Privacy policy

In short

You can use the whole Practice Room without an account. Your progress then stays in your browser, and we receive nothing.
If you sign in with Google, we keep your Google account ID, email address, name and practice progress, so you can carry on from any device. We never get your password, and we do not keep your photo or any recordings.
The placement tests and the registration form are Google Forms. Your answers and your speaking recording go to iGreener’s Google account and are used only to place you in a class and enrol you.
We do not sell your data, show adverts or use tracking tools.
You can see, download, correct or delete your data at any time. Email [email protected].

Who we are

iGreener is a small online English school run by Đặng Phương Nam (Nam), a teacher who works from the Gold Coast, Australia. iGreener decides how the personal data described here is used and is responsible for it.

Contact: [email protected], or a Zalo message to 0969 062 475.

This policy covers this website (studyigreener.com), the Practice Room and iGreener’s Google Forms.

Using the Practice Room without an account

Everything you do as a guest is saved only in your browser, on this device, using its local storage. It is not sent to us, and other devices cannot see it. If you clear this site’s data in your browser, it is gone.

Speaking practice uses your microphone only after you allow it and press record. Recordings stay on your device. We never receive them.

Signing in is optional. It only adds saving across devices.

What we keep

Your Google account ID: the number Google gives your account, which lets us recognise you.
Your email address and name, as shown in your Google account. We update them each time you sign in.
Your practice progress: what you have practised and how it went, your review schedule, your settings, your own flashcards, your daily practice log and your weekly checklist, each with the time it was last changed.
Dates and times: when you created your account, when you last signed in, when each sign-in on a device started and when it ends, and the date of the privacy policy you were shown when you signed in.

What we do not keep: your password (Google checks it, not us), your profile photo, any recordings, your contacts, or a record of your IP address.

Why: to save your progress and let you continue on another device, to keep you signed in, and to protect the service from misuse. We do not use your data for advertising, we do not build a profile of you, and we do not send you marketing emails.

Your agreement: when you choose to sign in, you agree to us using this data for these purposes. You can withdraw your agreement at any time by deleting your account (see “Your rights”). This does not affect what was done before.

When you sign in, any progress already saved in this browser as a guest is added to your account. While you are signed in, the Practice Room keeps a copy of your progress in this browser so that it also works offline. That copy is removed when you sign out.

Google’s sign-in script (from accounts.google.com) is loaded only on the Practice Room pages, and only when sign-in is switched on. No other page on this site loads it.

When you sign in, Google tells us your account ID, email address, name and whether your email address is verified. Google handles the sign-in itself under the Google Privacy Policy, and its script may keep its own small settings in your browser.

Cookies and browser storage

We use one cookie, and only if you sign in:

__Host-igs keeps you signed in. It holds a random sign-in code; we store only a scrambled (hashed) form of it. It lasts about 30 days from your last visit and is deleted when you sign out or delete your account. The site cannot work as a signed-in service without it, so we do not ask for separate permission.

The site also saves these items in your browser’s storage. Only the signed-in copy is sent to your account; the rest stay on your device:

igreener-lang: the language you chose (English or Vietnamese).
igreener-pr2-guest: your Practice Room progress as a guest.
igreener-pr2-u- followed by your account number: the copy of your progress while you are signed in. It is kept in step with your account and deleted from the browser when you sign out.
igreener-practice-v1: progress from the earlier version of the Practice Room, if you used it. The new version reads it once and leaves it in place.
igreener-practice-recordings (IndexedDB): your speaking recordings, kept only on this device until you delete them with Delete recordings on this device in the Practice Room.

We do not use analytics, advertising or social media trackers.

Some pages may show a video from YouTube in its privacy-enhanced mode (youtube-nocookie.com). When such a video loads, your browser connects to YouTube, and if you play it, YouTube may store data in your browser under the Google Privacy Policy. Links to Google Forms and Zalo take you to those services, and their own policies apply there.

Placement tests and registration (Google Forms)

Placement tests ask for your full name, email address, phone number or Zalo, year of birth and the class you are interested in, and may ask for your target IELTS band, when you plan to take IELTS, or why you want to learn English. They also keep your answers, your writing and the speaking recording you upload. To upload a file you must be signed in to a Google account; Google saves the file in iGreener’s Google Drive and adds your Google account name to the file name.

