Privacy Policy
Last updated: October 23, 2026
Reflog Consulting, LLC ("we") operates Ready for My Interview. We use your information to provide interview practice. This policy explains what we collect, who receives it, and what happens when you delete a Case.
1. Information we collect and use
- Sign-in details: Your email address, sign-in identifier, and name if provided. Clerk handles sign-in.
- Case content: Documents you choose to add, their text and summaries, the Dossier, practice answers, transcripts, and Grades. Documents are optional.
- Debrief and review: If you choose to tell us about your real interview, we keep the outcome, field office, month, what the officer asked, your review, the name you want shown, and whether you let us publish the review. Only you see your Debrief, even on a shared Case.
- Sharing details: The invited person's email, identity, and assigned Speaker. These control access to a shared Case.
- Billing records: Purchase details, payment identifiers, rounds, and service usage. Stripe handles card details. We do not store full card numbers.
- Security and support records: Access events, technical logs, and messages you send to support.
We use this information to run practice, read Documents, produce feedback, manage access and billing, provide support, and prevent misuse. Your earlier practice answers can guide later questions and feedback on the same Case. They are your statements, not verified facts.
We use your Debrief to improve practice questions and topic pages. We publish your review only if you check the box that allows it, and only with the name you choose. We never publish your Debrief text, your documents, or your full name. If you take back permission, we remove the review from the site.
We do not sell your Case content or use it to train our own models. OpenAI's API does not use content for model training by default unless the account opts in; Google Document AI does not use your Documents to train its models. No-training rules do not mean zero retention. Temporary processing caches and technical records are separate from stored Case content.
2. Voice and AI processing
Practice uses live voice. When you start, microphone audio, the available Dossier, and earlier practice answers go directly to OpenAI for a spoken conversation. Officer speech is AI-generated. We keep the resulting transcript with your Practice Session, not the original audio.
If you speak your Debrief or review, the recording goes directly to OpenAI to turn speech into text. We keep only the text.
Document text, the Dossier, and practice answers go directly to OpenAI for questions, summaries, comparisons and feedback. Google Document AI reads PDFs and images when you build a Dossier.
| Provider | Purpose | Content retention |
|---|---|---|
| OpenAI | Text and live voice, including transcription and generated speech; Debrief dictation | No API training by default unless the account opts in. Abuse-monitoring content can generally remain for up to 30 days, or longer when required by law or reasonably necessary to protect services or others from harm. Retention depends on the endpoint and feature: the current policy lists no application state for /v1/realtime, and no abuse-monitoring or application-state retention for /v1/audio/transcriptions. Our text chat requests set store:false; this does not disable abuse monitoring or every processing cache |
| Google Document AI | Read PDFs and images | Our synchronous requests process Document content in memory, not on disk; request metadata is temporarily logged |
We do not promise Zero Data Retention or a universal 30-day deletion deadline for every provider copy. OpenAI's special retention controls require account approval and configuration; this policy does not claim we have them. Endpoint and feature exceptions can apply.
Earlier versions used Cerebras, xAI and OpenRouter, with an optional Deepgram speech fallback. These are no longer active processing routes. Retiring a route does not erase any copies from earlier processing; applicable retention, rights and deletion obligations still apply to those copies.
Processing can occur outside your home country, including in the United States and on Cloudflare's global network. Case deletion does not immediately erase copies a provider holds during its stated retention period.
3. Storage and other service providers
Cloudflare hosts the app and stores your Documents, their text and summaries, the Dossier, practice answers, feedback, Case details, and billing records.
Other providers are Clerk for sign-in, Stripe for payments, and Proton Mail for support email. These providers process the information needed for those services under their own policies.
Data is encrypted in transit and in Cloudflare storage. The app records when Documents are added, downloaded, or deleted, and when a Case is deleted. Staff may access information when needed for support, security, or legal obligations. Do not send your Packet, immigration documents, or card details by email.
Clerk uses cookies to keep you signed in. The app uses browser storage for preferences, the selected Case, notice settings, and a pending invitation. Diagnostics stay in page memory and are not saved in browser storage. The app clears them when you change User or Case. You can clear browser storage through your browser settings, but you may need to sign in and choose your preferences again. Clearing browser storage does not delete server-held Case content.
The public pages and the signed-in app use Cloudflare Web Analytics to count visits and page loads. It sets no cookies and does not identify you. It sees the address of each page you open, which holds only random identifiers, never your answers or documents.
