Privacy Policy

Last updated 22 October 2026

NexaProva is a mock language exam service operated by Hanzi Express, LLC. This policy explains what we collect when you use it, why we collect it, who else sees it, and how to get it removed. It covers nexaprova.com and the NexaProva app.

What we collect

Only what the service needs to work. Specifically:

• Account details. Your email address, and a display name if you choose to give one. Your password is stored only as a cryptographic hash, so we cannot read it.
• Exam activity. The papers you sit and the answers you give, along with scores, timings, and which questions you have already seen. The last of these is what lets us avoid repeating questions in your future papers.
• Written and spoken responses. The text you write in the writing and translation tasks, and, if you sit the speaking test, the audio you record and its transcript.
• Subscription status. Whether you have an active plan and when it renews. Card details are handled entirely by our payment processor and never reach our servers.
• If you sign in with Google. We receive your email address, your name, and the permanent identifier Google uses for your account. We keep that identifier so the link to your account survives you changing your Google email address. We ask Google for nothing else: not your contacts, your calendar, your files, or your photo, and we never receive your Google password. Signing in this way is optional, and creating an account with an email address and password asks Google nothing at all.

We do not ask for your date of birth, address, phone number, or any government identifier, and you do not need an account to sit a free mock exam. An account with a confirmed email is needed only for the free AI-graded run.

Why we collect it

• To create your account, sign you in, and keep your session secure.
• To mark your papers, show your results, and keep your reports available afterwards.
• To assemble fresh papers that do not repeat questions you have already answered.
• To take payment and give you access to the features your plan includes.
• To send transactional email: verification, receipts, and account notices.

Who else sees it

We do not sell your data for money. Our home page and free tools show Google ads, as described under Advertising below; the exam side of NexaProva does not. We use a small number of processors that handle specific parts of the service on our behalf:

• An AI provider receives the text of your open writing and translation answers so they can be marked against the official rubric, and returns the feedback you see. It is sent for grading only.
• A speech provider receives your recorded audio, if you sit the speaking test, to produce a transcript for grading.
• Stripe processes payments. Your card details go directly to Stripe; we receive only your subscription status.
• An email provider delivers verification and account email.
• Google Analytics receives which pages are viewed, along with the coarse location, device and referring site that any web analytics records. It never receives your answers, your results, or the address of an individual exam attempt.
• Google AdSense shows ads on our home page and our free tools pages (the pages under nexaprova.com/tools). When you open one of those pages, Google receives the page address, your IP address and information about your browser and device, and may read or set its own cookies. Exam pages, results, reports and your account never carry ads, and Google never receives your answers or what you type into a tool.

We may also disclose information where the law requires it, or to protect the service and its users from abuse.

Cookies

We set a signed session cookie that keeps you logged in. It is HTTP-only, so scripts on the page cannot read it, and clearing it signs you out.

Google Analytics sets its own cookies to count visits and tell a returning visitor from a new one. We use it to see which pages people find and where they arrive from.

Advertising cookies are set only on our home page and free tools pages; the next section explains them.

We never send Google the address of an exam you are taking. Those addresses contain an identifier for your individual attempt, so we replace it before anything is reported.

Advertising

Our home page and our free tools pages, the pages under nexaprova.com/tools, show ads served by Google AdSense. They pay for the tools staying free. No other page of NexaProva shows ads: exam pages, results, reports, pricing and your account never do.

On those pages, third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and other sites on the internet. Google may also use cookies, web beacons and your IP address to measure ads, limit how often you see the same ad, and detect fraud. Google explains how it uses information from sites that show its ads at policies.google.com/technologies/partner-sites.

You can opt out of personalized advertising in Google's Ads Settings, and opt out of other vendors' use of cookies for personalized advertising at aboutads.info or, in Europe, youronlinechoices.eu. If you opt out, you may still see ads, but they will not be based on your interests.

If you are in the European Economic Area, the UK or Switzerland, Google asks for your consent before advertising cookies are used for personalized ads on those pages, and you can change your choice at any time from the privacy and cookie settings link those pages show. If you do not consent, Google may still show non-personalized ads, which use cookies only to limit how often an ad is shown, to report on ads in aggregate, and to prevent fraud.

If you are in a US state with a consumer privacy law, such as California, showing personalized ads may count as “selling” or “sharing” personal information for targeted advertising under that law. You can opt out with the “Do not sell or share my personal information” link on those pages or with the choices above. You can also email us to exercise these rights.

The home page and tools pages are not directed at children under 13, and we do not ask Google to show ads personalized for children. No other page of NexaProva sets advertising cookies, and we do not sell your data for money.

How long we keep it

Your account and your saved papers stay until you delete them or ask us to close your account. Exam attempts sat without an account are not tied to you and are not retained as personal data. If you close your account, we delete your personal details and your saved attempts; we may keep billing records where tax or accounting law requires it.

Your rights

You can ask us for a copy of the personal data we hold about you, correct it, or have it deleted. Depending on where you live you may also have the right to object to processing, to restrict it, or to complain to your data-protection authority. To exercise any of these, email support@nexaprova.com from the address on your account, and we will respond within 30 days.

Where your data is processed

Hanzi Express, LLC is incorporated in the State of Delaware, United States. Your data is processed in the United States and in other countries where the processors listed above operate. If you are in the UK, the EEA, or another region with data-transfer rules, using NexaProva means your data is transferred outside that region, and we rely on the standard contractual protections our processors provide.

Security

Passwords are hashed, session cookies are signed and HTTP-only, and payment details never touch our servers. No service can promise perfect security, but we do not keep data we do not need, which is the most reliable protection there is.

Children

NexaProva is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us information, email us and we will remove it.

Changes

If we change this policy we will update the date at the top of this page, and for significant changes we will tell account holders by email.

Contact

The data controller is Hanzi Express, LLC. Write to us by email or by post: