Privacy Policy

Gapir is an AI-powered practice platform for the Multilevel English Speaking exam, operated as an individual service based in Uzbekistan. If you have questions about this policy, contact us at toshpolatovshohjahon2501@gmail.com.

When you create an account we collect:

• Your name and Telegram account details (Telegram ID and username) when you sign in with Telegram, or the username you set
• Your profile photo, if available from your Telegram account
• Your chosen target CEFR band and UI language preference

When you use the platform we collect:

• Voice recordings you submit during practice sessions
• Exam scores, CEFR bands, and AI-generated feedback for each attempt
• Coin balance and payment transaction records
• Session and authentication tokens stored as secure HTTP-only cookies

• To authenticate you and maintain your session
• To transcribe and grade your speaking recordings using AI services
• To display your progress, scores, and leaderboard position
• To process coin purchases and subscription payments
• To send transactional emails (email verification, password reset)

We do not use your data for advertising or sell it to third parties.

We share data with the following services to operate the platform:

• Telegram— handles sign-in (Login Widget / bot). Subject to Telegram's privacy policy.
• AI transcription & grading providers — your voice recordings are sent to one or more AI APIs (such as Deepgram and Gemini) solely to produce your score and feedback. Recordings are not retained by these providers beyond the duration of processing.
• Payme, Click, Uzum — payment processors for coin purchases. We share only the transaction amount; your card details go directly to the processor and are never stored by Gapir.

Your account data is retained for as long as your account is active. Voice recordings are stored to display your past attempt history; you can delete individual attempts from your results page. If you delete your account, all personal data is permanently removed within 30 days.

You can at any time:

• Update your name, email, and profile photo in Settings
• Delete individual practice attempts from the Results page
• Delete your entire account from Settings → Danger Zone
• Request a copy of your data by emailing us

Passwords are hashed and never stored in plain text. Sessions use secure, HTTP-only cookies with a 30-day expiry. All traffic is encrypted over HTTPS. We limit data access to what is necessary for each operation.

Gapir is not directed at children under 13. We do not knowingly collect data from anyone under that age. If you believe a child has created an account, contact us and we will delete it promptly.

If we make material changes, we will update the date at the top of this page and, where appropriate, notify you by email. Continued use of Gapir after changes take effect constitutes acceptance.