Privacy Policy
This Privacy Policy explains how personal data and other information are collected, used, stored, transmitted, and otherwise processed when you use the Interview Trainer application, website, backend services, and related functionality (collectively, the "Service").
1. Data Controller
The person responsible for the processing described in this Privacy Policy is:
Dmytro Smerchynskyi
Privacy and data-protection requests may be sent to: [email protected] .
General support requests may be sent to: [email protected] .
2. Information We Process
The information processed depends on which Service features you use.
| Category | Examples | Purpose |
|---|---|---|
| Account and profile | Email address, display name, internal account identifier, email-verification status, specialization, preparation language, and linked authentication methods | Account creation, account management, authentication, and personalization |
| Authentication and security | Password hash, linked provider identifiers, session data, refresh/session tokens, verification data, recovery data, and security-related identifiers | Authentication, account recovery, session management, and protection against unauthorized access |
| Preparation settings | Technical specialization, preparation language, selected interview level, and relevant learning preferences | Selecting educational content and configuring evaluations |
| Learning activity | Saved questions, revealed answers, attempts, progress, scores, review dates, topic progress, activity history, and review scheduling | Learning functionality, statistics, progress tracking, and spaced repetition |
| User answers and AI results | Full text of submitted answers, evaluation results, criterion or topic scores, strengths, weaknesses, recommendations, and feedback | AI-assisted evaluation, learning history, and progress presentation |
| Practice interviews | Interview configuration, selected level, questions, answers, results, scores, and dates | Conducting and storing practice interview sessions |
| Subscription information | Purchase tokens, order identifiers, product and base-plan identifiers, subscription status, billing periods, entitlement information, account-linking identifiers, and quota usage | Purchase verification, subscription management, Restore Purchases, Pro access, and quota management |
| Technical and security information | Request metadata, error metadata, IP address during network communications, timestamps, and derived or hashed identifiers | Operating and securing the Service, preventing abuse, diagnosing errors, and enforcing usage limits |
| Analytics information | App sessions, application or installation identifiers, automatically generated events, device and application information, and usage information | Understanding Service usage and improving product functionality |
| Diagnostics | Crash reports, stack traces, installation identifiers, application version, operating-system information, and device characteristics | Detecting and fixing software failures |
The device time zone may also be sent or processed in order to calculate daily activity, review dates, weekly statistics, and study streaks correctly.
3. Passwords and Authentication
Interview Trainer does not store account passwords in plain text on the backend. Password authentication data is stored using password hashing.
The Android application does not intentionally persist the password entered by the user as a stored password on the device.
An encrypted refresh token or other session credential may be stored locally to maintain an authenticated session.
The application may also store preferences, cached educational data, and information about purchases awaiting verification.
4. Google Authentication
If you choose to sign in using Google, Google provides authentication information necessary for us to verify your identity and associate the login with your Interview Trainer account.
We may retain the provider identifier necessary to maintain that connection. Authentication tokens used to validate a login are handled only as necessary for the authentication process and account security.
5. AI Evaluation and OpenAI
Interview Trainer uses OpenAI to provide AI-assisted answer evaluation.
When you request an AI evaluation, information sent for evaluation may include:
- the text of your answer;
- the corresponding interview question;
- the reference answer;
- evaluation criteria or key points;
- the selected preparation or seniority level;
- language instructions required to generate appropriate feedback.
We do not intentionally add your Interview Trainer email address, display name, account identifier, password, or Google Play purchase token to the AI-evaluation request.
However, if you voluntarily include personal information, confidential information, third-party information, or other identifying information in the text of your answer, that information may be transmitted to OpenAI together with the answer.
Interview Trainer does not currently automatically remove all personal or confidential information that a user voluntarily places inside an answer before sending that answer for AI evaluation.
OpenAI data sharing
The OpenAI API project currently used by Interview Trainer is configured to share API inputs and outputs with OpenAI.
Accordingly, content transmitted to OpenAI and outputs generated in response may be used by OpenAI to evaluate model quality, identify usage patterns, improve its systems, and inform evaluation or training of models, in accordance with OpenAI's applicable policies and the data controls enabled for the relevant API project.
For this reason, you should not include information in an AI-evaluation answer that you are not authorized or willing to have processed in this way.
In particular, do not include:
- passwords;
- API keys;
- private cryptographic keys;
- payment-card security data;
- trade secrets;
- confidential employer, customer, or third-party information that you are not entitled to disclose;
- unnecessary personal information about another person.
Deleting your Interview Trainer account does not automatically delete information that has previously been transmitted to OpenAI. Information received by OpenAI is also subject to OpenAI's own applicable processing and retention practices.
6. Voice Input and Speech Recognition
Interview Trainer may provide voice input after you choose to use the feature and grant microphone permission.
Speech recognition is provided through speech-recognition functionality available on the Android device.
Depending on your device, operating system, configuration, and selected speech-recognition provider, audio may be processed locally or may be transmitted to the speech-recognition provider for processing.
Interview Trainer does not intentionally save a separate audio recording file to its backend as part of your answer history.
The resulting transcript may be reviewed and edited before submission. If you submit the transcript for AI evaluation, it is processed as a text answer under the AI-processing section of this Privacy Policy.
7. Google Analytics for Firebase
Interview Trainer uses Google Analytics for Firebase to understand application usage and improve the Service.
Depending on Firebase configuration, device settings, platform behavior, and applicable permissions, analytics processing may include application sessions, application-instance or installation identifiers, events, device information, purchase-related events, and information derived from network communications.
Information available to Google may also include an IP address used in processing a network connection. Depending on configuration and Google services, this may be used to derive approximate geographic information.
Where applicable law requires consent or another specific authorization for optional analytics processing, such requirements apply in addition to this Privacy Policy.
8. Firebase Crashlytics
Interview Trainer uses Firebase Crashlytics for application diagnostics and crash reporting.
Crashlytics may process information such as crash stack traces, Crashlytics installation identifiers, Firebase installation identifiers, application version, operating-system information, device characteristics, and application state associated with a crash.
Google currently states that Firebase Crashlytics keeps crash stack traces and associated identifiers for 90 days before beginning the process of removing them from live and backup systems.
9. Google Play Purchases
Purchases and subscriptions for the Android version of Interview Trainer are processed through Google Play.
The Interview Trainer backend may receive and store information required to verify and manage a purchase, including:
- purchase tokens;
- order identifiers;
- product and base-plan identifiers;
- subscription status;
- paid-period information;
- account-linking identifiers;
- quota and entitlement information.
This information is used to verify purchases, provide Pro entitlement, process plan transitions, restore purchases, prevent duplicate quota grants, and determine the applicable paid usage period.
Interview Trainer does not receive your full payment-card number or CVV from Google Play.
10. Transactional Email
Interview Trainer uses Brevo to send transactional and account-related email.
Brevo may receive the recipient email address and the content necessary to deliver a message, such as:
- an email-verification code;
- an email-verification link;
- an account-recovery or password-reset message;
- other security or service-related notifications.
Email messages may contain externally hosted images. When such an image is requested, the hosting provider may receive technical request information such as an IP address, user-agent information, or request metadata.
Some email providers retrieve remote images through their own proxy, in which case the request may originate from that proxy rather than directly from your device.
11. Hosting and Infrastructure
Oracle Cloud is used for backend and database infrastructure.
Infrastructure providers may process information stored by the Service or technical information necessary to transmit, store, secure, back up, or operate Service data.
12. Cloudflare
Cloudflare is used for domain, website, and related infrastructure services.
Where a request is routed through or handled by Cloudflare, Cloudflare may process technical information necessary to provide those services, including IP addresses, request metadata, security information, and network information.
13. Other Recipients of Information
Depending on the feature being used, information may be processed by:
- OpenAI — AI-assisted answer evaluation and the data-sharing purposes described above;
- Google — Google authentication, Google Play billing and purchase verification, Firebase Analytics, and Firebase Crashlytics;
- Oracle Cloud — backend and database infrastructure;
- Brevo — transactional email delivery;
- Cloudflare — domain, website, security, and related infrastructure functions;
- the speech-recognition provider available on your device — when you choose to use voice input.
We may also disclose information where disclosure is reasonably necessary to comply with a binding legal obligation, lawful court order, or valid request from a competent authority.
14. Purposes and Legal Bases
Where data-protection law such as the GDPR requires a legal basis, processing may rely on the following bases, depending on the particular processing activity:
| Processing | Typical legal basis where applicable |
|---|---|
| Account creation, login, learning functionality, progress, requested AI evaluation, subscription entitlement | Performance of the service requested by you or steps necessary to provide that service |
| Security, fraud prevention, prevention of quota abuse, diagnostics, protection of infrastructure | Legitimate interests in protecting users and operating a secure and reliable Service, where permitted by applicable law |
| Purchase and transaction records | Performance of the service, legitimate interests in verifying entitlements and preventing fraud, and legal obligations where applicable |
| Transactional account email | Performance of the service, account security, and legitimate interests in communicating necessary Service information |
| Analytics and similar optional processing | Legitimate interests where legally permitted, or consent where applicable law requires consent |
| Compliance with binding legal requirements | Compliance with a legal obligation |
Where applicable law requires consent for a particular processing activity, consent requirements are not replaced merely by publication of this Privacy Policy.
15. AI Results Are Not Used for Legally Significant Decisions
Interview Trainer AI scores, mastery indicators, and recommendations are educational features.
We do not use these scores to make employment, credit, insurance, legal-status, or other decisions that produce legal or similarly significant effects concerning you.
16. International Processing
Some service providers used by Interview Trainer may process information in countries different from the country in which you are located.
