Privacy Policy

This policy explains what Langova does with your personal data. It applies to langovaprep.com and to everything you do while signed in.

Who we are

Langova is established in Malaysia and is the data controller for the personal data described below.

Langova
Kampung Datuk Keramat, 54000 Kuala Lumpur, Malaysia
hello@langovaprep.com

Because we are based in Malaysia, Malaysia’s Personal Data Protection Act 2010 applies to how we handle your data. We also apply the UK and EU GDPR to users in those regions, and where the two differ we follow whichever gives you more protection. Section 2 sets out our legal bases in GDPR terms, and GDPR explains how to exercise each right.

1. What we collect

What you give us

• Account — your name, email address, password (stored only as a bcrypt hash, never in readable form), and your timezone.
• If you sign in with Google — your name, email address and profile picture, from Google. We never receive your Google password.
• Your work — exam answers, essays, recordings of spoken answers, and files you upload for an assignment.
• Profile — for teachers, a bio, specialisations, languages and availability, which are shown publicly on your teacher page.

What we generate

• Your scores, band estimates, per-question reviews and action plans.
• Your booking, attendance and payment history.
• Notifications sent to you.

What we do not collect

We do not run advertising trackers, analytics pixels, or third-party scripts that profile you. There is no Google Analytics, no Meta pixel, and nothing that follows you to other sites. See the Cookie Policy.

2. Why we use it, and on what legal basis

Under the PDPA we process your data with your consent, given when you create an account and accept these policies, and because it is necessary to perform the contract between us. In GDPR terms:

We do not sell your personal data, and we do not share it with anyone for their own marketing.

3. Who we share it with

Only the providers that make the product work. Each processes data on our instructions under a contract, and only for the purpose listed:

Automated grading, specifically

Your essays and spoken answers are sent to an automated grading model to be scored. They are sent without your name or email address — the grader receives the work, not the person. Grading is automated, but a band estimate has no legal or similarly significant effect on you: it is practice feedback, not an official result, and it decides nothing about your access to the service. You can ask a human to review any score by emailing us.

Your teacher

A teacher you book with can see your name, the work you submit to them, your attendance and your exam reports for the exam you are preparing for. They cannot see your payment details or what you paid.

4. International transfers

Our providers operate outside Malaysia, including in the United States, the European Union and Singapore. Where data leaves the UK or EEA, transfers rely on Standard Contractual Clauses or an equivalent approved safeguard. Where personal data is transferred out of Malaysia, we do so only to providers contractually bound to protect it to a standard consistent with the PDPA.

5. How long we keep it

• Account data — while your account exists, then deleted within 30 days of closure.
• Exam attempts and reports — while your account exists, so you can track progress over time.
• Unused pay-as-you-go credits — 30 days from purchase.
• Payment and invoice records — up to 7 years, because tax law requires it. These survive account deletion.
• Session recordings — where a class is recorded, for as long as the class remains available to its students.

6. Security

Traffic is encrypted in transit. Passwords are hashed with bcrypt and are not recoverable, by us or anyone else. Uploaded files — assignments, teacher contracts — live in private storage and are reachable only through short-lived signed links, with permission re-checked on every single download. No system is perfectly secure, but we do not take shortcuts with credentials or access control.

7. Your rights

You can ask us to:

• Give you a copy of your data
• Correct anything wrong
• Delete your account and its data
• Stop or limit a particular use
• Send your data to another provider
• Object to processing based on legitimate interests

Email hello@langovaprep.com and we will respond within 30 days, free of charge. You can switch off notification email yourself in your settings at any time. See GDPR for how each right works in practice and how to complain to a regulator.

8. Children

Langova is for adults. Our Terms of Service require account holders to be 18 or over, and we do not knowingly collect personal data from anyone under 18.

If we learn that we hold data about someone under 18, we delete it and close the account. If you believe a child has given us their data, contact us at hello@langovaprep.com and we will act promptly.

9. Changes

If we change this policy in a way that materially affects you, we will email account holders before it takes effect. The date at the top always reflects the current version.

10. Contact

Privacy questions, or to exercise any right above: hello@langovaprep.com.

Langova
Kampung Datuk Keramat, 54000 Kuala Lumpur, Malaysia