On your first visit, we set one cookie for 30 days. It holds the name of the site that linked you here, such as a search engine, and the first page you opened. It does not hold the full address of the linking page. If you sign up, we save these two values with your sign-in identifier so we can learn which pages help people. Deleting a Case does not delete them.
4. Shared Cases
Sharing gives both people access to all past and future Documents, the Dossier, Practice Sessions, and Grades. Both can manage Documents and build the Dossier. Each person can change or delete only their own Practice Sessions.
Only the Case creator can delete the whole Case or remove the invited person's access. The invited person can leave. Leaving or removal ends access immediately, including practice in progress, but does not erase past contributions. They remain until the Case is deleted or expires. The invited person's personal Case stays separate.
We show these consequences before an invitation is created and before it is accepted.
5. Retention and deletion
A Case expires 180 days after its last qualifying activity. Adding or removing a Document, ending a Practice Session with at least one answer, making a purchase, or explicitly extending storage resets that period. Signing in or opening the dashboard does not reset it.
Home and Settings show the expiry date and highlight it during the last 30 days. This is an in-app warning, not an email reminder.
The creator can delete the Case in Settings. Access ends when a Case expires. Daily cleanup runs at 06:00 UTC, so removal of expired content can take up to the next daily run. Failed removal takes longer while we retry. Case deletion removes Documents, their text and summaries, the Dossier, transcripts, and Grades from active app storage. Deleting a Practice Session removes its answers from the context used by later sessions.
You can delete your Debrief at any time on the Debrief screen. Case deletion and expiry also delete it. If we published your review, we keep a copy of the review, the name, and the date you allowed it, as a record of your permission. We remove the published review when you ask, and keep the record only as long as needed to show you allowed it.
If removal cannot finish, the app tells you that the content is no longer available and that removal is pending. Access stays ended while we retry cleanup. We keep deletion records with Case, Document, Practice Session, and User references and dates until cleanup finishes. These records do not contain Document text or practice answers.
After cleanup finishes, we keep separate deletion references for 35 days, until the next daily cleanup. They contain Case and resource identifiers, session numbers, and dates, not Document text or practice answers. They help prevent deleted content from returning during recovery. Recovery or unfinished cleanup can keep these references longer. Records for unfinished removal stay until cleanup finishes.
Deleting a Document does not rebuild the Dossier. The officer uses the last Dossier until you update it. The app shows when it is out of date.
Some records are separate from Case content:
- Security records: Our app's access-event log keeps identifiers, actions, and dates for 90 days to investigate misuse or incidents. Daily cleanup removes older events. This can add up to one daily run to the period. It does not contain Document text or practice answers. Separate Cloudflare operational logs follow its published log limits, which depend on the plan.
- Product-step records: We record the date you first reach each step, such as sign-up, first purchase, or first Practice Session. They contain your User identifier, the step name, and the date, not Document text or practice answers. They stay after Case deletion, like billing records.
- Billing and sign-in records: These can remain for payment records, security, and legal obligations. Deleting a Case does not delete your sign-in, erase unused purchased rounds, or issue a refund.
- Support email: Messages and replies remain in our support mailbox unless separately removed.
- Recovery copies: Summaries, the Dossier, Case details, and Practice Session state can remain in recovery history. Cloudflare publishes native recovery windows of up to 30 days, depending on the service and plan. We have not verified every account-specific window or the inventory of separate exports. This is not a guarantee that every provider-held copy is erased within 30 days.
Deletion does not instantly erase these separate records or copies held by service providers. During recovery, we keep app access blocked. We reapply recorded Case, Document, and Practice Session deletions before making restored data available. We also reconcile current sharing permissions. We do not reopen access when deletion evidence or cleanup is incomplete.
6. Your choices and requests
You can practice without Documents. You can manage your Documents, delete your own Practice Sessions and Debrief, leave a shared Case, or delete a Case you created.
For access, correction, deletion, or other privacy requests, email support@readyformyinterview.com. You can make a request even if you do not use the app. If you use the app, write from your sign-in email. We need to verify identity and authority before providing information or changing records. Tell us what you need; do not attach immigration documents, recordings, or card details. We handle requests as required by applicable law, including any rights that apply in your location.
If we decline your request, you can appeal by replying to our response or emailing the same address. Include the request reference and tell us why you want us to review the decision.
The service is for adults. Documents may contain information about family members, including children. Add only information you have the right to use for your preparation.
7. Changes and contact
We update the date when this policy changes. We will notify you of material changes in the app or by email, as appropriate, and give any further notice required by law. For privacy questions, email support@readyformyinterview.com.