Privacy Policy

Data we collect

• Account details - your email address and display name, used to create and secure your account.
• Practice session content - during a practice session your microphone audio is streamed so the simulated client can respond in real time. We store the resulting session transcript, your notes, ratings, and the feedback generated for you. We also store related content you create, such as reflections and journal entries.
• Age group - if you choose to answer our optional question, we store an age range to understand who uses the app. We do not collect your date of birth. You can skip the question, choose not to say, or change or remove your answer in Settings. It does not affect access to the service and is not sent to the AI providers as part of your practice sessions.
• Profile photo - optional, if you choose to upload one.
• Billing - payments are processed by Stripe on the web and Android, or by Apple for subscriptions bought in the iOS app. We do not see or store your card details; we keep a provider transaction reference and your plan/usage status.
• Country - we record the country your connection appears to come from, worked out by Cloudflare from your IP address; we do not store the IP address itself.
• Repeat-account check - free credits are one set per person, so when you sign up, sign in or start a session we keep a scrambled fingerprint of your device and of your network (which cannot be turned back into an IP address), plus the name of the network provider. A browser stores a device identifier in a cookie for this. We use it only to spot one person holding several free accounts.
• Sign-up check - the web sign-up form uses Cloudflare Turnstile to tell people from bots, which sees basic browser and connection details when you create an account.
• Usage data - basic technical, device, error, and page-view information needed to secure, operate, and improve the service. When you are signed in we keep a record, with your account, of which steps you reach (for example opening a client’s briefing, starting a session or opening your feedback), so we can see where people get stuck; it is deleted with your account. On the website, Microsoft Clarity records clicks and scrolling (never the text on the page or anything you type) without cookies, and Google Analytics measures visits only if you accept cookies when asked; if you decline, no analytics cookies are set.

How we use your data

We use your data to provide the service: to authenticate you, run practice sessions, generate feedback, track your progress and plan usage, and provide support. We rely on your consent and on the performance of our contract with you as the legal bases for processing. Session audio is processed only to power the live interaction and is not used to train third-party models.

Sub-processors we share data with

We use trusted service providers to run the app. Each processes data only on our instructions:

• Supabase - authentication and database hosting.
• Anthropic - Claude generates the simulated client’s text dialogue and your written feedback.
• Anam - powers the streaming video avatar.
• Google - Gemini powers voice-only sessions and the spoken voice: your speech is streamed to it to produce the client’s spoken replies and the session transcript.
• Stripe - payment processing.
• Apple - iOS App Store subscription processing.
• Cloudflare - application hosting and delivery.
• Microsoft - Clarity website analytics (clicks and scrolling, with page text masked).
• Sentry - error monitoring, which receives technical diagnostics when something fails.

Retention

We keep your account and practice data for as long as your account is active. You can delete content from within the app, and you can permanently delete your account and associated data from Settings at any time.

Your rights

Under UK GDPR you have the right to access, correct, export, or erase your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at support@thepracticeroom.app.

Where your data is held

Your account and practice data are stored in the European Union (Ireland). Some of the sub-processors above operate outside the UK and EU; where they do, transfers are made under the safeguards those providers offer for international transfers.

Security

Data is encrypted in transit. Access controls restrict practice data to your own account. No system is perfectly secure, but we take reasonable measures to protect your information.

Contact

Questions about this policy or your data? Email support@thepracticeroom.app.