Privacy Policy

1. Introduction

CasApp.ai ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our interview preparation service. We comply with UK data protection laws, including the UK GDPR and the Data Protection Act 2018.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password
• Interview Responses: Your answers to practice questions (text or voice recordings)
• Profile Data: University, course, degree level, nationality, current location
• Payment Information: Processed securely through Stripe (we do not store card details)

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on platform
• Device Information: IP address, browser type, operating system
• Performance Data: Interview scores, feedback history, progress metrics

3. How We Use Your Information

We use your information to:

• Provide and improve our AI-powered interview practice service
• Generate personalized feedback on your interview responses
• Track your progress and display performance analytics
• Process subscription payments and manage billing
• Send important service updates and notifications
• Respond to customer support inquiries
• Prevent fraud and ensure platform security
• Comply with legal obligations

4. Legal Basis for Processing (UK GDPR)

We process your personal data under the following legal bases:

• Contract Performance: To provide the services you subscribed to
• Legitimate Interests: To improve our services, prevent fraud, and ensure security
• Consent: For marketing communications (you can opt out anytime)
• Legal Obligation: To comply with accounting, tax, and other legal requirements

5. AI and Speech Processing

When you use voice input features, your speech is processed in real-time by your browser's built-in speech recognition (Web Speech API) and is NOT stored or transmitted to our servers in audio form. Only the transcribed text is stored. We use third-party AI services (OpenAI) to analyze your responses and generate feedback. These services process your data in accordance with their privacy policies.

6. Data Sharing and Third Parties

We share your information only with:

• Stripe: For secure payment processing
• OpenAI: For AI-powered feedback generation (anonymized where possible)
• Hosting Provider: For secure data storage and platform operation
• Legal Authorities: When required by law or to protect our rights

We do NOT sell, rent, or trade your personal information to third parties for marketing purposes.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Interview responses and feedback are retained for the duration of your subscription plus 12 months to allow historical access. After account deletion, personal data is removed within 30 days, except where retention is required for legal or accounting purposes (typically 6-7 years for financial records).

8. Your Data Protection Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Data Portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Opt out of marketing communications

To exercise these rights, contact us at support@casapp.ai. We will respond within 30 days.

9. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (SSL/TLS), secure authentication, regular security audits, and restricted access controls. However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Cookies and Tracking

We use essential cookies to maintain your login session and remember your preferences. We do not use third-party advertising cookies. You can control cookie settings through your browser, but disabling essential cookies may affect platform functionality.

11. Children's Privacy

CasApp.ai is intended for users aged 16 and above (typical university applicant age). We do not knowingly collect personal information from children under 16. If you believe we have collected data from a child under 16, please contact us immediately.

12. International Data Transfers

Your data is primarily stored in the UK/EU. Some third-party services (e.g., OpenAI) may process data in other countries. We ensure appropriate safeguards are in place for international transfers in accordance with UK GDPR, including Standard Contractual Clauses where applicable.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the platform. Your continued use of CasApp.ai after changes constitutes acceptance of the updated policy.

14. Contact Us and Complaints

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.ukif you believe we have mishandled your personal data.