Privacy Notice
How Aura handles your voice, transcripts, and reports.
This privacy notice is maintained by LK GLOBAL LTD ("we", "us"). It explains, as data controller, how we collect, use, share, and protect your personal information. Last updated: 2026.
Controller
LK GLOBAL LTD is the controller of personal data collected through this Service. For data protection queries, use the email at the bottom of this page.
Data we collect
Account data (email or phone, password or third-party sign-in identifier, display name); practice data (voice input, transcripts, reports, error profile, practice preferences); technical data (device type, browser, IP address, timestamps, error logs); billing data (subscription status, plan, payment result — card numbers and billing address are collected directly by Stripe and do not pass through us).
How we use it
To operate the Service (sign-in, verification codes, generating AI replies and reports); to personalise practice (adapting questions and feedback based on your history); to manage billing and subscriptions; for security and fraud prevention; to improve the product; and to provide support when you contact us.
Legal basis
Performance of our contract with you (providing the account and Service); our legitimate interests (keeping the Service secure, preventing abuse, improving the product); compliance with legal obligations (tax and bookkeeping); and your consent where required (for example, optional marketing communications, which you may withdraw at any time).
Recipients & subprocessors
We share limited data with third parties needed to run the Service: Stripe (processes payments, subscriptions, tax and invoicing); cloud infrastructure and database providers (Supabase / Cloudflare); AI and speech providers (e.g. OpenAI for transcription and reply generation); email and SMS providers (e.g. Twilio); product analytics and error monitoring. These providers process data only on our instructions.
International transfers
Some of these providers are located outside your country. We rely on the safeguards they publish (such as Standard Contractual Clauses) to protect cross-border transfers.
Retention
Account data is retained for as long as your account exists; after account deletion, it is generally removed within 30 days, except where law requires longer retention (for example, billing records are typically kept for 6–7 years). Practice reports and transcripts are retained while your account is active and can be deleted individually at any time. Raw audio is not retained long-term — it is only briefly buffered to complete transcription and generate a reply. Technical logs are generally purged within 90 days.
Your rights
Depending on your location (e.g. under GDPR / UK GDPR) you may have the right to access your data, correct it, delete it, restrict or object to processing, receive it in a portable format, and withdraw consent. You can view and delete history and your account directly in-app, or contact us using the details below. We aim to respond within one month. You may also lodge a complaint with your local data protection authority.
Security
We use technical and organisational measures appropriate to the risk, including encryption in transit (HTTPS/TLS), access controls, least-privilege permissions, secrets management, and monitoring. No system is perfectly secure — please keep your credentials safe.
Cookies
We use only the cookies and local storage needed to keep you signed in and to run core functionality. No advertising trackers.
Children
Aura is designed for IELTS candidates and is not intended for users under 13. Minors should use it with parental or guardian consent.
Changes
We may update this notice from time to time. We will notify you of material changes in-app or by email.
Contact
Email: support@lkielts.com
WeChat: scan to add
LK 澜空
