Privacy Policy

1. Information We Collect

We collect the following information:

• Account information: email address, display name, and hashed password
• Scenario content: descriptions, characters, and conversation trees you create
• Practice data: messages exchanged during practice sessions and AI-generated coaching insights
• Usage data: page views, feature usage, and error logs for service improvement

2. How We Use Your Information

• To provide and operate the Service
• To send your scenario descriptions and practice messages to AI providers for generating responses
• To authenticate your account and protect against unauthorized access
• To improve the Service through aggregated, anonymized analytics

3. Third-Party AI Providers

We use OpenAI and Google Gemini to generate AI responses. When you create scenarios or practice conversations, your content is sent to these providers for processing. These providers have their own privacy policies and data handling practices. We do not send your email address or account credentials to AI providers.

4. Data Storage and Security

Your data is stored on servers located in Europe. Passwords are hashed using bcrypt. All connections use HTTPS encryption. We implement rate limiting and access controls to protect against unauthorized access.

5. Data Sharing

We do not sell your personal data. We share data only with:

• AI providers (OpenAI, Google) for generating responses. Scenario content only, not account data
• Infrastructure providers for hosting and operating the Service
• Law enforcement if required by law

6. Shared Scenarios

If you share a scenario via a public link, the scenario content (title, description, conversation tree) becomes accessible to anyone with the link. Shared links can be revoked at any time from the scenario page.

7. Cookies

We use essential cookies for authentication (session token). We do not use third-party tracking cookies.

8. Your Rights

You have the right to:

• Access your personal data (viewable in Settings)
• Update your email address and display name
• Delete your account and all associated data (from Settings)
• Request a copy of your data by contacting us

9. Data Retention

We retain your data for as long as your account is active. When you delete your account, all personal data, scenarios, and practice sessions are permanently deleted. Anonymized, aggregated data may be retained for analytics purposes.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes through the Service.

11. Contact

For privacy-related questions or data requests, contact us at hello@unawkward.app.