Privacy Policy

We don’t sell your data, we don’t run advertising, and the app’s optional usage measurement does not capture your answers or tutor messages. What follows is the detail.

The controller is Nocte Ventures Ltd, company number 16579177, 128 City Road, London, EC1V 2NX, United Kingdom. Contact hello@nocteventures.com.

What we collect

• Account — your email address, and a display name if you give one. If you sign in with Apple or Google we receive only your identifier and email from them. Apple’s Hide My Email gives us a relay address instead of your real one, and that works fine here.
• Study data — your role, interview date, self-rated level, answers, streak, saved questions and history. This is the product; it is what syncs between your devices.
• Support — anything you send us by email.

We do not collect your location, contacts, photos, advertising identifier, or any special-category data. We have no cookies for advertising; the public website has no analytics SDK. App account sessions use an essential sign-in cookie.

Why, and on what legal basis

• To provide the service and sync your progress — performance of our contract with you.
• To take payment and meet tax and accounting obligations — contract and legal obligation.
• To keep the service secure and prevent abuse — our legitimate interests.

Local data and account syncing

Your study profile is held on your device. Once you sign in, a copy is stored under your account to sync progress across devices. Account deletion removes that server copy and tutor history. Deleting the app removes local data; cancelling a subscription is a separate action in your Apple Account settings.

Where it is stored

Account and study data are stored in our database hosted by Supabase in Frankfurt, Germany (EU). We chose an EU region deliberately.

Who processes it

• Supabase — database hosting (EU).
• Vercel — website hosting and delivery.
• RevenueCat — subscription state across platforms.
• Apple — for purchases made inside the app, Apple bills you under its own terms.

Where a processor operates outside the UK or EEA, transfers are covered by the appropriate safeguards, such as Standard Contractual Clauses. We do not sell or share your data with anyone else.

The AI tutor

The tutor requires an account and an internet connection. Messages and replies pass through Callback’s server and are stored under your account so you can reopen a conversation. The server sends the question and recent conversation turns to OpenRouter and the model provider, currently DeepSeek. It does not send your name, email, account identifier or study progress as additional model context. Avoid including personal information in the text you send.

App usage measurement

The iOS app uses PostHog, hosted in the EU, to measure screen visits and events such as starting or completing a session. It does not capture question text, your answers, scores, spoken transcripts or tutor messages. Tap-level autocapture is disabled. You can stop collection in Settings → Data → Share anonymous usage. This website does not load PostHog or another analytics SDK.

Spoken answers

Spoken mock answers use Apple’s on-device speech recognition. Callback does not retain the audio. The resulting text is part of your study data; the first use may require the system to download a speech model. Microphone access is optional.

Market data

The app requests public market information from primary sources including central banks, government data services and the SEC. These requests expose ordinary connection information such as an IP address to the host. Opening a source link is governed by that publisher’s privacy policy.

How long we keep it

For as long as your account exists. Delete your account and we remove your personal data and study history within 30 days, except where we must keep transaction records for tax and accounting — normally six years — where applicable. Apple handles App Store billing records under its own policies.

Your rights

You can access, correct, export, restrict, object to, or delete your data. Account deletion is available in the app and takes effect immediately — you don’t have to ask us. For anything else email hello@nocteventures.com and we’ll respond within one month.

If you think we’ve got it wrong you can complain to the UK Information Commissioner’s Office (ico.org.uk) or your local EU supervisory authority. We’d rather you told us first.

Security

Data is encrypted in transit and at rest. Authenticated server endpoints restrict access to the signed-in user’s account and study data. We keep no card details at any point.

Children

Callback is for adults preparing for professional interviews and is not directed at children under 16.

Changes

If we change what we collect or who processes it, we update this page and tell you before it takes effect.

See also our Terms of Service and Refund Policy.