Privacy Policy
This Privacy Policy explains what personal information RightBands (“we”) collects, how we use it, and the choices you have. It applies to your use of the RightBands website and app.
1. Information we collect
- Account information — your email address and authentication details when you sign up.
- Practice data — the tests you take, your answers, estimated band scores, and the text of your writing and speaking responses that you submit for feedback.
- Payment information — handled by our payment processor (Stripe). We receive limited billing details (such as plan and status) but do not store your full card number.
- Usage and device data — basic technical information (such as log data) needed to run and secure the Service.
2. How we use your information
We use your information to provide and improve the Service, generate your feedback and progress, manage your subscription and payments, keep your account secure, comply with our legal obligations, and communicate with you about the Service. We rely on your consent and on our legitimate and contractual need to deliver the Service you signed up for.
3. AI processing of your responses
To produce feedback and estimated band scores, the text of your writing and speaking responses is sent to our third-party AI provider (Google, via the Gemini API) for processing. We send only the response text needed to generate the estimate, and we do not use it to train models or for any purpose other than giving you your feedback.
4. Service providers we share data with
- Supabase — authentication and database hosting.
- Stripe — payment processing and subscription management.
- Google (Gemini API) — AI feedback and score estimates.
These providers process data on our behalf under their own terms and safeguards. We do not sell your personal information, and we do not share it with third parties for their own marketing.
5. Data retention
We keep your information for as long as your account is active and for a reasonable period afterward as needed to comply with legal obligations, resolve disputes, and enforce our agreements. You can ask us to delete your account and associated data at any time.
6. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to withdraw consent, and to object to or restrict certain processing. To exercise these rights, contact us at support@rightbands.com. If you are in Canada and are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.
7. Cookies and sessions
We use cookies that are strictly necessary to keep you signed in and to operate the Service securely. We do not use advertising or third-party tracking cookies.
8. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.
9. International transfers
Your information may be processed in countries other than where you live — including the United States — by the service providers listed above. Where required, we rely on appropriate safeguards for those transfers.
10. Changes to this policy
We may update this Policy from time to time and will post the updated version here with a new effective date.
11. Contact
Questions about privacy or your data: support@rightbands.com.