Levoop is a website for practising English for Cambridge exams. It is run by Carlos de Gea Molina (1 Aderrig Gardens, Lucan, Dublin, Ireland), who is responsible for your data (the "data controller"). You can contact us at hello@levoop.com. We collect as little data as possible. This page explains what we save, why, and what you can do about it.
Using Levoop without an account
You can practise without an account. Your progress (for example, which exercise you are on, your mistake bank, your writing drafts, your Daily challenge results, a history of the activities you finish – what you did, when and your score – and the days you open Levoop, used for your progress stats and your streak) is saved only in your browser, on your device, using its local storage. It is not sent to us. You can delete it at any time by clearing your browser's website data.
If you create an account
To log in, you give us your email address and we send you a one-time code. When you are logged in, we save in your account:
- your email address and the dates you created your account and last logged in;
- your practice data: your progress in the exercises, your mistake bank, the texts you write in the Writing section and any AI feedback you receive;
- a history of the activities you finish (what you did, when and your score) and of the days you open Levoop, which we use to show your progress, your streak and how you are improving on your account page;
- how many AI feedbacks you have used, so that we can apply the limit;
- if you use or share an invite link: your personal invite code, and who invited whom. So that the same person can't be invited twice, we keep a one-way code of the invited person's email address (as below), also after the account is deleted.
To stop the free AI feedbacks from being claimed more than once with the same email address, each time you use a free AI feedback we keep a one-way code of your email address (a SHA-256 hash, which cannot be turned back into the address) for one year, even if you delete your account. We do not use it for anything else. Free AI feedback is not available for temporary email addresses.
We use this data only to let you log in, to keep your progress in sync across your devices and to show you your own progress stats. We do not sell it, we do not use it for advertising and we do not share it with anyone except the service providers below and, if you join a class, your teacher (see “Classes” below). The legal basis is the performance of the service you ask for when you create an account.
Games in class
In Don’t say it!, the person describing can see the cards on their phone by scanning a QR code on the classroom screen, with no account. The phone and the screen are connected through our database provider (Supabase) only while the game is on: the cards, the time and the points are passed on and not stored, and no personal data is collected. The cards are encrypted with a key that only that turn’s QR code carries.
In Letter Rush, the names you write for teams or students, and their scores, are kept only in your browser, so you don’t lose them if the page reloads. They are never sent to Levoop or anywhere else. If you are logged in, your game settings and the categories you add are kept in your account, like the rest of your practice.
Classes (teachers and their students)
A teacher with a Levoop account can create a class and give its code to students. If you join a class, the teacher of that class can see: the name you write when you join, the date you joined, the history of the activities you finish (what you did, when and your score) and the days you practise. From that practice, the page also shows your teacher an estimate of your Cambridge English Scale score (“Would you pass today?”), worked out the same way as the one you see; your goal, your exam date and your own guesses for Writing or Speaking are not shared. Your teacher cannot see your email address or your mistake bank, does not see your answers one by one unless you agree (see below), and only sees the Writing texts you choose to send them (see “Writing and Speaking marked by your teacher” below). You see this before you join, and you can leave the class at any time on the My account page; your teacher then stops seeing your data. The teacher can also remove you from the class. The legal basis is your consent, which you can withdraw at any time by leaving the class.
Writing and Speaking marked by your teacher
Answers you get wrong (only if you agree). When you join a class, or later on the My class page, you can tick “Let my teacher see the answers I get wrong”. It is off unless you tick it. If you do, the teacher of that class can also see, for the Reading, Use of English and Listening exercises you finish, which questions you got wrong and the answer you gave, so they can go over them in class (also together with the rest of the class, without showing whose answers they were in the “most missed questions” list). To make this possible, your activity history keeps the number of each question you got wrong and your answer. You can untick it at any time on the My class page, and from then on your teacher only sees your scores again. The legal basis is your consent.
Messages from your teacher. The teacher of a class can write short messages to the whole class or to one student. We save the message, the class, who it is for and the date, and when you last opened your messages. You read them on the My class page; you cannot reply on Levoop. The teacher can delete their messages; they are deleted when the class or the teacher’s account is deleted, and you stop seeing them if you leave the class. Teachers must not use messages to ask students for personal data.
