Privacy Policy

MyPrepGuru — AI voice mock interviews

Effective 9 August 2026 · Last updated 11 October 2026

MyPrepGuru ("the app", "we") is an independent, small-scale application that lets you practice technical job interviews with an AI interviewer. You sign in with Google, upload a résumé and a job description, speak through a mock interview, and receive a scored report.

Access is currently limited to invited testers. The app is an early-stage project run by an individual developer, not a company. If you are not on the invite list, sign-in is rejected and no account is created for you.

1. Who is responsible for your data

This app is operated by an individual developer ("the operator"). For any privacy question, correction, or deletion request, contact: support@myprepguru.com. We aim to respond within 30 days.

2. What we collect

Category	What exactly	Why
Google account basics	Your Google account identifier, email address, display name, and profile picture URL, received from Google when you press "Sign in with Google".	To create and recognise your account, to check you are on the invite list, and to show who is signed in.
Documents you upload	Résumé and job-description files (PDF, DOCX, or text, up to 2 MB each) and the text extracted from them. We keep the extracted text; the original file is discarded after processing and is not stored.	To tailor interview questions to your background and the target role.
Profile answers	The written answers and confirmations you give while building your profile (skills, projects, experience details).	To generate an interview plan and follow-up questions.
Interview content	What you say during a mock interview. The audio is processed in real time to produce a transcript and is not retained; we keep the transcript, the questions asked, and the resulting scores and feedback.	To conduct the interview in real time, to score your answers, and to let you review your report afterwards.
Technical logs	Server logs from the hosting platform: timestamps, request paths, error traces, and coarse usage counters.	To keep the service running and debug failures.

What we do not collect

No payment or financial information — the app is free and takes no payments.
No advertising identifiers, no third-party analytics or tracking pixels, no advertising cookies. The only cookie we set is a session cookie (see §6).
No video. The interview is audio only.
No access to your Gmail, Google Drive, Calendar, Contacts, or any other Google service. We request only the basic sign-in scopes openid, email, and profile.

3. Google user data and Limited Use

The app's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Concretely, the Google account data we receive (identifier, email, name, picture) is used only to provide the sign-in and account features described above. It is never sold, never used for advertising, never used to train any machine-learning model, and never shared with third parties except as needed to run the service (§5) or where the law requires it. No human reads it except the operator, and then only to debug a problem you have reported or to keep the service secure.

4. How your content is used

Your résumé, job description, and profile answers are sent to Google's Vertex AI (Gemini models) to produce an interview plan, questions, and a tailored evaluation.
Your interview audio is streamed to Google Cloud Speech-to-Text for transcription, and synthetic interviewer speech is produced with Google Cloud Text-to-Speech.
Transcripts and answers are sent to Vertex AI to score responses and write your feedback report.

We do not use your content to train AI models, and neither does Google: Vertex AI and Google Cloud Speech services are covered by Google Cloud's data processing commitments, under which customer data is not used to train Google's foundation models. See Google Cloud's Data Processing Addendum.

5. Who we share it with

We do not sell your data and we do not share it for advertising. Data is processed by the following service providers strictly to operate the app:

Amazon Web Services (AWS) — hosts the application, the database, and its backups on a server in the EU (Stockholm, Sweden), and holds the server logs. See the AWS Privacy Notice.
Google LLC / Google Cloud Platform — identity (Sign in with Google), AI processing (Vertex AI / Gemini), and speech-to-text and text-to-speech. These requests may be processed in Google data centres outside the EU. See the Google Privacy Policy.
LiveKit (open-source server) — carries the real-time audio between your browser and the interviewer agent. It runs on our own AWS server; audio is not sent to LiveKit's hosted cloud service.

We may also disclose data if legally required to do so, or where necessary to protect the security of the service.

6. Cookies

We set one cookie, ib_session. It holds a random session token (no personal data), is HTTP-only, is marked Secure over HTTPS, and expires after 30 days or when you sign out. It exists solely to keep you signed in. We use no analytics, tracking, or advertising cookies. Signing in with Google may also involve cookies set by Google under its own privacy policy.

7. Where data is stored, and for how long

Data is stored on Amazon Web Services in the EU (Stockholm, Sweden; region eu-north-1): account records, the text extracted from your résumés and job descriptions, transcripts, and reports. Interview audio and the original uploaded files are processed transiently and are not stored. Session tokens live in an in-memory store and expire automatically after 30 days.

Because this is an early-stage project rather than a production service, we keep your data only as long as the project is running and you keep your account. You can remove content at any time:

Uploaded résumés and job descriptions — delete them yourself from the app's résumé screen. Deleting an upload also removes the text and profile facts derived from it.
Everything else, including your account, transcripts, and reports — email support@myprepguru.com and we will erase it. We will confirm when it is done.

We keep encrypted database backups for 30 days so the service can be restored after a failure. When you ask us to delete your data it is removed from the live service straight away, and the remaining copies age out of those backups within 30 days.

If the project is shut down, all user data is deleted along with it. Server logs are kept for 14 days.

8. Security

All traffic to the app is encrypted in transit (HTTPS / WSS). Data at rest, including backups, sits on encrypted AWS storage. Sign-in is delegated entirely to Google — the app never sees or stores a password. The database and internal services are not reachable from the internet, there is no remote-login port open on the server, and the operator is the only person with access to the production environment. No system is perfectly secure; please do not upload documents containing information you would not want stored, such as government identity numbers or financial account details.

9. Your choices and rights

You can, at any time:

Access — ask for a copy of the data we hold about you.
Correct — fix profile facts in the app, or ask us to correct anything else.
Delete — delete uploads in the app, or ask us to erase your account and all associated data.
Withdraw consent — stop using the app and request deletion; you can also revoke the app's access to your Google account at myaccount.google.com/permissions.

If you are in the EEA or UK, the legal basis for processing is your consent, given when you sign in and upload content, and our legitimate interest in keeping the service secure and working. You have the right to complain to your local data protection authority. If you are in California, note that we do not sell or share personal information as those terms are defined by the CCPA/CPRA.

International transfers

The app runs in Google Cloud's United States region, so if you are in the EEA or UK your data is transferred outside your home jurisdiction. That transfer relies on Google LLC's certification under the EU–US Data Privacy Framework, and additionally on the Standard Contractual Clauses included in Google Cloud's Data Processing Addendum. Google is the only processor involved; we do not transfer your data anywhere else.

10. Children

The app is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has used the app, contact us and we will delete the data.

11. Changes to this policy

If this policy changes materially, we will update the "Last updated" date above and, where the change affects data already collected, notify signed-in testers by email.

12. Contact

Questions, data requests, or complaints: support@myprepguru.com.