Privacy Policy
IntPrepAI — Last updated: 2 April 2026
IntPrepAI ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use the IntPrepAI mobile application ("App") and related services.
1. Information We Collect
Information you provide directly
- Account information: Name, email address, and password when you create an account, or identifiers provided through Sign in with Apple or Google Sign-In.
- Industry selection: Your chosen professional industry to personalise content.
- Job specifications: Job descriptions you upload (PDF or DOCX) or import via URL.
- CV/Resume: Documents you upload for CV gap analysis.
- Practice answers: Text or voice recordings of your interview practice answers.
- Application tracking data: Company names, roles, dates, and notes you enter in the application tracker.
Information collected automatically
- Usage data: Practice session scores, progress metrics, quiz results, and feature usage patterns.
- Device information: Device type, operating system version, and app version (collected by Apple as part of standard App Store analytics).
Information we do NOT collect
- We do not collect location data.
- We do not access your contacts, calendar, or photos (beyond documents you explicitly upload).
- We do not use tracking pixels, advertising identifiers, or third-party analytics SDKs.
- We do not sell your data to third parties.
2. How We Use Your Information
| Purpose | Data Used | Legal Basis |
|---|
| Generate personalised interview questions | Job specifications, industry | Contract performance |
| Evaluate practice answers and provide feedback | Practice answers, job spec context | Contract performance |
| Analyse your CV against job specifications | CV documents, job specifications | Contract performance |
| Generate personalised model answers | CV, job spec, interview questions | Contract performance |
| Track your interview readiness and progress | Session scores, practice history | Contract performance |
| Provide study materials (flashcards, quizzes) | Industry, job specification | Contract performance |
| Process subscription payments | Handled entirely by Apple — we never see your payment details | Contract performance |
| Authenticate your account | Email, password hash, Apple ID, or Google ID | Contract performance |
3. AI Processing
IntPrepAI uses artificial intelligence (Anthropic's Claude API) to generate interview questions, evaluate your answers, analyse CVs, and create study materials. When you use these features:
- Your job specifications, practice answers, and CV text are sent to Anthropic's API for processing.
- Anthropic processes this data solely to generate responses and does not use it to train their models.
- We do not store AI-generated content beyond what is needed to display your results and enable caching for faster subsequent access.
- For more information on Anthropic's data handling, see Anthropic's Privacy Policy.
4. Data Storage and Security
- Encryption at rest: All data stored in our database is encrypted using AWS Key Management Service (KMS).
- Encryption in transit: All data transmitted between your device and our servers uses TLS 1.2 or higher.
- Access control: Your data is accessible only to your authenticated account. We use JSON Web Tokens (JWT) for secure authentication.
- Password security: Passwords are hashed using industry-standard algorithms and are never stored in plain text.
- Infrastructure: Our servers run on Amazon Web Services (AWS) in the US East (N. Virginia) region, protected by Web Application Firewall (WAF), private network subnets, and security groups.
- No local storage of sensitive data: Authentication tokens are stored in the iOS Keychain, the most secure storage available on Apple devices.
5. Data Sharing
We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:
- Anthropic (AI processing): Job specs, answers, and CV text are sent to Anthropic's Claude API for AI-powered features. Anthropic acts as a data processor on our behalf.
- Apple: Subscription payments are processed by Apple. We do not receive or store your payment information.
- Amazon Web Services: Our infrastructure provider. Data is stored on AWS servers with encryption enabled.
- Legal requirements: We may disclose information if required by law, regulation, or legal process.
6. Sign in with Apple and Google
- Sign in with Apple: If you use Sign in with Apple, we receive your Apple user ID, name (if you choose to share it), and email address (which may be a private relay address). We do not receive your Apple password.
- Google Sign-In: If you use Google Sign-In, we receive your Google user ID, name, email address, and profile picture URL. We do not receive your Google password.
- You can unlink social login accounts by contacting us or deleting your account.
7. Data Retention
- Account data: Retained for as long as your account is active.
- Practice sessions and progress: Retained for as long as your account is active. You can clear your practice history at any time from Settings.
- Job specifications and CV data: Retained until you delete them or delete your account.
- After account deletion: All personal data is permanently deleted within 30 days of account deletion. Anonymised, aggregated analytics may be retained.
8. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate data.
- Deletion: Delete your account and all associated data from within the app (Settings → Delete Account) or by contacting us.
- Data portability: Request your data in a machine-readable format.
- Withdraw consent: Where processing is based on consent, you can withdraw it at any time.
To exercise any of these rights, contact us at privacy@intprepai.com.
9. Children's Privacy
IntPrepAI is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.
10. International Data Transfers
Your data is processed and stored on servers located in the United States (AWS US East region). If you are located outside the United States, your data will be transferred to and processed in the United States. We ensure appropriate safeguards are in place for such transfers.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the app or on our website. The "Last updated" date at the top indicates when the policy was last revised.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at: