Privacy Policy

Mockly is an AI interview practice application that lets users record spoken interview answers, receive feedback and analytics, upload CVs for tailored coaching, and access premium features through a subscription.

We collect the following categories of personal data:

We use your personal data to:

• Create, authenticate, and manage your account
• Provide AI-powered interview practice, feedback, and analytics
• Generate tailored interview questions based on your CV and practice goals
• Store and display your interview history and progress
• Process and manage premium subscriptions and Interview Pass credits
• Communicate with you about your account, support requests, or important service updates
• Improve our app, prompts, reliability, features, and user experience
• Protect the service, prevent abuse, and maintain security

We do not use your personal data to train our own AI models. When you allow AI processing, relevant inputs may be sent to OpenAI, including your first or display name; microphone audio, transcripts, and spoken answers; your role, industry, level, company, and interview context; job-description text, files, or photos you provide; and CV or resume files and content you choose to upload. We also send a one-way pseudonymous safety identifier derived from your internal user ID. It does not contain your email address or expose the underlying Firebase user ID. OpenAI processes these inputs to transcribe speech, generate questions and interviewer audio, protect the service from abuse, and produce feedback, summaries, CV analysis, and coaching responses. Data sent through the OpenAI API is not used to train OpenAI models unless we explicitly opt in; Mockly does not opt in to that use.

Where UK or EU data protection law applies, we process your personal data under the following legal bases:

• Contract: To provide the Mockly service, including account access, interview practice, saved history, analytics, and premium features.
• Consent: For sharing personal data with OpenAI and for optional features such as microphone access, audio recording, CV uploads, and job-description uploads. AI processing remains unavailable if you decline.
• Legitimate Interests: To improve the app, maintain security, troubleshoot issues, prevent abuse, and respond to support requests.
• Legal Obligation: Where we must process or retain information to comply with applicable laws.

We do not sell your personal data. We may share limited data with service providers that help us operate Mockly.

• Authentication Providers: Firebase Authentication, Apple Sign In, and Google Sign In for secure account access.
• Database & Storage: Google Firebase, Firestore, and Firebase Storage for storing account data, app data, and user-generated content.
• Backend Hosting:Railway for hosting Mockly's application API and server-side services.
• AI Services: OpenAI receives the name, pseudonymous safety identifier, audio, answer, interview-context, job-description, and CV data described above only after you allow AI processing, for transcription, abuse prevention, interviewer speech, relevant questions, analysis, feedback, and coaching responses.
• Purchase Management: RevenueCat for validating purchases and managing premium entitlements, subscription status, and Interview Pass credits.
• App Store Payments: Apple App Store for processing in-app purchases and subscriptions.
• Support & Communications: Email services used to respond to support requests and user messages.

These providers are only allowed to process data as needed to provide their services to us. They are not permitted to sell your personal data. We take reasonable steps, including provider due diligence and contractual commitments, to require processors to provide the same or equivalent protection for personal data that Mockly describes in this policy.

Mockly offers optional premium features through auto-renewable subscriptions and one-off Interview Pass purchases. Each Interview Pass is a consumable credit for one live interview, and purchased pass credits do not expire. Payments, subscriptions, and pass purchases are processed by the Apple App Store and managed using RevenueCat.

We do not collect or store your full payment card details. We may receive subscription status, entitlement status, product identifiers, renewal status, and purchase-related metadata so that we can provide access to premium features.

Subscription cancellation, renewal, refund, and billing settings are managed through your Apple ID and the Apple App Store. Interview Passes do not auto-renew. Apple handles refund requests for both subscriptions and Interview Pass purchases.

Before Mockly sends personal data to OpenAI for the first time, the app displays an AI data disclosure that identifies OpenAI, lists the categories of data that may be sent, explains each purpose, and asks you to allow or decline. Declining does not transmit that data to OpenAI and prevents AI-powered interview, transcription, feedback, and CV-analysis features until you later choose to allow them.

Audio is captured only when you use an interview feature and grant microphone permission. In recorded practice or mock sessions, a recording is uploaded temporarily to Mockly's backend and sent to OpenAI for transcription and feedback. Mockly deletes that temporary server audio file when the request finishes. In a live interview, audio is streamed from your device to OpenAI for the conversation and transcription; Mockly does not save a copy of the raw live audio. You can stop recording or leave the live interview at any time.

Transcripts, feedback, scores, and interview history may be stored so you can review your progress inside the app. They remain subject to the account and session retention periods described below.

When you upload a CV or resume, we process the file to extract relevant information such as your education, skills, projects, experience, and achievements. When you upload a job description, its text, document, or photo is processed to create an interview-ready role description. Mockly deletes each temporary backend upload after processing and requests deletion of any temporary OpenAI file created for that request. Extracted CV profile information and job-description text may be stored as part of your profile, preferences, or interview sessions. You can replace or delete your saved CV profile from within the app.

