Privacy policy

Last updated: 8 October 2026

1. Who we are

ESLStudeo (eslstudeo.com) is an online platform. On it, teachers and schools build courses and placement tests, run classes and mark their learners' work, and learners take those courses and tests. ESLStudeo is run from Morocco by its founder and developer, Omar Ben Jilali. In this policy, "we" means ESLStudeo. To contact us about anything in this policy, write to contact@eslstudeo.com.

This policy covers eslstudeo.com, the ESLStudeo app, the websites that organizations run at their own web address through ESLStudeo, and the ESLStudeo connector for AI assistants.

2. Who decides what happens to your data

In this policy, an organization is a school, a language centre, a company or an independent teacher that runs classes on ESLStudeo. When an organization uses ESLStudeo for its classes, the organization decides who receives an account and what its learners do. ESLStudeo stores and processes that data on the organization's behalf, in order to provide the service. The organization is responsible for obtaining any consent that its learners, or their parents, must give.

When you create an account for yourself, without a class code or an invitation from an organization, ESLStudeo decides what happens to that account's data.

3. What we collect

Your account

• Your name, your username, your email address, your role (for example teacher or student) and your organization. A learner who joins a class with a code does not have to give an email address.
• Your password, stored only as a one-way cryptographic hash (a value from which the password cannot be recovered). Nobody at ESLStudeo can read your password.
• If you create an account for yourself: the country you give, what you write under "About you", and the country to which your internet address belongs. The ESLStudeo team uses these to review new accounts.
• If you use Continue with Google: when you agree, Google shares your Google account's identifier, name, email address and profile picture with ESLStudeo. We keep the identifier and the email address, and we use the name only when we create a new account for you. We do not keep the picture. We never receive your Google password, and we have no access to your mailbox.
• A public profile page, with a profile picture and a cover picture, only if you create one. Anyone who has its link can see it.

Your learning and teaching

• Your answers to exercises, your written answers, and the recordings you make when an activity asks you to speak.
• Your scores, your teachers' marks and comments, the units you have finished, and the time you spend on a course's pages. Time is counted only while the page is open on your screen.
• The messages you send to your teacher, your posts in class discussions, and the certificates you receive.
• For teachers: the courses, tests and materials you create, and the marks and comments you give.

Placement tests

• When a candidate starts a test from a shared link: the name, and the email address or phone number, that the candidate types.
• The candidate's answers and, when the test includes spoken questions, the recordings of the spoken answers.
• The level that the organization decides. The placement test for children never shows a child their level.

Other records

• A record of important actions, for example who changed a course or a mark, and when. It is kept for security and to answer later questions about what happened.
• When you report a problem with the 🐞 button: your message, a screenshot if you add one, the page you were on, the size of your screen and the name of your browser.
• For payments: what you bought and the state of the order. Card numbers go to PayPal or Stripe and never reach ESLStudeo.

4. Why we use it

• To provide the service: accounts, courses, classes, marking, progress, certificates and placement results.
• To keep the service safe: protecting sign-in, recording important actions, and finding and correcting faults.
• To write to you: verification codes, sign-in links, password-reset links, messages from your teacher or school, and messages about your account.
• To take payments, when you buy something.

We do not sell your data, and we do not build profiles of you for marketing. The advertisements that some accounts see are non-personalised, and ESLStudeo gives the advertising company no account data (section 9).

5. Which companies receive data

The companies below each do a specific job for ESLStudeo, and each receives only the data that the job needs. Data-protection law calls such a company a processor.

AI assistants that a teacher connects. A teacher may connect an AI assistant, for example Claude or ChatGPT, to their ESLStudeo account through the ESLStudeo connector. Whatever the assistant reads from ESLStudeo, which can include the work of the teacher's learners, is then sent to the company that runs the assistant and handled under that company's terms. The teacher chooses which permissions to give, and can end the connection at any time.

We give data to public authorities only when the law requires it.

6. Who can see a learner's work

• The learner.
• The learner's own teachers, and the people whom the learner's organization allows to oversee classes.
• Classmates see the posts a learner writes in class discussions. If the teacher switches on the class board, classmates also see each learner's name, progress, streak and points.
• The ESLStudeo team, when this is needed to run the service, to correct a fault, or to answer a request for help.

