Privacy Policy

The data controller responsible for your personal data is:

Mugen Software SIA
Registration No. 40203547797
Matisa iela 61A - 19, Riga, LV-1009, Latvia
Email: support@mugenapps.io

Mugen Software SIA ("we," "our," or "us") operates the Rehearsy mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our App, in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable data protection laws.

By using the App, you acknowledge the collection and processing of information as described in this Privacy Policy. If you do not agree, please do not use the App.

Account Information. When you sign in using Apple Sign-In or Google Sign-In, we receive your name, email address, and a unique account identifier provided by the authentication provider. If you use Sign in with Apple and choose to hide your email, we receive only the relay email address Apple provides.

Profile Information. You may provide additional information such as your target role, target companies, and interview date to personalize your experience.

Interview Session Data. When you conduct a mock interview, we collect:

• Audio recordings of your responses (processed in real time and not permanently stored as audio files)
• Transcriptions of your responses generated from audio
• AI-generated interview questions and follow-up questions
• AI-generated feedback and evaluation scores
• Speech metrics such as speaking pace and filler word frequency

Usage and Analytics Data. We collect anonymized usage data through Firebase Analytics / Google Analytics 4, including screens visited, features used, session duration, and app performance metrics.

Crash and Diagnostic Data. We use Firebase Crashlytics to collect crash reports and diagnostic information to improve app stability.

Subscription Information. If you subscribe to Rehearsy Pro, payment processing is handled by Apple (App Store) or Google (Google Play). We receive confirmation of your subscription status through RevenueCat but do not have access to your payment card details or billing information.

We process your personal data on the following legal bases under Article 6 of the GDPR:

• Performance of a contract (Art. 6(1)(b)): Processing necessary to provide the App's features, including conducting AI mock interviews, generating feedback, and managing your account and subscription.
• Legitimate interests (Art. 6(1)(f)): Analytics and crash reporting to improve the App's quality, performance, and user experience. Our legitimate interest is balanced against your rights and does not override them.
• Consent (Art. 6(1)(a)): Where you have given explicit consent, such as opting in to practice reminders and notifications. You may withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)): Where processing is necessary to comply with applicable laws or regulations.

• Provide the Service: To conduct AI mock interviews, generate personalized feedback, and track your preparation progress.
• AI Processing: Your voice recordings are sent to our secure servers (via Firebase Cloud Functions) and processed using OpenAI's speech-to-text (Whisper), language model (GPT), and text-to-speech services to power the interview experience. Audio is processed in real time and is not stored as audio files after transcription.
• Personalization: To recommend relevant interview packs and tailor questions based on your target role and companies.
• Analytics: To understand how users interact with the App, identify issues, and improve our features.
• Notifications: To send practice reminders and interview countdown notifications you have opted into.
• Customer Support: To respond to your inquiries and resolve issues.

We do not sell your personal data. We share data only with the following categories of service providers (data processors), solely to operate the App:

• Google / Firebase: Authentication, data storage (Firestore), cloud functions, analytics, and crash reporting.
• OpenAI: Audio transcription, AI dialogue generation, text-to-speech, and interview evaluation. Data sent to OpenAI is processed per their API data usage policy and is not used to train their models.
• RevenueCat: Subscription management and entitlement verification.
• Apple: Authentication (Sign in with Apple) and payment processing (App Store).
• Google: Authentication (Google Sign-In) and payment processing (Google Play).

We may also disclose your information if required by law, regulation, or legal process, or to protect the rights, property, or safety of Mugen Software SIA, our users, or others.

Your personal data may be transferred to and processed in the United States and other countries outside the European Economic Area (EEA) where our service providers operate (including Google, OpenAI, and RevenueCat).

Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, including:

• European Commission adequacy decisions for the recipient country
• Standard Contractual Clauses (SCCs) approved by the European Commission
• The EU-U.S. Data Privacy Framework, where applicable

You may request a copy of the safeguards in place by contacting us at the email above.

Your data is stored in Google Cloud / Firebase infrastructure with encryption at rest and in transit. We implement industry-standard security measures including:

• Firestore security rules ensuring users can only access their own data
• Authenticated API calls through Firebase Cloud Functions
• Rate limiting on API requests to prevent abuse
• No API keys or secrets stored in the client application

We retain your account and interview session data for as long as your account is active and as necessary to provide the service. Interview transcripts and feedback are stored to enable your progress tracking features.

When you delete your account (available in Settings), we delete your profile, interview sessions, and associated personal data from our systems within 30 days. Some anonymized, aggregated analytics data may be retained as it cannot be linked back to you.

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access (Art. 15): You may request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16): You may request correction of inaccurate or incomplete personal data.
• Right to Erasure (Art. 17): You may request deletion of your personal data. You can also delete your account directly through Settings > Delete Account.
• Right to Restriction (Art. 18): You may request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability (Art. 20): You may request to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object (Art. 21): You may object to the processing of your personal data based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at support@mugenapps.io. We will respond within 30 days.

Right to Lodge a Complaint. If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija), Elijas iela 17, Riga, LV-1050, Latvia, www.dvi.gov.lv, or with your local supervisory authority.

The App is not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will promptly delete it.

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the App or by other appropriate means. The "Effective Date" at the top indicates when the policy was last revised.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Mugen Software SIA
Matisa iela 61A - 19, Riga, LV-1009, Latvia
Email: support@mugenapps.io