Mockly requests that OpenAI does not store Responses API application state for CV and job-description analysis, and promptly requests deletion of uploaded OpenAI Files API objects after processing. Under OpenAI's standard API data controls, limited API data may nevertheless be retained for up to 30 days for abuse monitoring, subject to OpenAI's policies, legal obligations, and documented exceptions. This provider-side retention may apply even though Mockly removes its own temporary audio and document uploads as described above.

We retain your personal data for as long as needed to provide Mockly and meet legal, security, or operational requirements.

• Account Data: Kept until you delete your account or request deletion.
• Interview Sessions, Transcripts & Feedback: Kept until you delete your account or request deletion, unless we need to retain limited records for legal or security reasons.
• Audio Recordings:Recorded practice and mock audio is deleted from Mockly's temporary server storage when processing finishes. Live audio is streamed to OpenAI and is not stored as raw audio by Mockly. OpenAI's provider-side retention is described in Audio, CV & Job-Description Processing above.
• CV & Job-Description Uploads: Temporary backend files are deleted after processing, and any temporary OpenAI file created for a request is submitted for deletion after that request. Extracted information may be retained separately as described below.
• CV Profile Data: Kept until you delete your CV profile, delete your account, or request deletion.
• Job-Description Text: Kept while it remains in your saved preferences or interview-session history, and deleted when the associated data or account is deleted, subject to limited legal and security retention.
• Support Communications: Kept for up to 24 months unless a longer period is required to resolve a dispute, comply with law, or protect the service.
• Subscription Records: Kept for as long as needed for billing, entitlement management, fraud prevention, and legal or accounting obligations.
• Installation Identifier & Security Records: The random installation identifier and derived quota or security records are kept for as long as reasonably needed to enforce allowances, prevent repeated abuse, and protect the service, then deleted or de-identified.

After the applicable retention period, data is securely deleted, anonymised, or de-identified where appropriate.

We use reasonable technical and organisational measures to protect your personal data, including:

• Encryption of data in transit
• Secure authentication methods
• Access controls that limit who can access user data
• Server-side checks for sensitive features
• Security monitoring, debugging, and reliability checks

No system is completely secure. You should use a strong password, protect access to your account, and avoid sharing sensitive information unnecessarily.

Some of our service providers may process data outside the United Kingdom or European Economic Area, including in the United States and other countries where our providers operate.

Where required, we rely on appropriate safeguards such as standard contractual clauses, equivalent protections, or service provider commitments designed to protect personal data.

Depending on your location, you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Request deletion of your personal data.
• Portability: Receive your data in a portable format where applicable.
• Restriction: Ask us to limit how we process your data.
• Objection: Object to certain processing based on legitimate interests.
• Withdraw Consent:Withdraw AI-processing consent in Profile > Help & legal > AI data sharing, or change device permissions in iOS Settings. Withdrawal blocks future transmissions to OpenAI; it does not undo processing that was already completed.

To exercise these rights, contact us at appmockly@gmail.com. We will respond within the timeframe required by applicable law.

If you are based in the UK and are unhappy with how we handle your personal data, you have the right to complain to the Information Commissioner's Office (ICO).

You can delete a registered account from within the Mockly app by going to Profile > Account > Delete account. If you use Mockly as a guest, Profile includes a Delete guest data control for the automatically created guest profile.

When you delete your account, we delete or anonymise personal data associated with your account unless we are legally required to keep certain records, such as limited billing, fraud prevention, security, or legal records.

Deleting your account does not automatically cancel an active Apple App Store subscription. You must manage or cancel subscriptions through your Apple ID subscription settings.

Mockly is not intended for users under the age of 16. We do not knowingly collect personal data from children under 16. If we learn that we have collected personal data from a child under 16, we will take reasonable steps to delete it.

If you believe a child has provided personal data to Mockly, please contact us at appmockly@gmail.com.

Our website may use cookies or similar technologies to operate the site, understand basic usage, and improve the experience. Our app may use SDKs or similar technologies for authentication, subscriptions, diagnostics, analytics, security, and feature delivery.

You can manage cookies through your browser settings. Device-level permissions, such as microphone access, can be managed through your device settings.

Mockly is distributed through the Apple App Store. Apple has its own privacy policy and terms that govern how it processes App Store, payment, and device-related data.

Mockly also uses third-party service providers such as Firebase, Railway, OpenAI, and RevenueCat. These services may process data according to their own privacy policies and contractual commitments. OpenAI receives the personal-data categories described in this policy only after the app obtains your affirmative permission. We require our processors to handle personal data only for the services we request and with the same or equivalent privacy and security protections required of Mockly.

Our app or website may contain links to third-party services. We are not responsible for the privacy practices of websites or services that we do not control.

We may update this Privacy Policy from time to time. If we make material changes, we will update the date at the top of this page and, where appropriate, notify you through the app or by other reasonable means.

Your continued use of Mockly after changes are posted means that you acknowledge the updated policy.

If you have questions about this Privacy Policy or how Mockly handles personal data, contact us: