Privacy & AI notice
Data minimisation by design: the less we collect, the less can go wrong.
- What we collect
- Only your name and institutional email (from your login), the scenario you practised, your answer transcript, and derived scores. In this PoC everything is synthetic and stored only in your browser (localStorage).
- Your video
- Your camera feed is analysed inside your browser. The recording is held only in browser memory so you can replay it, and is discarded when you leave the session page. Video never leaves your device.
- Your voice
- When you answer by speaking, your answer audio is recorded in your browser and sent to Google Cloud Speech-to-Text in Singapore (asia-southeast1) for transcription only. The audio is not stored: this app keeps it in memory only while it is transcribed (no logs, no file or Blob storage) and does not opt in to Google's audio data logging. Only the text transcript and word timings (used for pace, pauses and filler words) are kept, in your browser.
- Interviewer voice
- The interviewer's speech is generated by Google Cloud Text-to-Speech in Singapore from the interviewer's own words. None of your data is sent for this. If it is unavailable, your browser's built-in voice is used instead.
- Browser speech recognition
- Optional and off by default. If you turn on live browser captions, Chrome sends your audio to Google's speech service under Google's own terms, outside this app's control. Leave it off to keep transcription in Singapore only.
- Non-verbal analysis
- Face and pose landmarks are computed on-device at about 5 frames per second. Only aggregated numbers (e.g. eye-contact %, posture score) are kept — no images or landmarks are stored or sent.
- AI processing
- By default the PoC uses a local rules engine. If an LLM provider is enabled by the operator, only pseudonymous question/answer text is sent (no names, emails or IDs) and nothing is retained by the provider after processing.
- AI training
- Your data is not used to train AI models — ours or any provider's.
- Retention & deletion
- PoC data stays in your browser until you delete it. In production, retention periods follow your institution's policy, with encryption in transit and at rest, and export/deletion at contract end.
- Ownership
- Your institution owns all data generated on the platform.
- Your choices
- You can withdraw consent or delete all your local data at any time below.