Privacy Notice
Last updated: 4 October 2026
This Privacy Notice explains how PrepCall ("we", "us", or "our") collects, uses, and protects your personal data when you use our AI-powered interview coaching platform. It applies under the UK GDPR, EU GDPR, and the Data Protection Act 2018.
1. Data Controller
The controller responsible for processing your personal data is:
PrepCall
4 Brodia Road, London N16 0ES
Represented by: Gideon Bullock
Email: privacy@prepcall.me
2. Data We Collect
Identity & Contact Data
Full name, email address, and authentication credentials (managed via Clerk). Profile information you provide during account setup.
Career & Professional Data
CV documents you upload, LinkedIn profile data and portfolio URLs you provide, job descriptions and role specifications you submit for interview preparation, and target company and role information.
Voice & Behavioural Data
The audio of your speech during a practice session, which is streamed to Hume AI and analysed in real time. From that analysis we keep two things: a written transcript of what you said, and numerical measurements of how you sounded (headline delivery scores such as pace, energy and steadiness, plus the detailed moment-by-moment expression measurements produced by the analysis to support them).
AI-Generated Data
Coaching reports and performance assessments, personalised feedback and improvement recommendations, session summaries and progress tracking data.
Technical & Usage Data
IP address, browser type, device information, operating system, pages visited, features used, session duration, interaction patterns, server logs and error reports.
Transaction Data
Subscription status, payment history, and billing information. Payments are taken on Stripe’s hosted checkout pages, and your payment card details are held by Stripe.
Lawful Bases for Processing
We process personal data under the following lawful bases (Art. 6(1) GDPR):
Contract performance (Art. 6(1)(b)): Identity & Contact Data, Career & Professional Data, AI-Generated Data, and Transaction Data are processed to provide and manage the service you signed up for.
Consent (Art. 6(1)(a)): Voice & Behavioural Data is processed with your explicit consent, given on a dedicated screen before you start a practice session. You can withdraw consent at any time by emailing privacy@prepcall.me or by deleting your account; after withdrawal we can no longer produce coaching reports for you.
Legitimate interest (Art. 6(1)(f)): Technical & Usage Data is processed for platform security, fraud prevention, and service improvement. Our interest is balanced against your rights through data minimisation and pseudonymisation where possible.
Legal obligation (Art. 6(1)(c)): Financial records are retained as required by applicable tax legislation.
3. Recipients of Your Data
To fulfil the purposes described above, your personal data may be disclosed to:
AI Voice Processing: Hume AI, Inc. (USA). Provides the Empathic Voice Interface for real-time voice coaching and analysis of vocal delivery.
AI Language Processing: Anthropic, PBC (USA). Provides the Claude language model used for coaching report generation, CV analysis, and question generation.
Authentication: Clerk, Inc. (USA). Provides user authentication and identity management.
Payment Processing: Stripe, Inc. (USA). Processes subscription payments and manages billing.
Hosting: Vercel, Inc. (USA). Provides platform hosting and content delivery.
Database: Supabase (Ireland, EU). Provides the managed PostgreSQL database, hosted in Ireland, that stores account, session, and application data.
File Storage: Cloudflare, Inc. (USA). Provides R2 object storage for uploaded CV documents and LinkedIn exports.
Transactional Email: Resend (USA). Sends the welcome email when you create an account, using your name and email address.
Each of these providers processes your data on our behalf and on our instructions, under its data processing terms. Your session data is used for one purpose, producing your own coaching report, and is disclosed only to the providers named above.
4. International Data Transfers
Our database is hosted in Ireland. The other providers named in section 3 are established in the United States, so personal data sent to them leaves the UK and the EEA. We are documenting the transfer safeguard relied on for each provider, and you can ask for the current position for any of them at privacy@prepcall.me.
5. Retention Periods
We retain your personal data only as long as necessary:
Account data is retained until you delete your account.
Voice audio is streamed to the voice analysis provider and analysed while the session is running. The provider is configured with data retention switched off. What we keep from a session is the transcript and the vocal measurements described in section 2.
Session transcripts and the vocal delivery measurements derived from them are retained for 12 months from your most recent practice session, as set out in our Voice Data Policy. Coaching reports are retained on the same basis, so that later sessions can build on earlier ones.
Financial records are retained for the period required by applicable tax legislation (6 years in the UK; up to 10 years in certain EU jurisdictions).
6. Your Rights
Under the GDPR and UK GDPR, you have the right to:
Access (Art. 15): Obtain a copy of your personal data.
Rectification (Art. 16): Have inaccurate data corrected.
Erasure (Art. 17): Request deletion of your data.
Restriction (Art. 18): Restrict processing under certain conditions.
Data Portability (Art. 20): Receive your data in a machine-readable format.
Object (Art. 21): Object to processing based on legitimate interests.
Withdraw Consent (Art. 7(3)): At any time, without affecting prior processing.
Lodge a Complaint (Art. 77): File a complaint with the ICO (ico.org.uk) or your local supervisory authority.
To exercise your rights, contact privacy@prepcall.me. We will respond within one month.
8. AI Processing
PrepCall is a personal practice and coaching tool. The AI coaches you through spoken practice for your own development, working from the job description you provide and asking its own questions. Your session data is used for one purpose, producing your own coaching report, and is disclosed only to the providers named in section 3.
All AI outputs are coaching suggestions provided directly to you for your own use. Any decision about what to do with them is yours (see Art. 22 GDPR).
EU AI Act Transparency
You are interacting with an AI system when using our voice practice feature. The AI analyses how your voice sounded (pace, energy, steadiness and the detailed expression measurements described in section 2) to generate coaching feedback. AI-generated reports should be treated as practice guidance, not professional career advice. Our system is classified as limited risk under the EU AI Act with Article 50 transparency obligations.
9. Data Security
We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS/HTTPS) and at rest, and access controls on who and what can read your data.
10. Children’s Data
Our platform is for adults preparing for professional interviews and is for people aged 18 and over. If you believe someone under 18 has provided us with data, please contact us and we will delete it without delay.
11. Changes to This Notice
We may update this notice to reflect changes in legislation or our practices. Material changes will be communicated by email or a prominent notice on the platform.
12. Contact
For questions about your personal data or to exercise your rights:
PrepCall
4 Brodia Road, London N16 0ES
Email: privacy@prepcall.me
This Privacy Notice describes how PrepCall handles personal data. It is not legal advice to you. If you have a question about it, contact privacy@prepcall.me.