Privacy Policy

1. What we collect

• Account details: your email address, and a password that is stored hashed — we never see it. If you sign in with Google we receive your name, email address and profile picture from Google instead.
• What you tell us at onboarding: your current score estimate, your target score, your exam date if you set one, and your reason for studying (work, university or personal).
• How you practise: which part each session covered, when it started and finished, your score, and for each question the answer you chose, whether it was correct, and how long you spent on it.
• What we work out from that: per-part accuracy, how many questions you have answered, and a skill-level breakdown used to pick what to drill next.
• Your study plans, including the generated text in both English and Thai.
• Anything you write to us: feedback messages and the page you sent them from, and question reports with the reason and any details you add.
• Payment records: the amount, the plan, and the payment reference from our provider. Never card numbers — see section 4.
• The IP address your account was created from. It is recorded once and never updated. We keep it to spot one person creating many free trials, and nothing in the service blocks you based on it.

2. Why we collect it

• To run your account and keep you signed in.
• To work out which TOEIC parts you are weakest at, which is the point of the service.
• To generate your weekly study plan.
• To apply your free trial and subscription correctly.
• To fix things that break, and to understand where people get stuck.
• To discourage abuse of the free trial.

3. What we send to the AI that writes your study plan

Study plans are generated by Anthropic’s Claude. We send only the fields needed to write the plan: your current score estimate, your target score, your exam date or how many days remain, which week of your journey it is, how many days a week you chose to study, and a part-by-part accuracy summary.

We do not send your name, your email address, or anything you have typed in free text. Nothing you write in feedback or question reports is ever passed to an AI model.

4. Payments and card data

Payments are handled by Omise using PromptPay. Card payments are not offered.

We never receive, process or store card numbers, CVV codes or expiry dates. They do not pass through our servers and they are not in our database. We store only the payment reference, the plan and the amount, so we know what you bought.

5. Who else processes your data

We do not sell your data, and we do not share it for advertising.

Practice questions, audio and images are produced ahead of time and contain nothing about you.

• Supabase — our database, login system and audio file storage.
• Vercel — hosting, and website analytics that count page views without using cookies.
• Sentry — error reports when something breaks. Reports are tagged with your account ID so we can trace a specific failure.
• Anthropic — study plan generation only, limited to the fields in section 3.
• Omise — payment processing.
• Google — only if you choose to sign in with Google.

6. Where your data is held

Your account details and practice history are stored by Supabase on servers in Singapore.

Some of the other services in section 5 process data elsewhere. Error reports go to Sentry’s systems in the United States, and study plans are generated by Anthropic outside Thailand.

Reachmark is operated from Thailand, so using it means your personal data is transferred out of Thailand and processed abroad.

7. Cookies

We do not use advertising or tracking cookies.

• Login cookies set by Supabase. These are required — without them you cannot stay signed in.
• A language cookie that remembers whether you chose English or Thai, kept for one year.

8. How long we keep it

We keep your account data for as long as your account exists, because your practice history is what makes the weakness analysis and study plans work.

If you ask us to delete your account we will do so within 30 days, along with your practice history, study plans and weakness profile. Payment records are kept longer where we are required to keep them for tax or accounting purposes.

Error reports are kept for a limited period by Sentry and then deleted automatically.

9. Your rights

Under Thailand’s Personal Data Protection Act (PDPA) you can ask us to show you the personal data we hold about you, correct it if it is wrong, delete it, or stop using it. You can also withdraw consent, though some processing is needed simply to provide the service you paid for.

Email nawin.dev.th@gmail.com from the address on your account and we will respond within 30 days. If you are not satisfied, you may complain to Thailand’s Personal Data Protection Committee.

10. Children

Reachmark is intended for people aged 13 and over. If you believe a child under 13 has given us personal data, email us and we will delete it.

11. Changes

If we change this policy we will update the date at the top of this page. If a change materially affects you we will say so in the app.

12. Contact

Nawin Sundaraketu (นวินทร์ สุนทรเกตุ) — nawin.dev.th@gmail.com