If you are in a class, you can send your teacher a text you wrote in a Writing task on Levoop. We then save that text with the task, the class and the date, and your teacher can read it. Your teacher can give that text, or a piece of Writing or a Speaking test done in class, a mark from 0 to 5 for each Cambridge criterion and a comment of up to 300 characters. We save those marks, the comment, the date and the name of the class. You see them on the My Writing & Speaking page, and they count in your “Would you pass today?” estimate; your teacher also sees them in the class and in the estimate shown to them. They stay in your account if you leave the class, so you keep your record, but the teacher stops seeing them. You can delete any of them at any time on that page, and they are deleted when you delete your account. Your teacher can change or delete the marks they gave. The legal basis is your consent (for the texts you send) and the performance of the service you ask for (for keeping your record).
If you create a class, we save its name, its code, its exam level, the date and the fact that you are its teacher, the homework you set (the practice page or one exercise of it, the due date and your note) and the messages you write to your students. Your students see that homework. Whether a student has done it is worked out from the same activity history described above; nothing else is saved about them. You can also download your class table as a file (CSV): it is made in your browser and is not sent to us, and you are responsible for keeping it safe. When you delete a class or your account, the class is deleted; the students keep their accounts and progress. Teachers and schools that use classes must use their students’ data only to follow their progress, and must have the permission they need to do so, in particular from the parents or guardians of students under the age of digital consent.
Invitations by email. Besides giving the class code, a teacher can write their students’ email addresses so that Levoop emails each of them an invitation with the class’s name, link and code (and the teacher’s name, if they write it). We send it through Resend and keep the address, the class, the date and how many times it was sent, for 90 days, only to send the invitation, to show the teacher whether that person has joined the class and to limit how often the same address is invited (at most 3 times per class, once a day). The teacher cannot add their own text. Every invitation has a link to stop all class invitations to that address: we then delete its invitations and keep only a fingerprint (hash) of the address, not the address itself, so that no teacher can invite it again. Teachers must only use the addresses of their own students, with the permission they need (from the parents or guardians of students under 14). The legal basis is the legitimate interest of the teacher and the student in joining the class easily.
If you have a class with at least one student, we email you a short summary every Monday: how many of your students practised that week, who did not, how the homework is going and the parts the class finds hardest. It uses only what you already see on My classes, and we send it with Resend (see Service providers). Every email has a link to stop them, and you can also turn them off or back on in My classes. The legal basis is our legitimate interest in helping you follow your class; you can object at any time with that link.
“Would you pass today?” and your official score
The estimate of your Cambridge English Scale score is worked out on your device from your practice. Your goal, your own guess for Writing or Speaking (if you give one) and a weekly copy of the estimate are kept with the rest of your progress, so they follow you to your other devices if you have an account. The picture you can share has no name or personal details.
After your exam, you can choose to send us your official score. We keep it with your account, the exam, its date and the estimate we showed you the week before, only to check and improve the estimate. Nobody else sees it, and only totals without names are used in our reports. The legal basis is your consent: you can ask us to delete it at any time, and it is deleted with your account.
Sending your official score and making the picture to share are only for students aged 16 or over. We ask once and keep your answer with your progress; if you say you are under 16, both stay switched off.
Children
If you are under the age of digital consent in your country (for example 16 in Ireland and 14 in Spain), you need the permission of a parent or guardian to create a Levoop account. You can use Levoop without an account.
If you use AI feedback on your Speaking
This is optional: it only works when you are logged in and have agreed to it first. When you record an answer, the recording is sent to Google Cloud Speech-to-Text, which turns it into text and tells us how clearly each word was recognised. The recording is not stored: we don't keep it, and Google only processes it to turn it into text (we have not turned on Google's option to keep recordings to improve its services). The text of your answers is then sent to Anthropic, which writes your report. In Parts 3 and 4, an AI partner talks with you: the text of what you said is sent to Anthropic, which writes the partner's reply, and the reply is sent to Google Cloud Text-to-Speech to turn it into a voice. Google only receives the partner's words, nothing about you. We save the text of your answers, the partner's replies and your report in your account, visible only to you, until you delete them on the My Speaking reports page or delete your account. If you are under 16, you need permission from a parent or guardian. The legal basis is your consent, which you can withdraw at any time.
