Supplemental Privacy Terms for the Duolingo English Test

The data of Duolingo English Test ("DET") takers will be governed by these Supplemental Privacy Terms for the Duolingo English Test ("DET Privacy Terms"), in addition to the Duolingo Privacy Policy, available at www.duolingo.com/privacy. When you register for or take the DET, you agree and will be subject to these DET Privacy Terms and the Duolingo Privacy Policy. To the extent there are any conflicts between the DET Privacy Terms and the Duolingo Privacy Policy, the DET Privacy Terms will take precedence with respect to the data of DET takers.

DET Data

When you take the DET, we may collect the following types of data from you ("DET Data"):

Information You Provide

When you register for the DET, you may provide us with personal information, including:

• Your name
• Your email address (or your parent's email address)
• Your age
• Your date of birth
• Your gender
• Your native language
• Your secondary school
• A photograph of your current, valid driver's license, passport, or other government-issued identification
• A photograph of your face
• Your payment transaction information (if you pay for the DET)

Additionally, you may voluntarily provide us with information for research purposes and to improve the DET, including your feedback and your test scores, score reports, or other data from other exams.

Testing Video

When you take the DET, you must provide access to your computer's webcam and microphone. We will use them to record you and your screen during the entire examination period ("Testing Video").

Your Answers

When you take the DET, you will submit answers to test questions ("Answers"). These Answers may include open-ended written responses, as well as recorded audio and video responses. Duolingo will record your Answers, including audio and video recordings.

The DET may include test questions that involve interacting with Artificial Intelligence ("AI"). Answers that you give to such questions may be shared with AI vendors for purposes of administering those test questions, but Duolingo's agreements with AI vendors prohibit those vendors from using your Answers to train their own AI models or other purposes unrelated to the DET.

Please do not include any sensitive or confidential information in your Answers.

Biometric Information

When you take the DET, we may collect biometric information from you and extract biometric signals from your typing patterns, identification cards, photographs, and Testing Video, including your voice and face geometry ("Biometric Information").

Duolingo will share your Biometric Information and other DET Data, including your identification cards, photographs, and Testing Video, with our identification verification vendor, Sum and Substance Ltd. d/b/a Sumsub ("Sumsub"), for purposes of identity verification and cheating prevention by Duolingo. Sumsub may extract biometric signals from this data, including your face geometry, and perform a liveness detection check on the same. Sumsub will process your personal data only for purposes defined by Duolingo relating to the DET. Sumsub will retain these signals and your other personal data following Duolingo instructions only for as long as needed to verify your identity and prevent future fraud or cheating, but no more than three (3) years in any event. You may review Sumsub's Privacy Policy here: https://sumsub.com/privacy-notice-service/.

Duolingo and Sumsub may process your Biometric Information solely for the purpose of anti-fraud, preventing cheating and protecting the integrity of the DET, including sharing this data with third parties that are assisting Duolingo in protecting examination integrity.

Duolingo shall store any "biometric identifiers" as defined by the Illinois Biometric Information Privacy Act (BIPA) only for as long as needed to verify your identity and prevent future fraud or cheating, but no more than three (3) years in any event. Please note that writing samples and photographs are not considered "biometric identifiers" under BIPA. Duolingo shall store your other Biometric Information in accordance with the "DET Data Retention and Deletion" provision of these DET Privacy Terms.

By taking the DET, you expressly consent to the collection and processing of your Biometric Information as stated herein.

Computer Monitoring Data

When you take the DET, Duolingo will collect the following data about your computer usage while you take the DET ("Computer Monitoring Data"):

• What additional applications or processes are running on your computer. Duolingo will not open any applications or individual files. Please close any other applications aside from the DET testing software by exiting them completely prior to starting your test.
• What peripherals (external devices attached to your computer) are used during your test. Duolingo will not have control or access to these peripherals. Please remove any peripherals before testing if you do not wish to have their presence known.
• Your network usage statistics and the volume of network traffic. Duolingo will not open network packets.

Duolingo may process your non-anonymized Computer Monitoring Data solely for the purpose of preventing cheating and protecting the integrity of the DET, including sharing this data with third parties that are assisting Duolingo in protecting examination integrity.

Duolingo may process anonymized Computer Monitoring Data for research purposes, including to validate and improve the examination and any anti-cheating systems.