Where applicable law requires safeguards for an international transfer, the transfer is subject to the mechanisms applicable to the relevant provider and processing activity, which may include adequacy decisions, contractual safeguards, or other legally recognized transfer mechanisms.
17. Data Retention
We retain information for no longer than reasonably necessary for the purposes described in this Privacy Policy, subject to the specific practices described below and any applicable legal obligations.
Account and learning data
While your account remains active, account information, learning history, answers, evaluation results, interview history, review information, and progress data may be retained so that the Service can provide account history, statistics, and learning functionality.
At the effective date of this Privacy Policy, there is no general automatic expiration period that deletes all learning answers and learning history after a fixed period while an account remains active.
Subscription records
Subscription and transaction-related records may be retained as reasonably necessary to verify entitlements, prevent duplicate quota grants, handle payment disputes, detect abuse, maintain appropriate accounting records, and comply with applicable obligations.
Security and abuse-prevention records
Limited security and abuse-prevention records may be retained separately where reasonably necessary to investigate fraud, prevent repeated abuse, protect the Service, or establish or defend legal claims.
Such records may include derived or hashed identifiers. A hashed identifier should not necessarily be considered anonymous merely because it is hashed.
Firebase Crashlytics
As described above, Google currently states that relevant Crashlytics crash data and associated identifiers are retained for 90 days before removal begins.
Backups
Backup copies may temporarily contain information that has already been removed from the active database.
At the effective date of this Policy, there is not one uniform automatic expiration period configured for every possible backup copy. Backup data is not intended to be restored into normal active use except where reasonably necessary for disaster recovery, security, or system restoration.
Third-party providers
Information transmitted to third-party providers is also subject to those providers' applicable retention practices.
18. Account Deletion
You may delete your Interview Trainer account directly from the Account Settings section of the application.
You may also request assistance with account deletion by contacting: [email protected] .
We may require reasonable verification of your identity before processing a deletion request where necessary to prevent unauthorized deletion of another person's account.
When an account is deleted, data associated with that account is deleted from the active Interview Trainer database, subject to limited information that may need to remain temporarily or for a longer period where reasonably necessary for:
- security and fraud prevention;
- prevention or investigation of abuse;
- compliance with legal obligations;
- financial or transaction recordkeeping;
- establishment, exercise, or defense of legal claims;
- backup and disaster-recovery processes.
Information previously transmitted to a third-party service provider, including OpenAI, is not necessarily deleted automatically as a result of deleting your Interview Trainer account and may remain subject to that provider's own processing and retention rules.
Logging out does not delete your account.
Uninstalling the application does not delete your account.
Deleting your Interview Trainer account does not automatically cancel a Google Play subscription. Subscription cancellation must be handled separately through Google Play.
19. Your Data-Protection Rights
Depending on the law that applies to you, you may have some or all of the following rights concerning your personal data:
- the right to receive information about processing;
- the right to request access to your personal data;
- the right to request correction of inaccurate or incomplete data;
- the right to request deletion of personal data;
- the right to request restriction of processing;
- the right to receive qualifying data in a portable, machine-readable format;
- the right to object to processing based on legitimate interests where applicable;
- the right to withdraw consent where processing is based on consent, without affecting processing lawfully performed before withdrawal;
- the right to complain to a competent data-protection supervisory authority where applicable.
These rights may be subject to conditions and exceptions provided by applicable law.
To exercise a privacy right, contact: [email protected] .
We may request information reasonably necessary to confirm your identity before fulfilling a request involving personal data.
20. Security
We use technical and organizational measures intended to protect information against unauthorized access, alteration, disclosure, destruction, or loss.
Security measures include authentication controls, password hashing, protected server-side purchase verification, restricted access to infrastructure, and other security mechanisms appropriate to the Service.
No internet transmission, software system, or storage system can be guaranteed to be completely secure.
21. Local Data on Your Device
Interview Trainer may store certain information locally on your device, including session credentials, preferences, cached educational data, and purchase-related state.
Signing out may remove or invalidate some locally stored account information, but signing out does not by itself delete server-side account data.
Removing the application from your device removes application data controlled by the operating system, but does not by itself delete server-side account information.
22. Minors
Interview Trainer is intended for people who can lawfully use an interview-preparation service and enter into the applicable agreement.
If applicable law requires parental or guardian authorization for a person to use the Service or provide personal information, the Service should be used only with the required authorization.
If you believe personal information relating to a child has been submitted in circumstances where it should not have been, contact [email protected] .
23. Changes to This Privacy Policy
We may update this Privacy Policy when our Service, technology, providers, legal obligations, or data-processing practices change.
The most current version will be made available through Interview Trainer or its website.
Where required by applicable law, we will provide additional notice before a material change becomes effective.
24. Contact
Data Controller:
Dmytro Smerchynskyi
Privacy and data requests:
[email protected]
General support:
[email protected]