Privacy policy

We store what’s needed to run your account and your practice history, including the recordings you save so you can replay them from any device. Recordings are private to your account and are never sold, published or used to train AI. To mark your work we send the text of what you said — not your recording, name or email — to an AI service. We only use analytics cookies if you say yes.

NAATI CCL Prep is an independent online practice service for the NAATI Credentialed Community Language (CCL) test. It is not run by or connected to NAATI. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Privacy questions and requests: our contact page.

• Account details: your name, email address and chosen practice language.
• Sign-in: if you use a password, we store only a one-way hash of it. If you sign in with Google, we receive your name, email address and profile photo from Google.
• Technical data: like any website, our server receives your IP address and browser details with each request. We use them to keep the service running and secure (for example, rate limits), not to profile you.

• Stored with your account: each mock test or practice attempt you save — the dialogues used, timings (such as how quickly you started after the chime), how many repeats you used, the transcript of what you said, the AI’s marks and feedback, your notes, saved words and the resulting estimated scores.
• Recordings: when you save an attempt, the audio of your interpretations is uploaded and stored with it, so you can replay it from your history on any device. Only you can access your recordings — they aren’t shared, published or used to train anything. If an upload fails, that recording is kept in your browser instead. Deleting an attempt permanently deletes its recordings; deleting your account deletes all of them.
• Speech-to-text: while you record, your browser’s built-in speech recognition turns what you say into text. In Chrome and Edge, that recognition is done by the browser maker’s speech service (Google or Microsoft), under their privacy terms, and may be processed outside Australia.
• AI marking: to mark your interpretation, we send that text — with the dialogue’s source and model answer, but not your recording, name or email — to Anthropic’s Claude API. Under Anthropic’s commercial terms, API data isn’t used to train its models. We keep the text and the marks with the attempt so you can review them.
• Study tools: your CCL test date (if you add it), bookmarked dialogues, flashcard review schedule and notes you type in the practice Notepad. Notepad notes stay in your browser for that session only and are never uploaded.
• Discussions: comments you post on a dialogue are visible to other signed-in learners, with your first name, last initial and profile photo (if you have one). Likes are counted publicly but not who gave them. Don’t post personal details. You can delete your comments at any time; reports of comments and dialogues go to our team only.
• How AI marking is used: marks are automated estimates to help you study. They don’t decide anything about you beyond what you see in the app, and they aren’t NAATI results.

Payments for packs of AI-marked mock tests are handled by Stripe. Card details are entered on Stripe’s pages and never reach our servers. We keep a Stripe customer reference and a record of each purchase (package, amount and date) and of the AI-marked mock tests you use, so we can show your balance and handle refunds. Stripe’s own privacy policy covers the payment information it holds.

Analytics only load after you choose “Accept” in the cookie banner. You can change your mind any time with “Cookie settings” in the footer — declining removes the analytics cookies. The site works the same either way.

We use these providers to run the service. Some are based overseas, so your information may be stored or processed outside Australia:

Dialogue audio is pre-recorded with Microsoft Azure text-to-speech when we build the content; nothing you say or type is sent to it. We don’t sell personal information, and nothing is loaded from ad networks.

When you delete your account, your account, history and recordings are deleted straight away. Where the law requires us to keep a record of a payment, we keep only what’s required, for as long as it’s required.

Data travels over HTTPS. Passwords and session tokens are stored only as one-way hashes, recordings are only served to the signed-in owner, and the database isn’t reachable from the internet. No system is perfectly secure, but if a data breach is likely to cause you serious harm, we’ll tell you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

Recording needs microphone permission, which your browser asks for the first time you record. The app only listens while a recording or microphone check is in progress, and measures loudness locally to detect when you start speaking. You can revoke access in your browser’s site settings.

NAATI CCL Prep is meant for adults preparing for the CCL test. If you’re under 18, please use it with a parent or guardian’s permission, and they should make any purchase. If you believe a child has given us personal information without that permission, contact us and we’ll delete it.

• You can see and change your name, practice language and password from the Account page.
• You can delete individual attempts and saved words at any time.
• You can delete your account from the Account page. This removes your account, sign-in details, practice history, recordings and any unused AI-marked mock tests.
• You can ask us for a copy of the personal information we hold about you, or to correct it. We’ll respond within 30 days and won’t charge you for it.

If you’re unhappy with how we’ve handled your personal information, contact us first and we’ll try to fix it within 30 days. If you’re still not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

If how the app handles data changes, we’ll update this page and the date at the top, and tell account holders by email about significant changes. Questions can go to the contact page.