Privacy Policy

Consermo AI is run by Ones Tec, Gerbrandypad 9, 3515 HA Utrecht, the Netherlands (Chamber of Commerce no. 42159530). Ones Tec is the data controller for the personal data described here. Questions or requests about your data: support@consermo-ai.app or the contact page.

• Account details: your email address and, if you sign in with Google, Facebook or Apple, your name and profile picture. With Sign in with Apple you can hide your email; we then get a private relay address from Apple.
• Practice session data: the text of what you and the AI say during a session, and the scores and feedback generated at the end.
• Anything you type or upload into the "context" field before a session (job descriptions, CVs, word lists, notes), used only to make that session more relevant.
• Preferences: theme, interface language, voice, reminders and email choices, stored in your browser and profile.
• Plan and payment status: which plan you're on, whether a subscription is active and when it renews or ends, and a customer reference from Stripe, Apple or Google. We never see or store your card or bank details.
• Reports you send: if you report an AI reply or feedback, the reported text, the reason, your note and your account email go to our support team.
• Technical data: crash and error reports, and your IP address in server logs, to keep the service running and secure.

Your spoken audio is transcribed to text and sent, with your session context, to our AI provider OpenAI to generate the practice partner's replies, its spoken voice and your feedback. OpenAI doesn't use this data to train its models and deletes it after at most 30 days. Session transcripts and scores are stored so you can review your history later. We do not sell your data and we don't use it to train models.

We use your email to run your account (sign-up confirmation, password resets, security notices) and, at most once a month, to tell you when you've used all your sessions. You can switch that last email off in your profile.

• To provide the service you signed up for (contract): your account, sessions, feedback, plan and payments.
• With your consent: analytics and marketing cookies, ads in the Android app in the EU, UK and Switzerland, and microphone access. You can withdraw consent at any time.
• Our legitimate interests: keeping the service secure and working (crash reports, bot protection, abuse prevention) and the monthly-limit email, which you can turn off.
• Legal obligations: keeping payment records for tax purposes.

These companies handle data on our behalf, under contracts that only let them use it to provide their service to us:

When data goes to the US, it's protected by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

Account and session data live in our Supabase database, protected so only you can read your own sessions. Audio is processed in real time and isn't stored after transcription.

• Sessions stay until you delete them or your account.
• When you delete your account, we erase your data within 30 days; database backups roll over within a few weeks after that.
• Payment records are kept for 7 years, as Dutch tax law requires.
• Crash reports are kept for 90 days.

We use strictly necessary storage to keep you signed in and remember your choices; these can't be turned off. With your permission, we also use Vercel Analytics to understand how the app is used; it doesn't use tracking cookies or collect personal data. If you also switch on marketing cookies, we load the Google tag so Google Ads can measure whether one of our ads led to your sign-up. It sets advertising cookies and shares that visit with Google, but we don't use it for personalised ads or remarketing. Fonts are served from our own site, so loading a page sends nothing to Google. Manage your choice any time via "Cookie settings" in the footer. The iPhone and Android apps load neither Vercel Analytics nor the Google tag, so there is no cookie choice to make in them; ads in the Android app ask for consent on their own.

On the website, plans are paid through Stripe. In the iPhone app, through Apple's App Store; in the Android app, through Google Play. Each of them handles your payment details under its own privacy policy and tells us only whether your subscription is active. RevenueCat keeps track of App Store and Google Play subscriptions for us and receives your account ID and purchase history, not your name or payment details.

On the free plan, the Android app may show ads from other companies, served by Google AdMob: a banner on Home and History, and at most one full-screen ad after a practice session. There are no ads during a session, on the website, in the iPhone app or on a paid plan. The ads are not personalised. To show them, measure them and prevent fraud, Google receives your device's advertising ID, IP address (which gives a rough location), basic device information and whether you saw or tapped an ad, never your practice sessions, transcripts or account details. In the EU, the UK and Switzerland the app asks for your consent first. You can reset or delete your advertising ID in your phone's Android settings. See how Google uses information from apps that use its services.

If you turn on practice reminders in the app, they're scheduled on your own phone. No reminder content leaves your device.

Under the GDPR you can ask us to:

• give you a copy of your data, or send it to another service;
• correct data that's wrong;
• delete your data (you can delete sessions yourself, and your account via the data deletion page);
• limit or object to how we use it, and withdraw any consent you gave.

Send requests via the contact page; we answer within a month. If you're unhappy with how we handle your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or the authority where you live.

Consermo AI is not meant for children under 13, and we don't knowingly collect their data. Users aged 13 to 15 need a parent's or guardian's permission. If you believe a child under 13 has an account, tell us via the contact page and we'll delete it.

If this policy changes meaningfully, we'll update the date at the top of this page and tell you by email or in the app before the change takes effect.