Privacy

Who is responsible for your data

Ryan Nyathi, trading as Mock Grade AI, 35 Harvill Road, Sidcup, United Kingdom, is the data controller for Mock Grade AI. For anything about this policy or your data, email hello@mockgradeai.com.

What we collect

• —Your account. Email address, a hashed password, and your name if you give one. Optionally a phone number, location, university, career goals and a short bio, if you choose to fill them in on your profile — the service works without them.
• —Your CV. We store a redacted version of the text and the skills and experience we extract from it. The original text is never stored, and the filename is replaced with a generic one because real CV filenames usually contain someone’s name.
• —Job descriptions you paste in, and the questions generated from them. Generated questions are private to your account, because they are derived from your CV.
• —Your answers. A redacted transcript of what you said, how long you spoke, and the scores, feedback and voice measurements produced from it. Reports keep a short excerpt of an answer, not a second full copy.
• —Interview recordings, when video recording is switched on. These are stored in a private bucket and deleted automatically after 24 hours.
• —Delivery signals — blink rate, how steady your posture was, and two coverage figures. These are computed on your own device from the camera feed; no image, no video and no facial landmark is sent anywhere. Five numbers are stored.
• —Billing. A Stripe customer reference and what you bought. Your card details go to Stripe and never reach us.

Your audio is never stored. In a recorded interview it is held briefly in memory so it can be transcribed, then deleted; in practice mode it is transcribed during the request and discarded. Our logs contain no request bodies, transcripts, prompts, model outputs, email addresses or filenames.

Redaction, and why it comes first

Before any CV text or transcript is written to our database, and before it is sent anywhere else, we replace email addresses, phone numbers, URLs, LinkedIn and GitHub handles, street addresses, postcodes, national ID patterns and dates of birth with placeholders such as [EMAIL] and [PHONE].

This happens between parsing and the first write, which is what makes it meaningful: the unredacted text is never persisted and is never sent to an AI provider.

Why we are allowed to use it

• —To perform our contract with you — creating your account, generating questions, transcribing and scoring your answers, building your reports, and taking payment.
• —Our legitimate interests — keeping the service secure, preventing abuse and enforcing usage limits, and understanding failures well enough to fix them.
• —Your consent — your browser asks before the microphone or camera is used, and you can refuse or withdraw it at any time in your browser. Refusing the camera does not stop you doing an interview.
• —A legal obligation — keeping records of sales for tax purposes.

Automated scoring

Your answers are assessed by an AI model against a fixed rubric. The rubric judges the content and structure of an answer, and explicitly excludes grammar, accent, fluency, vocabulary and every protected characteristic. Blink rate and posture are shown to you but are never part of a score and never appear in a prompt.

This is practice feedback, not a decision about you: no employer receives it, and it has no legal or similarly significant effect. It can be wrong, and you are welcome to disagree with it — if you want a score looked at by a person, email us.

Who else sees it

We do not sell your data, we do not share it with employers or recruiters, and it is not used to train AI models. We use a small number of providers to run the service, and they may only process data on our instructions:

• —OpenAI — redacted CV and job description text, question text and redacted transcripts for generation and scoring; your speech for transcription; and, in a live Mock Interview, your speech as you speak it so the interviewer can respond.
• —Cloudflare R2 — interview recordings, in a private bucket reachable only through short-lived links, deleted after 24 hours.
• —Stripe — payments and subscriptions.
• —Our email provider — your email address and a verification or password-reset link.
• —Railway and Netlify — hosting for the application, the database and the website.

Some of these providers are based in the United States, so your data may be transferred outside the UK. Those transfers are covered by the UK International Data Transfer Addendum or Standard Contractual Clauses in our agreements with them.

We may also disclose data where the law requires it, or to establish or defend a legal claim.

How long we keep it

• —Account details: until you delete your account.
• —Interview data — transcripts, analyses and reports: 180 days, then deleted automatically.
• —Video recordings: 24 hours, then deleted automatically. You can delete one immediately from your results page.
• —Audio: never stored.
• —Sales records: six years, because tax law requires it.

Deleting your account removes your CV, job descriptions, generated questions, answers, analyses, reports and sessions. You can do it yourself, at any time, from your profile.

Cookies and local storage

We use no advertising or analytics cookies, and there is no third-party tracking on this site — no Google Analytics, no advertising pixels, no session recording.

The site does store a few things in your own browser, all of them necessary for it to work: your sign-in token and refresh token so you stay signed in, basic account details for display, and the target role and interview styles you last chose. These stay on your device, are not sent to anyone else, and are cleared when you sign out. Because they are strictly necessary for a service you asked for, we do not ask for consent to them — but if we ever add anything that is not, we will ask first.

Your rights

You have the right to access your data, to have it corrected, to have it erased, to restrict or object to how we use it, and to receive a copy in a portable format. Deleting your account is available directly in the app; for anything else, email hello@mockgradeai.com and we will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk, though we would rather you told us first so we can put it right.

Children

Mock Grade AI is not intended for under-16s, and you must be 18 to buy anything. If you believe a child has given us personal data, email us and we will delete it.

Changes

If we change this policy we will update the date at the top of the page, and tell you by email before any material change takes effect. See also our Terms and Refunds policy.