Privacy Policy – Mockstars

1. Information We Collect

Personal Information:

• Email address, display name, password (encrypted)
• Resume data (work experience, skills, education)
• Interview practice recordings (audio)
• User-generated stories and notes
• Profile information (role, experience level, career goals)
• Subscription and payment status (via Apple, Google, and Stripe)

Non-Personal Information:

• Device type, OS version, app version
• Usage analytics (lesson progress, quiz scores, practice sessions)
• Crash logs and performance data
• IP address and general location data
• App usage patterns and session duration

2. How Do We Process Your Information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with the law.

We may process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To personalize interview questions and content based on your profile and experience
• To generate AI-powered stories from your resume and practice responses
• To track progress and deliver app functionality
• To provide customer support and respond to your inquiries
• To analyze app performance and improve our services
• To process payments and manage subscriptions
• To send important updates about the service
• To prevent fraud and ensure security
• To comply with legal obligations
• To enhance our application's features and functionality based on user data
• To improve the overall user experience by personalizing your engagement

AI-Powered Features

In Short: Our AI features use third-party technology to facilitate personalized interactions. Conversations are processed in real-time and are not stored by our servers.

We use the best AI services available (OpenAI, Claude, Google Gemini, etc.) to provide personalized interview practice and feedback. Any information you choose to share during AI interactions is processed solely to deliver accurate and relevant responses during the session. These AI providers do not retain personal data from API requests; however, we recommend users avoid sharing sensitive or personally identifiable information during AI interactions for your security and privacy.

3. What Legal Bases Do We Rely On to Process Your Personal Information?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable laws, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

If you are located in the EU or UK, this section applies to you.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:

• Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time.
• Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
• Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.
• Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms.

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.

4. When and With Whom Do We Share Your Personal Information?

In Short: We may share information in specific situations and with specific categories of third parties.

We do not sell your data. We share information only as necessary with:

Service Providers:

• Analytics Providers: Crash reporting and usage tracking
• Apple & Google: App store distribution and payment processing

Legal Requirements:

We may disclose your information if required by law or to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Prevent fraud or security issues
• Protect the rights and safety of our users
• Cooperate with law enforcement or regulatory agencies
• Exercise or defend our legal rights

5. What Is Our Stance on Third-Party Websites?

In Short: We are not responsible for the safety of any information that you share with third-party providers who advertise, but are not affiliated with, our Services.

Our app may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any personal information.

Third-party services we use include:

• Apple App Store and Google Play Store
• Payment processors (Apple Pay, Google Pay, Stripe)
• Analytics services
• Cloud storage providers
• AI service providers (OpenAI, Google Gemini, Calude, etc.)

6. Is Your Information Transferred Internationally?

In Short: We may transfer, store, and process your information in countries other than your own.

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your information.

By using our app, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

We have implemented measures to protect your personal information, including by using the European Commission's Standard Contractual Clauses for transfers of personal information between our group companies and between us and our third-party providers.

7. How Long Do We Keep Your Information?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice, unless otherwise required by law.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law (such as for tax, legal, accounting, or other regulatory purposes). The specific retention period depends on the type of data and the purpose for which it was collected.

• User Account Data: We retain this data as long as you maintain an account with us. If you choose to delete your account, all associated data will be permanently deleted within 30 days, except where required for legal or regulatory purposes.
• Payment Data: We retain this data only for the duration required to complete the transaction or as required for financial records and audit purposes.
• Analytics and Log Data: We keep this information for up to 12 months to ensure we can monitor app performance, improve our services, and address any issues with user engagement or fraud detection.
• Resume and Practice Data: Retained while your account is active. Can be deleted at your request.
• Subscription Data: Retained as required by Apple/Google for billing and compliance purposes.

Once your personal information is no longer necessary for our legitimate business interests or required by law, we will securely delete, anonymize, or isolate it to prevent further processing.

8. How Do We Keep Your Information Safe?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. These measures are aimed at preventing unauthorized access, disclosure, loss, theft, destruction, or alteration of your data.

Some of the security measures we use include:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Limited access to personal data on a need-to-know basis
• Secure data centers and infrastructure
• Employee training on data protection
• Firewalls and regular monitoring of our systems

However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, sblue, or modify your information.

9. Do We Collect Information From Minors?

Our app is designed for general audiences, and we prioritize the privacy and safety of all users, including minors.

We do not knowingly collect personal information from children under the age of 13 where this is restricted by law, such as under the Children's Online Privacy Protection Act (COPPA) in the United States. If we become aware that personal information has been inadvertently collected from a child under the applicable age of consent in their jurisdiction, we will take immediate steps to delete such data.

Our application does not have an age restriction and can be used by individuals of all ages. We encourage parents or guardians to actively supervise and be involved in the online activities and app usage of their children. If you believe that your child has provided us with personal data without your consent, please contact us at hello@mockstars.app, and we will address your concerns promptly.

10. What Are Your Privacy Rights?

In Short: In some regions, such as the European Economic Area (EEA), United Kingdom (UK), Switzerland, and Canada, you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time.

In certain regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws. These may include the right:

• To request access and obtain a copy of your personal information
• To request rectification or erasure
• To restrict the processing of your personal information
• If applicable, to data portability
• Not to be subject to automated decision-making
• To object to the processing of your personal information

You can make such a request by contacting us using the contact details provided in the "How Can You Contact Us About This Notice?" section below.

11. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems and applications include a Do-Not-Track ("DNT") feature or setting that you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this time, no uniform standard for recognizing and implementing DNT signals has been adopted, and we do not currently respond to DNT browser signals or other mechanisms that automatically communicate your choice not to be tracked.

However, if such a standard is adopted, we will update this privacy policy and provide you with details on how we comply with those changes. We encourage users to review this policy regularly to stay informed about our practices regarding online tracking.

12. Do United States Residents Have Specific Privacy Rights?

In short: If you are a resident of California, Colorado, Connecticut, Utah, or Virginia, you are granted specific rights regarding access to your personal information.

We comply with the California Consumer Privacy Act (CCPA) and other applicable laws that grant specific privacy rights to residents of the United States. You can learn more about your rights, such as the right to request access or deletion of your personal information, and how to exercise those rights by contacting us at hello@mockstars.app.

13. Do Other Regions Have Specific Privacy Rights?

In short: You may have additional rights based on the country you reside in.

If you are a resident of other regions, including Australia, New Zealand, or the Republic of South Africa, we will collect and process your personal information in line with the specific legal requirements of your country. You may have the right to request access to, correction of, or deletion of your personal data. If you believe your data has been processed unlawfully, you can file a complaint with the appropriate data protection authority in your country.

14. Do We Make Updates to This Notice?

In short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy policy from time to time. The updated version will be indicated by an updated "Last Updated" date, and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification.

We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.

15. How Can You Contact Us About This Notice?

16. How Can You Review, Update, or Delete the Data We Collect From You?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To review or update your personal information, you can access your account settings within the Mockstars app. To delete your personal information completely, you can delete your account through the app's settings.

Once you delete your account, all associated data will be permanently removed from our systems. If you have any questions or need assistance with managing your data, please contact us at hello@mockstars.app.