Your practice stays
your business
Effective July 23, 2026 · Applies to the PrepWhisper app and this website
PrepWhisper helps you practice interviews with live AI coaching. This policy explains, in plain language, what we collect, what we deliberately never keep, and which services process your data on our behalf. The short version: we never record or store audio, and we don't store your practice transcripts.
What we collect
- Account details — your email address, name, and a cryptographically hashed password (we can never see the password itself). If you sign in with Google or Microsoft, we receive your name and email from them instead.
- Prep details you enter — your background, and the role, company, location, and job description for the interview you're practicing. These are saved with your account so they're ready when you return, and are deleted with your account.
- Practice-time usage — your remaining minute balance and listening-session heartbeat timestamps, so metering works.
- Purchases — if you buy a practice-time pack, we record the amount and minutes credited. Card details go directly to Stripe and never touch our servers.
- Security signals — sign-in attempt counts per network address, held in memory for 15 minutes to slow down password guessing.
What we deliberately don't keep
- No audio, ever. PrepWhisper has no recording feature and no audio storage in any mode.
- No resume files. If you fill your background from a resume, the PDF is processed in memory to produce an editable summary (with contact details deliberately excluded) and immediately discarded — the file itself is never stored.
- No transcript archive. Your conversation transcript lives in your browser during the session. Coaching requests are processed in memory and the transcript is discarded when the response is sent — closing the tab clears everything.
- No guidance history. The coaching you receive isn't stored server-side.
- No ads, no data sales, no tracking pixels.
How audio and transcription work
Default (browser transcription): your microphone audio is captured and transcribed by your browser's built-in speech engine. Your audio never reaches PrepWhisper's servers — we only ever receive the transcribed text. Note that browser speech engines (e.g. in Chrome or Edge) may process audio on the browser vendor's servers under their own privacy policies; that processing happens between your browser and its vendor, not through us.
Optional high-accuracy mode (Deepgram): if you switch engines in the app, your audio streams through PrepWhisper's server to Deepgram for real-time transcription, only while you're actively listening. We relay it without recording it, and transcription happens under Deepgram's privacy policy.
AI coaching
To generate guidance, we send your transcript text and prep details to Anthropic (the maker of Claude) via their API, under Anthropic's data policies. Anthropic does not train its models on this API data by default.
Who processes your data
| Service | What it receives | When |
|---|---|---|
| Anthropic (Claude) | Transcript text, prep details, job-posting links you import, resume content during background import; company-research web searches during prep briefs | Coaching requests, prep briefs, and imports |
| Deepgram | Live microphone audio | Only in optional high-accuracy mode, while listening |
| Google / Microsoft | Sign-in identity (name, email) | Only if you choose SSO sign-in |
| Your browser's speech vendor | Microphone audio for transcription | Default engine, per your browser's own policy |
| ElevenLabs | The text of mock-interview questions (never your speech or transcript) | Only when Mock Interview voice is enabled |
| Stripe | Payment details (card data goes directly to Stripe), email | Only when you buy a practice-time pack |
| Google Fonts | Standard web request metadata (IP, user agent) | Loading fonts and icons on our pages |
Cookies & local storage
- One signed, HTTP-only session cookie keeps you logged in for up to 7 days. No advertising or cross-site cookies.
- Your in-app preferences (transcription engine, coaching pace and depth) are kept in your browser's local storage.
Retention & deletion
Account, balance, and saved prep details are kept while your account is active. Email obrmarr@gmail.com to delete your account — we remove your record and prep details promptly. Transcripts and guidance have nothing to delete; they were never stored.
Security
Passwords are hashed with scrypt and salted; sessions use signed, HTTP-only cookies; transcription and AI keys live only on the server and are never exposed to the browser.
Children
PrepWhisper is not directed at children under 16, and we don't knowingly collect their data.
Changes
If this policy changes materially, we'll update the effective date above and note the change on this page before it takes effect.
Contact
Questions about privacy? Email obrmarr@gmail.com — we answer everything.