Privacy Policy

NAATIMaster helps users practise NAATI CCL interpreting in their selected language other than English (LOTE) with dialogue practice, mock tests, transcription, AI scoring, vocabulary, and flashcard materials. This Privacy Policy explains how NAATIMaster (“we”, “us”, or “our”) handles personal information and the choices available to you.

We collect account information such as your name, email address, password hash, selected LOTE, subscription tier and status, email verification status, and login/session information. We do not store your plain-text password.

We collect practice information, including selected dialogues, the language and catalogue version used, session status, automatic and edited transcripts, scores, feedback, Smart Review progress and preferences, usage counts, and performance statistics.

When you record an interpretation, we collect the microphone audio recording so it can be transcribed, analysed for speech/audio duration, and used for scoring or reporting features available on your plan.

We may collect technical information needed to operate and protect the service, such as request times, IP address, browser request details, session identifiers, and error or security logs. We use IP addresses for functions including abuse prevention and rate limiting.

The webcam/camera preview is used locally in your browser to mimic the real test environment. NAATIMaster does not record or upload webcam video.

We use your information to provide and secure your account, operate practice sessions, transcribe recordings, generate AI scoring and feedback, preserve language-specific history, schedule Smart Review, enforce plan limits, process subscriptions, send account and security messages, show history and statistics, prevent misuse, diagnose faults, and respond to support or privacy requests.

We may also use aggregated or de-identified information to understand and improve product performance, content quality, reliability, and abuse prevention. We do not sell personal information or use practice recordings for targeted advertising.

Your recordings and transcripts may be processed by third-party services that support transcription and AI scoring. We send only the information needed for those functions, which may include microphone audio, a transcript, the relevant prompt text, language direction, and audio-derived timing or delivery measurements. These requests are made by our backend, not directly from your browser.

Some providers are based in, or may process information in, the United States and other countries outside Australia. Privacy and data-protection rules in those countries may differ from Australian law. We take reasonable steps appropriate to the service and the information involved when engaging providers.

After you commit an attempt, pending microphone audio may be stored temporarily in this browser so an interrupted upload can be resumed without losing your work. It is isolated to your account in that browser, removed after successful upload or account deletion, and expires after 30 days.

Candidate microphone recordings are retained for up to 30 days so eligible users can play them in reports, after which they are scheduled for deletion. Webcam video is not recorded or uploaded. Transcripts, scores, feedback, language codes, Smart Review progress, and practice history are generally retained while your account remains open so the service can provide its history and progress features.

Authentication sessions expire after 30 days unless ended earlier. Operational and security logs are kept only for as long as reasonably needed for their purpose. We otherwise delete or de-identify personal information when it is no longer needed, unless retention is required or authorised by law.

Account deletion starts a deletion workflow that cancels active subscriptions and removes the account and associated practice data, including stored candidate recordings. Limited information may remain temporarily in backups, deletion-recovery records, or service-provider systems until their normal deletion cycles end. Payment and transaction records may also be retained where required for legal, accounting, fraud-prevention, or dispute purposes.

Subscription checkout and billing are handled by a third-party payment processor. We store subscription and customer references needed to manage access, but we do not store your full card number. The payment processor handles payment information under its own terms and privacy practices.

We use an essential, secure, HTTP-only session cookie to keep you signed in and protect authenticated requests. We do not currently use advertising cookies.

Your browser also stores interface preferences such as theme and sidebar state, short-lived navigation and retry state, and, when necessary, pending audio for interrupted-upload recovery. You can clear ordinary preferences through your browser settings, but clearing pending audio before upload may prevent recovery of that attempt.

We disclose information to service providers only as reasonably needed for functions such as infrastructure and database operation, private recording storage, payment processing, email delivery, transcription, AI scoring, security, and monitoring. We may also disclose information where required or authorised by law, to protect users or the service, or in connection with a business transfer subject to appropriate safeguards.

We use reasonable technical and organisational measures to protect personal information, including backend-only access to sensitive API keys, hashed passwords, secure sessions, and restricted access to production services.

No online service can guarantee absolute security. Please use a strong password and keep your account credentials private.

You can update your name, email address, password, and selected LOTE in your account preferences. Changing LOTE does not erase earlier practice records: your history keeps the language code for each attempt, and language-specific Smart Review progress is available again if you switch back. You can cancel a paid subscription from the plan section.

You may contact us to request access to, or correction of, personal information we hold about you. We may need to verify your identity before acting on a request. If we cannot provide access or make a requested correction, we will explain why where required by law and tell you about available complaint options.

You can request account deletion from your preferences by confirming your password. You may also contact us for help with access, correction, deletion, or another privacy matter.

To make a privacy complaint, email us with the subject “Privacy complaint” and describe what happened. We will acknowledge and investigate the complaint and aim to respond within a reasonable period, ordinarily within 30 days. If you are not satisfied after giving us a reasonable opportunity to respond, you may be able to complain to the Office of the Australian Information Commissioner.

NAATIMaster is intended for users preparing for language testing and is not directed at children.

We may update this Privacy Policy as the product, providers, or legal requirements change. The updated version will be posted on this page with a new last updated date.

For privacy questions, contact us at support@naatimaster.com.