The registration form asks for the student’s name, year of birth, email address, phone number or Zalo, city or province, school and grade or job, and whether the student is under 18. For students under 18 it also asks for a parent’s or guardian’s name, relationship, phone number or Zalo and email address. It then asks about learning background, goals, test results, availability, how you heard about us, the payment option, your agreement to the terms, your consent to data use and class recordings, optional consent to share anonymous results or class photos, and anything else you choose to tell us.

Where it goes: to Google Forms, Google Sheets and Google Drive in iGreener’s Google account ([email protected]). Only Nam can open it.

Why: to place you in the right class, send you your result, enrol you, invite you to Google Classroom, Zoom and the class Zalo group, and manage course fees. We need these details to offer you a place; without them we cannot enrol you.

Class sessions on Zoom are recorded so that learners can watch them again. The registration form explains this and asks for your agreement; recordings are shared only with your class.

Your form answers are separate from your Practice Room account. Deleting your Practice Room account does not delete them; email us for that.

Where your data is kept

Practice Room accounts: in a database run by Cloudflare, Inc. (Cloudflare D1). Cloudflare encrypts it when stored and while it travels over the internet. Its data centres may be outside Vietnam.
Form answers and uploads: by Google LLC, in iGreener’s Google account. Google’s data centres may be outside Vietnam.
Nam looks after the data from Australia.

This means your personal data is stored and handled outside Vietnam. Both Cloudflare and Google protect data with strong security, but different laws apply there.

How long we keep it

Guest progress: in your browser until you clear it. We never have it.
Account and progress: until you delete your account. If we ever close the Practice Room, we will say so here first and give you time to download your data.
Sign-in sessions: about 30 days after their last use, then removed automatically.
Sign-in attempt counters: within one day (see “Security”).
Backups: deleted data can remain in backup copies for up to 30 days before it is gone for good.
Placement tests and recordings: up to 12 months after the test.
Registration details: while you study with iGreener and for up to 2 years after your last course, for enrolment and fee records.

Your rights

Under Vietnam’s Law on Personal Data Protection you can:

know how your data is used (this page);
agree or refuse, and withdraw your agreement at any time;
see your data and get a copy of it;
correct it;
have it deleted;
ask us to limit how we use it, or object to a use;
complain if you think we have handled it wrongly.

In the Practice Room, when you are signed in:

Download your data: you get a file with everything we keep about your account.
Delete your account: after you confirm, your account, all your sign-ins and all your saved progress are deleted from our server at once. Progress saved in a browser as a guest is not affected.
Correct your data: your name and email address come from your Google account. Change them there and sign in again, and we will update them. You can change your progress in the Practice Room itself.

By email: write to [email protected], if possible from the email address your data is linked to, so that we can check it is you. We will confirm that we have received your request within 2 working days, then:

show you, correct or send you your data within 10 days;
stop using it, limit it or act on your objection within 15 days;
delete it within 20 days.

If we need more time, we will tell you why before the deadline. If you are not happy with our answer, you can also complain to Vietnam’s personal data protection authority, the Department of Cybersecurity and High-Tech Crime Prevention (A05) of the Ministry of Public Security.

Your part: please give correct details in the forms, keep your Google account secure, and sign out of the Practice Room on shared computers.

Children and teenagers

You can use the Practice Room as a guest without giving us any personal data.

If you are under 16, please ask a parent or guardian before you sign in with Google or send us a form, and only go ahead if they agree. Google’s own age rules for Google accounts also apply; learners aged 13 and under use a parent’s account.

Parents and guardians can ask us at any time to see, correct or delete their child’s data, or to stop using it. If we learn that a child under 16 has signed in or sent a form without a parent’s agreement, we will delete that data when the parent asks.

Security

The whole site uses HTTPS.
Page scripts cannot read the sign-in cookie, and we store only a scrambled form of it.
We check the signature of every Google sign-in, and we never see your password.
Strict browser security settings limit what can run on our pages.
Only Nam can access the database and the form answers, and his Google and Cloudflare accounts are protected with two-step verification.
To stop abuse, we count sign-in attempts from the same network for one minute. We use a scrambled code made from your network address and a secret that changes every day, never the address itself, and we delete these counters within one day.

No online service is completely safe. If someone broke into our systems, they could see your name, email address and practice progress, which is why we keep so little. If a problem puts your data at risk, we will report it to the authorities within 72 hours as the law requires, and tell you if it could harm you.

Changes to this policy

When something changes, we update this page and the date at the top. If a change affects what we keep about your account or why, we will say so on this page and in the announcement bar at the top of the site before it applies. If you do not agree, you can delete your account.

Contact

Questions, requests or complaints: [email protected], or a Zalo message to 0969 062 475.