that the exercise does not need. We do not need identity or immigration documents.
Why we use it and on what legal basis
- To provide the service you asked for (performance of a contract): sending your daily task, transcribing and evaluating your recordings, showing your results, delivering what you bought, avoiding repeated questions and answering support requests.
- To send daily practice emails (consent): only if you ticked the box when signing up. You can stop them at any time from the link in every email.
- To keep the service secure and working (legitimate interest): preventing abuse and fraud, fixing errors and measuring, in aggregate, how the site is used.
- To meet legal obligations: tax, accounting and consumer-law records, and lawful requests from authorities.
Recordings and AI
Your recording is sent to a speech-to-text provider to produce a transcript, and the transcript is sent to an AI language-model provider that scores it against the CELPIP Speaking criteria and writes the feedback. The score is produced automatically; it is a practice estimate with no legal or similarly significant effect on you.
We do not use your recordings or transcripts to train AI models, we do not publish them, and we do not sell them or use your voice in advertising. Our team only listens to a recording when you ask us to review a result or when needed to fix a technical failure.
Transcription errors, background noise and model limitations can affect the result. You can always choose not to submit a response.
Who receives your information
We do not sell personal information. We share it only with the providers that run the service for us, each receiving only what its function needs:
| Function | Provider | Information involved |
|---|---|---|
| Checkout, payment and invoicing | Paddle (Merchant of Record) | Your email, payment details and order records, under Paddle’s own privacy notice |
| Application hosting | Fly.io | Requests to our API and server logs |
| Database | Neon | Your email, practice history, results and purchase records |
| Audio storage, website hosting, bot protection and website analytics | Cloudflare (R2, Pages, Turnstile, Web Analytics) | Recordings, and technical data about your visit |
| Email delivery | Resend | Your email address and the messages we send you |
| Transcription and AI evaluation | Speech-to-text and AI language-model providers | Your recording and its transcript, with the question and scoring criteria |
| Web fonts | Google Fonts | Your IP address, when your browser downloads the fonts |
We may also disclose information when the law requires it or to protect our rights in a dispute.
International transfers
Several of these providers store or process data in the United States. Where information leaves the European Economic Area, we rely on the safeguards the provider offers, such as the European Commission’s Standard Contractual Clauses or certification under the EU–U.S. Data Privacy Framework. You can ask us for more detail at [email protected].
How long we keep it
| Record | How long |
|---|---|
| Recordings, transcripts, results and feedback | While your account exists, so you can listen to and review your practice. Deleted when you ask us to delete your data. |
| Questions you have already seen | While your account exists, so paid tests do not repeat them. |
| Purchase records | As long as tax, accounting and consumer law require. |
| Consent and unsubscribe records | As long as needed to prove your choice and respect it. |
| One-hour sign-in links | Deleted after they expire. |
| Server logs | A short period set by our hosting provider, for security and troubleshooting. |
If you ask us to delete your data, we delete your recordings, transcripts and history. You lose access to your results and we can no longer tell which questions you have already seen. Records we must keep by law, such as purchase records, are kept separately for that purpose only.
Emails, cookies and browser storage
Daily practice emails are sent only if you asked for them, and every one has a one-click unsubscribe link. Purchase confirmations and the sign-in links you request are sent regardless, because they are part of the service.
Aprubo does not use advertising cookies or tracking pixels. Our website analytics (Cloudflare Web Analytics) do not use cookies and only show us aggregated visits. We keep a few items in your browser’s storage so the site works: the key that remembers this device for your Speakings (removed with Forget this device), your recent practice levels on this device, and the reference of a payment in progress. Cloudflare Turnstile and the Paddle checkout may set their own strictly necessary cookies for security and payment.
Treat the links in our emails as private: anyone with a link can open what it points to. If you shared one by mistake, write to us.
Your rights
You can ask us to access, correct or delete your information, to restrict or object to its use, to receive it in a portable format, and to withdraw any consent you gave. Write to [email protected] from the email address you use with Aprubo; we may ask for a simple check to make sure the request is yours, and we will reply within one month.
If you are not satisfied with our answer, you can complain to the Spanish Data Protection Agency (aepd.es) or to the data protection authority where you live.
We protect your information with access controls, private links that are hard to guess, and recordings that can only be reached through links that expire. No online service can promise absolute security; if you think someone accessed your information without permission, tell us right away.
Minimum age and changes
Aprubo is for people aged 16 or over. We do not knowingly collect information from anyone younger; if you believe a child under 16 has given us information, write to us and we will delete it.
If we change this notice in a way that matters, we will update the date at the top and tell you by email when the change affects how we use information you already gave us. A new use that needs your consent will ask for it.