Processing and Sharing DET Data

Duolingo may process your DET Data and share your DET Data with third parties for the following purposes:

To provide and verify accurate testing results

Duolingo may share your full name, date of birth, email address, photos you provide, test scores and subscores, a video of the interview section of your test, and your written responses to certain parts of the test ("Test Results") with institutions seeking to evaluate your DET score, such as universities, government authorities, or other institutions that accept the DET.

You may share your Test Results with participating institutions through the DET website. However, Duolingo may limit such sharing if it determines in its sole discretion that the sharing would be abusive or has been requested for an improper purpose. If you registered for the DET with a voucher or coupon sponsored by an institution, that institution may receive your Test Results. Furthermore, institutions that have been approved by Duolingo to use the DET score verification system may use your Certificate ID and date of birth to verify your Test Results. Therefore, if you make public or share your Certificate ID and date of birth with a third party, approved institutions will be able to use that information to verify your Test Results.

If an institution requests additional DET Data for purposes of investigating cheating on the DET, Duolingo may share additional DET Data with that institution.

If you link your account or test results to an agent or counselor who is a member of the DET's Global Partner Network, Duolingo may share your DET Data with that agent or counselor.

Duolingo may also share your DET Data if required by law or government order.

To prevent cheating and protect examination integrity

Duolingo may use your DET Data, including Biometric Information and Computer Monitoring Data, to prevent cheating and protect examination integrity. For example, Duolingo may:

• Use your identification, photograph, Testing Video, and Biometric Information to verify that the person who registered for the examination is the same person who took the examination.
• Use your Testing Video and Computer Monitoring Data to validate that you took the examination without improper assistance.

Duolingo may share your DET Data with third parties as needed to prevent cheating and protect examination integrity.

For research and improving the DET

Duolingo may use your DET Data internally for research purposes, such as validating and improving the DET, and improving our ability to understand the spoken language.

Duolingo may process your DET Data as needed to create de-identified datasets for research.

Duolingo may share anonymized, pseudonymized, de-identified, or aggregated DET Data with third parties for research purposes. Duolingo may also share audio recordings of Answers with third parties for research purposes.

Restriction on Data Subject Rights for DET Data

Duolingo may reject or limit your request to exercise your data subject rights with respect to your DET Data if Duolingo determines, in its sole discretion, that the exercise of such rights would interfere with the integrity or administration of the DET. For example, we may refuse your access to DET Data that would leak test items, or to DET Data that is being used to investigate possible violations of DET rules.

DET Data Retention and Deletion

Your Test Results and DET Data will be deleted from your Duolingo account after seven (7) years have passed from the date you upload your test.

You may also request that your Test Results and DET Data be deleted. However, Duolingo may reject or limit your deletion request if your Test Results or DET Data are needed to protect the integrity or administration of the DET. For example, we may refuse to delete DET Data that is being used to investigate possible violations of DET rules.

Notwithstanding the above, Duolingo may keep anonymized, pseudonymized, de-identified, or aggregated DET Data and Test Results, as well as your Testing Video, indefinitely, to improve the examination, and for research and analysis.

Emails

Duolingo may provide you with emails relating to the DET or other Duolingo services, including for purposes of marketing and requesting feedback, at the email address you provide. Duolingo will not sell your email address to any third party.

Artificial Intelligence & Automated Decision-Making

Duolingo and its service providers may use partially or fully automated processes to score items, detect cheating and other rules violations, and protect the integrity of the Duolingo English Test. However, a human proctor will have the final decision to invalidate any exam.

Duolingo may use your DET Data and Answers for internal research purposes and to improve systems used for scoring and detecting cheating or other rules violations. However, Duolingo does not allow third parties to use DET Data and Answers to train AI models outside of Duolingo's control.

Duolingo is committed to using AI for good, and we have established a set of Responsible AI Standards to guide our use of AI in connection with the DET. You may review our Responsible AI Standards at https://go.duolingo.com/ResponsibleAI and we welcome your feedback and comments on these standards at englishtest-research@duolingo.com.

Parental Consent for Child Test-Takers

Children under the age of 13 in the United States (or the age of digital consent in their country) are not permitted to buy DET vouchers online and must obtain parental consent to take the DET. If you are a parent or legal guardian who wishes to purchase a DET voucher for your child to take the DET, please email our customer support at englishtest-support@duolingo.com.

By purchasing a DET voucher for your child, you as the parent or legal guardian consent to your child taking the DET and consent to Duolingo collecting and processing your child's personal data in accordance with these DET Privacy Terms and the Duolingo Privacy Policy.

Last revised on September 11, 2024