Privacy Policy

Account information. Your email address, a password (stored by our authentication provider in hashed form) or, if you sign in with Google, your Google account’s name, email address and profile picture. Your display name and, if you upload one, a profile photo.

Learning profile. Answers you give during onboarding and in Settings: English level, learning goals, skills and methods you want to focus on, how many days and minutes you plan to practise, the language you want for translations and explanations, your teaching preferences (for example hints first or direct corrections), and your chosen personality.

What you create while practising. Messages you type in Elco Chat; transcripts of what you say in Elco Call; Elco’s replies; reviews, drills and their attempts; answers to activities and the placement check; vocabulary you save; journal entries and check-ins; and scenario details you choose to add (such as a job title or a company name).

Learning memory. Practice targets you choose and language patterns Elco noticed in more than one session. You can see, dismiss, switch off or clear these in Settings.

Usage and technical information. Records of learning actions (for example “roleplay completed” or “audio replayed”) without the content of your messages; records of each AI request (feature used, model, token counts, response time, success or error) used for limits, cost and reliability; and standard server logs kept by our hosting providers. Logs we write contain identifiers and timings, not your messages or audio.

Optional IELSco connection. If you connect your IELSco account, we store the link and, if you choose, import goals from IELSco or share a short progress estimate back to IELSco. You can unlink at any time.

Elco Call and listening missions use your microphone only after you allow it in your browser and only while the microphone button is active (it turns red while recording). Recording stops when you send the turn, leave the call, or switch away from the page.

Each recorded turn is sent to our server and then to our speech-processing provider, OpenAI (OpenAI API), to turn it into text. Elco does not save your recordings: the audio is processed in memory to create the transcript and is then discarded by our server. The transcript is saved as your message in the conversation, the same way as a typed message, and it is used to generate Elco’s reply and, when you finish a session, your review.

In a live Elco Call, your browser streams your microphone audio directly to OpenAI for the duration of the call, and Elco’s spoken replies stream back the same way. Elco’s server sets up the call and receives only the text transcript of what you and Elco said, which is saved like the transcript of any call. Elco does not record or store the call audio.

Elco’s spoken replies are created from the reply text by OpenAI’s text-to-speech service. Our server keeps generated reply audio briefly in temporary memory so you can replay it without generating it again; it is not saved in our database. If that service is unavailable, your browser’s built-in voice may read the reply instead; depending on your browser and device, that voice may be provided by your browser’s vendor.

We do not use voice recordings to identify you, and Elco does not assess or store your pronunciation.

• To provide Elco: your account, conversations, voice practice, reviews, drills, vocabulary and progress.
• To personalise practice: your level, goals, teaching preferences, chosen scenario details and (if switched on) learning memory are added to the instructions Elco’s AI receives.
• To apply daily usage limits and protect the service from abuse.
• To understand how Elco is used and improve it, using action records and AI request records rather than the content of your messages.
• To answer your questions and requests.
• We do not sell your personal information and we do not use it for advertising.

When you use an AI feature, we send the information needed for that request to the OpenAI API: for example your latest message, recent messages from the same conversation, a short learning context (level, goals, recurring patterns), your teaching preferences and the scenario. For vocabulary help we send the selected word and the sentence it appeared in. We do not send your password. Your email address is not part of the AI instructions.

OpenAI processes this content under the OpenAI API terms that apply to our account. Under those terms, content sent through the API is not used to train OpenAI’s models, and OpenAI may keep it for up to 30 days for abuse monitoring (longer only where the law requires it). Transcription requests are not kept for abuse monitoring. We ask OpenAI not to store our requests as saved conversations. See OpenAI’s Services Agreement and how OpenAI handles API data. Please don’t share passwords, payment details or sensitive personal information in your practice.

AI output can be wrong. Feedback, reviews and any scores are practice estimates, not certifications.

We share information only with service providers that help us run Elco, and only for that purpose:

• Supabase: sign-in, database and file storage (including profile photos and sign-up and password emails).
• Railway: hosting for Elco’s application server.
• Vercel: hosting for the Elco website.
• OpenAI: AI responses, speech-to-text, text-to-speech and word explanations (OpenAI API).
• Google: Google Sign-In, if you use it.
• IELSco: only if you connect your IELSco account, as described above.

These providers may store and process data in countries other than your own. We may also disclose information if required by law, to protect the safety of users or the public, or as part of a merger or transfer of the business, in which case this policy continues to apply to your information.

Profile photos are stored in a public storage location so they can be shown in the app; anyone with the exact link could view the image. Photos are limited to image files and a maximum size, and are removed when you remove the photo or delete your account.

Your learning passport is private by default. If you switch community visibility on in Settings, other learners can see your display name, goals, level and interests. You can switch it off at any time.

Elco uses your browser’s local storage to keep you signed in and to remember small preferences (for example whether a panel is open). We do not use advertising or third-party tracking cookies.

We keep your account and learning records while your account exists so your history, progress and vocabulary are available to you. You can delete conversations, vocabulary items and learning memory yourself at any time.

When you delete your account in Settings, we delete your account and the learning records linked to it, and we remove your profile photo. Records of AI requests are kept without the link to your account so we can track costs and reliability. Copies may remain for a limited time in our providers’ backups and logs until they are overwritten according to their schedules.

Data is encrypted in transit (HTTPS). Database access rules let each learner read only their own records, and privileged keys are kept on our servers, not in your browser. No system is completely secure, so we cannot guarantee absolute security; please use a strong, unique password and tell us if you notice anything unusual.

• Access and download: download a copy of your data from Settings.
• Correct: update your profile, goals and preferences in Settings.
• Delete: delete individual items, clear learning memory, or delete your whole account in Settings.
• Control personalisation: switch learning memory off, change teaching preferences, or disconnect IELSco.
• Microphone: you can refuse or withdraw microphone access in your browser and type instead.
• You may have further rights under the law that applies to you, including Indonesia’s Personal Data Protection Law (Law No. 27 of 2022). To make a request, email elco@ielsco.com.

Elco is intended for learners aged 13 and over. If you are under the age of adulthood where you live, please use Elco with the permission of a parent or guardian. If you believe a child has given us information without appropriate permission, contact us and we will delete it.

We will update this page when the way Elco handles information changes, and change the “Last updated” date. For significant changes we will also tell you in Elco.

Questions or requests about privacy: elco@ielsco.com. PT Elco Edukasi Berkah Indonesia.