Privacy Policy
Last updated: August 17, 2026
This Privacy Policy explains what personal information Band9 ("Band9", "we", "us") collects when you use band9.com (the "Service"), how we use it, who we share it with, and the choices and rights you have. It is written in plain language as a good-faith summary of our practices and is not a substitute for legal advice.
Who we are
Band9 is an IELTS Reading preparation service. Band9 does not yet have a registered legal entity; until one is formed, this policy is operated on behalf of Band9 by its founder. You can reach us at cactus.english.canada@gmail.com.
Information we collect
We collect the following categories of information:
- Account information — your email address and password (stored as a salted hash) when you sign up, or your name and email address if you sign up with Google.
- Profile information — display name, target band score, and exam date, if you choose to add them.
- Test activity — your test attempts, answers, scores, and lesson progress, so we can show your history and estimate your band score.
- Billing information— your subscription plan and status. Card and payment details are entered directly into Stripe and never reach Band9's servers.
- Usage data— basic, cookie-free analytics about page views (see "Cookies and analytics" below).
How we use your information
We use your information to:
- create and maintain your account and let you sign in;
- run and bill your subscription;
- save your test attempts and progress and show you your history and band estimates;
- send you transactional emails, such as a welcome email after you subscribe;
- keep the Service secure and working correctly; and
- understand, in aggregate, how the Service is used, so we can improve it.
We do not sell your personal information, and we do not use it for third-party advertising.
Who we share information with
We share limited information with the following service providers ("subprocessors"), each of which processes data only to provide their service to Band9:
| Provider | Purpose | Data shared |
|---|---|---|
| Supabase | Authentication and database hosting | Email, password hash, profile fields, test attempts and answers, lesson progress, subscription status |
| Stripe | Payment processing and subscription billing | Email address and billing/payment details, handled entirely by Stripe. Band9 stores only your Stripe customer ID, subscription ID, and status. |
| Resend | Transactional email delivery | Recipient email address and name — used today for the subscription welcome email, and potentially for future account-related or promotional emails |
| Sign in with Google (optional) | Email address and basic profile information, only if you choose to sign in with Google | |
| Vercel | Website hosting and cookie-free analytics | Server request logs (e.g. IP address) and aggregate, anonymized page-view data |
We also use Contentful as our content management system for test and lesson content. Contentful does not receive any of your personal information — only content identifiers.
Cookies and analytics
Band9 uses a small number of strictly necessary cookies to keep you signed in and to remember your cookie preference. With your consent, we also load Vercel Web Analytics, a privacy-friendly analytics tool that does not use tracking cookies and does not build a profile of you across other websites. You can decline analytics from the cookie banner, or withdraw consent later by clearing your cookies.
Data retention
We keep your account data for as long as your account is active. If you delete your account, we aim to delete your personal data — including your profile, test attempts, and progress — within 30 days. Stripe retains billing records for longer where required by law (for example, tax and accounting rules).
Your rights
You can ask us to access, correct, export, or delete your personal information. You can update your profile or delete your account directly from your account settings, or contact us at cactus.english.canada@gmail.com for anything else, including questions about the data we hold about you.
Children's privacy
The Service is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, contact us and we will delete it.
International data transfers
Our service providers host data in various countries, including the United States and Canada. By using the Service, you understand that your information may be processed outside of your country of residence.
Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the date at the top of this page.
Contact us
Questions about this policy? Email us at cactus.english.canada@gmail.com. See also our Terms of Use.