InterviewApp

Privacy Policy for My Interview

Last Updated: 24 July 2026 Effective Date: 27 December 2025

Introduction

Welcome to My Interview (“we,” “our,” or “us”). We are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our mobile application.

My Interview is designed for users aged 16 and over who are seeking employment and want to practise interview skills.

Information We Collect

Information You Provide Directly

• Account Information: Email address, full name and authentication information. Passwords are handled by Supabase Auth and are never stored by us in plain text.
• Profile Information: Job preferences, target sectors, career goals
• CV: Document uploads for AI analysis (stored securely)
• Interview Practice Data: Questions attempted, responses, practice history
• Feedback Submissions: Your comments and suggestions about the app
• Success Stories: User-submitted success stories (optional, may be published with consent)

Information Collected Automatically

• Usage Data: App interactions, features used, session duration
• Device Information: Device type, OS version, app version
• Performance Data: Crash reports, error logs (anonymised)
• Network Information: Connection type for service optimisation

Voice Interview Data

When you use the Voice Interview feature (optional, Premium only):

• Microphone Access: We request microphone permission only when you choose to use voice interviews
• Audio Recording: Voice recordings are created temporarily on your device during practice sessions
• Transcription: Audio is sent to our AI provider (Groq) for speech-to-text conversion
• Local Storage: Audio files are stored locally on your device for up to 30 minutes to allow for transcription retry if needed
• Automatic Deletion: Audio files are automatically deleted after 30 minutes or when you close the app
• No Server Storage: Audio recordings are never stored on our servers - they are only temporarily processed for transcription

Information We Do NOT Collect

• ❌ Location data
• ❌ Camera access
• ❌ Permanent audio/voice storage (temporary only, see above)
• ❌ Contacts or address book
• ❌ Calendar or photos (except explicit CV uploads)
• ❌ Biometric data

How We Use Your Information

Primary Purposes

1. Provide Core Services: Deliver AI-powered interview practice and feedback
2. Personalisation: Personalise interview questions based on your job preferences
3. Account Management: Authentication, subscription management, profile updates
4. AI Analysis: Analyze CV content to provide improvement suggestions
5. Progress Tracking: Store interview history and performance metrics
6. Job Matching: Search and display relevant job opportunities via Adzuna API

Secondary Purposes

• Service Improvement: Analyze usage patterns to enhance features
• Customer Support: Respond to enquiries and technical issues
• Legal Compliance: Meet regulatory requirements (UK GDPR, Data Protection Act 2018)
• Security: Detect and prevent fraud, abuse, or security incidents

Legal Basis for Processing (UK GDPR)

We process your personal data under the following legal bases:

1. Contract Performance (Art. 6(1)(b)): To provide the services you’ve signed up for
2. Legitimate Interests (Art. 6(1)(f)): To improve our services and ensure security
3. Consent (Art. 6(1)(a)): For optional features like success story publication
4. Legal Obligation (Art. 6(1)(c)): To comply with applicable laws

Data Storage and Security

Storage Location

• Database: Supabase (PostgreSQL) hosted in EU/UK data centres
• AI Processing: Groq AI (data processed, not stored long-term)
• Job Data: Adzuna API (cached temporarily, 24-hour retention)
• Subscription Data: RevenueCat (PCI-DSS compliant)

Security Measures

• ✅ Database provider security controls for data stored at rest
• ✅ Encrypted HTTPS/TLS connections for data in transit
• ✅ Secure password hashing through Supabase Auth (passwords are never stored in plaintext)
• ✅ Row-Level Security (RLS) policies ensuring users only access their own data
• ✅ Regular security audits and updates
• ✅ Multi-factor authentication support (planned for v1.1)

Data Retention

• Active Accounts: Data retained while account is active
• Inactive Accounts: Data deleted after 24 months of inactivity (with 30-day warning)
• Deleted Accounts: Data permanently deleted within 30 days of deletion request
• Backups: Deleted from backups within 90 days
• Legal Holds: Data retained longer only when legally required

Third-Party Services

We share data with trusted third-party services:

Service	Purpose	Data Shared	Privacy Policy
Supabase	Database & authentication	Account data, profile, interview history	Supabase Privacy
Groq AI	AI interview feedback & voice transcription	Interview responses, audio (temporary processing only)	Groq Privacy
RevenueCat	Subscription management	Email, subscription status, device ID	RevenueCat Privacy
Adzuna	Job search	Location preferences (no personal data)	Adzuna Privacy

Important: We do NOT sell your personal data to third parties. Ever.