An organization that shares or sells a course to other organizations does not see their learners.

7. How long we keep it

• Accounts and their work are kept until they are deleted. A learner's or a teacher's organization can delete their account, and we delete an account when the person asks us to. A deleted account first goes to a bin, from which it can be restored. It is removed permanently when the ESLStudeo team empties the bin.
• Placement test results: a result from which no student account was made is deleted 12 months after the test, with its answers and any recordings. A result from which an account was made stays with that account.
• The record of important actions: ordinary entries are kept for one year. A copy of what was changed or deleted, attached to an entry, is kept for 30 days. Entries about deletions, payments and seats are kept without a time limit, so that later questions about them can be answered.
• Backups: the database is copied every night. Daily copies are kept for 30 days and monthly copies for 12 months. Uploaded files are also copied every night to a backup store, and a file removed from the service can remain in that store.

8. Cookies and storage in your browser

A cookie is a small piece of data that a website asks your browser to keep and send back.

• One cookie keeps you signed in: for 12 hours, or for 30 days if you tick "Keep me signed in on this device".
• Two cookies protect Continue with Google while you sign in. Each lasts at most 10 minutes.
• Your browser also keeps some settings and working copies on your device, for example your accessibility choices and your progress in an activity. If you arrive through a reseller's link, your browser keeps the reseller's code for 30 days, so that the reseller is credited if you buy the course.

ESLStudeo itself sets no advertising cookies and runs no analytics programs. On the pages of the accounts that see advertisements, Google's advertising program runs and may set its own cookies. They are used to count advertisements, to limit how often the same one is shown and to detect fraud, not to choose advertisements from the person's interests.

9. Advertisements

ESLStudeo shows advertisements from Google, through its AdSense program, to some accounts. The ESLStudeo team chooses these accounts one by one or class by class. Such an account sees advertisements on its My courses screen and at the foot of course pages. Advertisements never appear during an exam, a timed unit or a placement test, and never on the websites that organizations run at their own web address.

ESLStudeo asks Google for non-personalised advertisements only: Google chooses them from the page and the approximate location, never from the person's interests or history. ESLStudeo gives Google no name, answer or other account data. Google receives only what every website that shows its advertisements sends it: the device's internet address, the browser's details and the address of the page. How Google uses that information is described at policies.google.com/technologies/partner-sites.

To stop advertisements for an account, write to contact@eslstudeo.com.

10. Learners under 18

Many learners on ESLStudeo are under 18. They receive their accounts through their school or teacher, who gives them a class code, and the school or teacher is responsible for obtaining any consent their parents must give. A learner who sees advertisements sees non-personalised advertisements only (section 9). An account that a person creates for themselves, without a class code or an invitation from an organization, is intended for adults. If you believe that a child's data should not be on ESLStudeo, write to us.

The Tutor, a spoken lesson with an AI, asks every learner, before their first lesson, to read what a lesson does and to say that they agree: a learner of 18 or more agrees for themselves; a learner under 18 says that a parent or guardian has read it with them and agrees. A school may instead state, in its settings, that it holds each of its learners' consent, and its learners are then not asked. The words of every lesson are kept with the learner's account, with the Tutor's notes, and the learner's teacher can read them; ESLStudeo keeps no sound. A learner can withdraw their consent on the Tutor's screen, and is asked again before the next lesson.

11. Your rights

You may ask to see the data we hold about you, to have it corrected or deleted, and to object to a use of it. These rights come from Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data and, for people in the European Union, from the General Data Protection Regulation. To use them, write to contact@eslstudeo.com. If your account belongs to a school or a teacher, you may also ask them, because they manage it; we will work with them to answer you. In Morocco, you may also complain to the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP).

12. Security

ESLStudeo can be reached only over encrypted connections (HTTPS). Passwords are stored as one-way hashes. Each account sees only what its role and its classes allow, and important actions are recorded. No system is completely safe. If we learn of a breach that affects your data, we will tell you, and the authorities, as the law requires.

13. Changes to this policy

When this policy changes, we update this page and the date at its top. If a change affects how your data is used, we will also tell you in the app or by email.