If you buy Levoop Pro or a pack
Payments are handled by Paddle (Paddle.com Market Ltd), our merchant of record: Paddle takes your payment details, charges you, sends you the receipt and handles refunds. We never see or store your card details. Paddle tells us what we need to give you what you bought: your Levoop account, the plan or pack, the status and dates of your subscription, the payment's reference and amount, and refunds. The legal basis is the performance of the contract, and we keep payment records as long as tax and accounting law requires.
If you buy Levoop Pro or a pack with a partner's discount code (for example a code shared by a teacher or a school we work with), we also record that you came through that partner and the amounts of your payments during your first 12 months, so we can pay them their commission. The partner only receives totals (how many subscriptions and how much commission), never your name, your email address or your practice. The legal basis is our legitimate interest in paying our partners correctly.
If you join the waitlist
If you join the waitlist for paid plans on the Plans page, we save your email address, the option you chose and the date. We use them only to email you when paid plans are available (with a launch discount). The legal basis is your consent: you can ask us to remove you from the list at any time by writing to us. We delete the list once we have told you about the launch, or after 12 months at the latest.
If you send us feedback
If you use the Feedback button, we save your message, the page you were on, the date and – only if you give it – your email address, so that we can reply. If you are logged in, the message is linked to your account. We also receive a copy of it by email, so that we can read it quickly. We use it only to improve Levoop and to answer you, and we delete it when it is no longer needed, and after 24 months at the latest. The legal basis is our legitimate interest in improving the website (and your consent for the email address you choose to give us).
News and offers by email
When you create an account, you can choose to receive news and offers from Levoop by email (for example, new exercises or special offers). This is optional: we only send them if you tick the box, and we save the date and the text you agreed to. The legal basis is your consent. You can change your mind at any time on the My account page or by writing to us, and every email includes a link to unsubscribe with one click.
Service providers
- Supabase stores accounts and practice data on servers in the European Union (Ireland).
- Anthropic (the company behind Claude) writes the AI feedback on your Writing and Speaking, and the replies of the AI partner in Speaking Parts 3 and 4, only when you ask for it. We send it the task and your text (for Speaking, the text of your recorded answers) – not your name or email address. Anthropic is based in the United States and does not use this data to train its models.
- Google Cloud (Speech-to-Text and Text-to-Speech) turns your Speaking recordings into text, and gives the AI partner in Parts 3 and 4 its voice, only when you use AI feedback on your Speaking. It receives the recording and the partner's words, not your name or email address, and may process them outside the European Union.
- Paddle (Paddle.com Market Ltd, United Kingdom) sells our paid extras as merchant of record and processes the payments (see “If you buy Levoop Pro or a pack”).
- Resend sends the login emails, the Monday summary for teachers, the news emails (if you agreed to them), and the copies of feedback messages to us, from servers in the European Union (Ireland). It receives only your email address and the email we send you, or the feedback message.
- Vercel hosts the website. Like any web server, it processes technical data such as your IP address to deliver the pages. We also use Vercel Web Analytics to count visits. It does not use cookies and does not identify you: it only records anonymous information such as the page visited, the country and the type of device.
When a provider handles data outside the European Economic Area (Anthropic and Vercel in the United States, Google Cloud wherever it processes it), the transfer is protected by the safeguards the GDPR requires: the European Commission's standard contractual clauses in their data processing terms, or the EU–US Data Privacy Framework for companies certified under it. Each provider only uses the data to give us its service.
Cookies
Levoop does not use advertising or tracking cookies. When you log in, your login session is kept in your browser's local storage so that you stay logged in.
How long we keep your data
We keep your account data until you delete your account. When you delete it, your email address and all your practice data are deleted permanently.
Your rights
You can delete your account and all its data yourself at any time on the My account page. Under data protection law (GDPR) you also have the right to see your data, get a copy of it, correct it, and object to or restrict how we use it. To do this, or if you have any question about your data, write to us at hello@levoop.com. You can also complain to the Data Protection Commission in Ireland (www.dataprotection.ie) or to the data protection authority in the country where you live.