Privacy policy
Effective October 16, 2026
The short version
- We collect what you give us to run your mock interviews, feedback and study plans, plus basic account and usage data.
- Your video is never recorded. Body language is measured on your device; the AI interviewer sees an occasional still frame during the call.
- We don't sell or share your personal information for advertising, and we don't let our AI and speech providers train their models on your content.
- You can delete any interview, or your whole account, at any time.
This policy explains how [Company legal name, Inc.] ("Rehearse", "we", "us") collects, uses and shares information when you use our website and mock interview service (the "Service"). The Service is offered in the United States and is intended for people 18 and older.
1. Information we collect
Information you give us
- Account details: email address and password (stored hashed by our authentication provider), and optionally your name and phone number.
- Job and career details: the role and level you're preparing for, target companies and job titles, country, interview dates or deadlines, job descriptions, years of experience, weekly study time, preferred coding language, the areas you find hardest, and a resume or experience summary if you add one.
- Interview content: transcripts of what you and the interviewer said, code you write, whiteboard drawings, chat messages, and notes.
- Questions you report: real interview questions you choose to submit to the question bank.
- Support messages you send us.
Information collected during an interview
- Audio: your microphone audio is streamed to our speech provider to transcribe it in real time. We do not store audio recordings unless you turn on recordings (a Pro feature, off by default).
- Camera: face and hand tracking runs entirely in your browser and produces summary numbers (for example, the share of time you looked at the camera, smiles, nods and gestures). We store those numbers, not the video. Every 75 seconds or so, a small still frame is sent to our AI provider so the interviewer can react naturally; we don't store these frames.
Information collected automatically
- Device and usage data such as browser type, pages viewed, feature usage, errors and approximate location derived from your IP address.
- Cookies that are strictly necessary to keep you signed in. We don't use advertising cookies or cross-site tracking. Your theme preference is stored in your browser.
Payment information
When paid plans launch, payments will be handled by our payment processor. We will receive your billing status and the last four digits of your card, never the full card number.
2. How we use information
- To run the Service: generate interview questions, conduct the live interview, produce feedback, drills and study plans, and show your progress.
- To research how companies interview, using public information, so questions stay current.
- To maintain the shared question bank. Questions you report are shown to other users without your name or contact details.
- To secure the Service, prevent abuse and enforce plan limits.
- To communicate with you about your account, the Service and changes to these terms.
- To understand and improve the Service using aggregated or de-identified data.
- To comply with law.
We do not use your interview content to train AI models, and we do not make decisions about you that produce legal or similarly significant effects. Feedback is practice guidance, not a hiring decision.
3. How we share information
We share information only with service providers that process it on our behalf, under contracts that limit their use of it:
- AI model provider (Anthropic): generates questions, runs the interviewer and writes feedback. Under its commercial terms it does not train its models on our customers' content.
- Speech provider (Deepgram): transcribes your speech and voices the interviewer. We opt every request out of its model-improvement program.
- Database and authentication provider (Supabase): stores your account and content.
- Hosting and content delivery providers (Vercel and Cloudflare): serve the Service and protect it from abuse, which means they process your IP address and request data. Your browser also downloads face-tracking models from Google's servers and avatar models from the jsDelivr content network, which can see your IP address.
- Feature-flag provider (Statsig): decides which features and early-access areas are switched on for you. It receives your account ID, email address, IP address and browser type when you open parts of the Service that are not yet public.
- Payment processor (when paid plans launch).
We may also disclose information if required by law, to protect rights and safety, or as part of a merger or acquisition, in which case this policy will continue to apply. We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under California law.
4. Retention
- Interview transcripts, reports and plans are kept until you delete them or your account.
- When you delete your account, we delete your personal information within 30 days, except where we must keep it for legal, security or billing reasons.
- Backups are overwritten on a rolling basis within 30 days.
- Questions you reported to the shared question bank stay in the bank after you delete your account, unlinked from you.
5. Your choices and rights
Wherever you live in the US, you can access, correct, download or delete your information. In the app you can delete individual interviews and your account; for anything else, email [email protected]. We respond within 45 days and won't treat you differently for exercising your rights.
Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with consumer privacy laws have these rights by law, along with the right to opt out of the sale or sharing of personal information, targeted advertising and profiling. We don't do any of these. We honor Global Privacy Control signals. If we deny a request, you can appeal by replying to our decision. You can use an authorized agent; we may ask to verify your identity first.
6. Security
We use encryption in transit, access controls, row-level security on our database, and the principle of least privilege. No system is perfectly secure; if a breach affects your information, we will notify you as required by law.
7. Children
The Service is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
8. Changes
We will post changes here and update the effective date. For material changes we will notify you by email or in the app before they take effect.
9. Contact
[Company legal name, Inc.], [Registered business address]. Email [email protected]. See also our Terms of service.