Your Data Rights (UK GDPR)

You have the following rights:

Right to Access (Art. 15)

Request a copy of all personal data we hold about you.

Right to Rectification (Art. 16)

Correct inaccurate or incomplete data via app settings or by contacting us.

Right to Erasure (“Right to be Forgotten”) (Art. 17)

Request deletion of your account and all associated data via app settings.

Right to Restrict Processing (Art. 18)

Request we limit how we process your data.

Right to Data Portability (Art. 20)

Download your data in machine-readable format (CSV/JSON) via app.

Right to Object (Art. 21)

Object to processing based on legitimate interests.

Right to Withdraw Consent (Art. 7(3))

Withdraw consent for optional features at any time.

Right to Lodge a Complaint

Contact the UK Information Commissioner’s Office (ICO):

• Website: https://ico.org.uk/make-a-complaint/
• Phone: 0303 123 1113

How to Exercise Your Rights

In-App (Fastest)

1. Go to Settings > Privacy & Security
2. Select Download My Data or Delete Account

Email Us

Contact: info@interviewappcom.com
Response time: Within 30 days (usually within 7 days)

Children’s Privacy

My Interview is intended for users aged 16 and over. We do not knowingly collect data from children under 16.

If we discover we’ve collected data from a child under 16, we will delete it immediately. Parents/guardians can contact us at info@interviewappcom.com.

Cookies and Tracking

We Do NOT Use:

• ❌ Advertising cookies
• ❌ Third-party tracking pixels
• ❌ Social media trackers
• ❌ Cross-site tracking

We Do Use:

• ✅ Essential session cookies (authentication only)
• ✅ Local device storage for app preferences (not transmitted)
• ✅ Analytics for app performance (optional, can opt-out)

International Data Transfers

Your data is primarily stored in EU/UK data centres. If we transfer data outside the UK/EU, we ensure:

1. Adequacy Decisions: Transfers only to countries with adequate data protection
2. Standard Contractual Clauses (SCCs): For transfers to non-adequate countries
3. Additional Safeguards: Encryption, pseudonymisation where possible

Data Breach Notification

In the unlikely event of a data breach:

1. We will notify the ICO within 72 hours (if required by law)
2. Affected users will be notified without undue delay
3. We will provide clear information about the breach and mitigation steps
4. We will document all breaches internally for review

Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• New features or services
• Changes in data protection laws
• Feedback from users or regulators

How we notify you:

• Email to registered users (30 days before changes take effect)
• In-app notification on next launch
• Updated “Last Updated” date at the top of this policy

Your options:

• Continue using the app (acceptance of new terms)
• Delete your account if you disagree with changes

Contact Information

Data Controller

My Interview App
Email: info@interviewappcom.com
Support: info@interviewappcom.com

Data Protection Officer (DPO)

For data protection enquiries: Email: info@interviewappcom.com

Response Times

• General Inquiries: 2-3 business days
• Data Rights Requests: Within 30 days (UK GDPR requirement)
• Urgent Security Issues: Within 24 hours

Legal Framework

This Privacy Policy is governed by:

• UK General Data Protection Regulation (UK GDPR)
• Data Protection Act 2018
• Privacy and Electronic Communications Regulations (PECR) 2003
• Computer Misuse Act 1990

Your Consent

By creating an account and using My Interview, you acknowledge that you have read, understood, and agree to this Privacy Policy.

You can withdraw your consent at any time by deleting your account via Settings > Privacy & Security > Delete Account.

---

Questions or Concerns?

We’re here to help. Contact us at:

• Email: info@interviewappcom.com
• In-app: Settings > Help Centre > Contact Support

Thank you for trusting My Interview with your data. Your privacy matters to us.