Privacy policy

This policy explains how PrepPlease handles information when you use the iPhone app or these information pages. The controller is Martin Tesar, reachable at tesar.cze@gmail.com.

Information you provide

The app saves your interview setup on your device: the name and address preference you choose, role, timing, relevant experience, background, interview brief, practice goal, language and reminder choice. Supplying a name is optional. Please anonymize customer details and avoid sensitive or confidential information that is not needed for practice.

When you start an interview, your voice and relevant setup go through our server to Google Gemini for live conversation, transcription and AI feedback. A separate Google transcription stream may provide live captions. An optional spoken review note is sent for transcription; the resulting note is kept locally with your review.

Recordings and saved reviews

Our application server holds interview audio and transcripts in memory to run the conversation and produce feedback. It does not write interview recordings to its application disk. A failed feedback request may retain the recording on the connected session for a retry window of up to two minutes. The application releases these references when processing finishes, the connection closes or the retry window expires. This describes our application’s handling, not Google’s independent processing or hosting-provider logs.

Your latest completed review, candidate recording, transcript when available, feedback rating and the interview setup used for that review are saved on your device. A new completed review replaces the previous one. Delete the saved feedback or reset the app in Settings to remove these local copies. Device backups and operating-system storage are subject to your device and backup settings.

Device identity, purchases and usage

No sign-in is required. The server creates a random device identity; the app stores its access credential in secure device storage. The server stores a hash of the credential, not the credential itself. The device identity is also used as the app user identifier in RevenueCat to verify App Store purchases.

Our persistent access ledger records the device identifier, creation time, free-interview use, available balance, session identifiers and status, reserved and charged seconds, and purchase or refund transaction references and times. We also store RevenueCat event identifiers, processing times and fingerprints to prevent duplicate processing; we do not persist raw webhook payloads in that ledger. Apple and RevenueCat process purchase and device information for store access, verification and refunds. RevenueCat’s hosted paywall also records when its purchase offer is viewed or closed and related purchase-flow interactions, linked to the app user identifier, to measure how the offer performs. We do not receive your payment-card details.

Usage and purchase records are kept to maintain balances, prevent duplicate charges and abuse, investigate support issues, and meet applicable legal requirements. The current ledger does not automatically delete records after a fixed period. Contact us to request access, correction or deletion; some transaction records may need to be retained for legal obligations or unresolved disputes. Erasing a device identity can prevent recovery of its unused balance, so we will explain relevant effects when handling a request.

Service providers

Google Gemini: processes voice, interview context, transcripts and generated feedback. Google’s paid Gemini API terms state that prompts and responses are not used to improve its products; they also permit limited safety/security logging and legally required disclosures. Unpaid API services can have different data-use terms. Whether Google classifies API use as paid depends on the provider project’s active billing configuration, not whether you bought practice minutes. See Google’s Gemini API terms and Google’s privacy policy.

RevenueCat and Apple: process device/app-user identifiers, purchase history and related technical information for purchase verification and restoration. RevenueCat also uses purchase records and paywall interactions for its purchase and offer analytics. These RevenueCat events are separate from the optional PostHog setting described below; they are not used by us for advertising tracking. See RevenueCat’s privacy policy and Apple’s privacy information. RevenueCat describes processing end-user information on the app developer’s behalf and hosting its customer data in the United States.

Hosting and communication: the server hosting infrastructure processes connection information, including IP addresses, needed to deliver and protect the service. Infrastructure providers may keep operational logs. If you email support, we receive your email address and the contents of your message and use our email provider to respond. Do not send unnecessary interview recordings or sensitive information.

Providers may process information outside your country, including in the United States. Their applicable terms and data-processing arrangements govern that processing. We do not promise that all data stays in one country.

Optional analytics

If you enable Share usage analytics and the analytics service is configured, the app sends PostHog an app-generated identifier, screen/action events and limited metadata such as app version, practice timing category and billing environment. The app’s analytics allowlist excludes your name, employer, interview text, audio, transcript and feedback content. Session replay is disabled. Turn the switch off to stop future analytics sending. Development builds do not send these events. See PostHog’s privacy policy.

These support, privacy and terms pages contain no analytics scripts, cookies or embedded tracking resources.

Purposes and your choices

We process the information needed to deliver the practice service and purchases you request, maintain security and accurate balances, understand purchase-offer performance, provide support, and comply with applicable legal obligations. Where applicable, the legal bases are performance of our agreement with you, legitimate interests in operating and protecting the service, and legal obligations. Optional analytics relies on your consent, which you can withdraw in Settings.

Depending on applicable law, you may request access, correction, deletion, restriction or portability of your personal data, or object to processing. Email tesar.cze@gmail.com with your Support ID if available; never send your device access credential. We may need to verify the request and explain any legal exceptions. You may complain to your local data-protection authority.

Audience and changes

PrepPlease is intended for adults aged 18 or older preparing for professional interviews. It is not intended for children. Contact us if you believe a child has provided personal information. We will update this page when material data handling changes.