Practice Room — Privacy Policy

Last updated: 18 September 2026

Practice Room lets you rehearse difficult workplace conversations with an AI counterpart and get feedback. This policy describes exactly what happens to what you type. The short version: no analytics, no ads, nothing sold — conversations are processed to generate replies and feedback, then gone from our side. What you keep, you keep on your own phone. An account is optional and only needed to subscribe.

What we process, and what we keep

• Your account (optional): you can use the app without one — the free sessions need no sign-in. Signing in with Google is required only to subscribe. When you do, we receive your name and email address from Google and store them on our server along with an account identifier (a random UUID) and your Google user id. We use them to recognise you when you sign in again, to show your name in the app, and to attach your subscription to you. We keep them until you delete your account, which you can do at any time — see Deleting your account. We never receive your Google password.
• Your subscription: if you subscribe, the purchase is recorded by Google Play and by RevenueCat under your account identifier, so the same subscription works after a reinstall or on another phone. We see whether a subscription is active, never your payment details.
• Conversation messages, debriefs, and reply suggestions are sent to our server and forwarded to our AI provider to generate the counterpart's responses and your feedback. We do not store them on our server. They exist there only for the duration of the request.
• Scenarios you create ("Rehearse your own conversation"): the description you write is used to generate a practice scenario, which is stored on our server for up to 7 days under a random identifier, with no account or identity attached, then deleted. The app offers a name-swap tool so real names need never leave your device. If you paste real messages instead of describing the situation, those messages — including the other person's words — are sent the same way and live inside that same generated scenario for up to 7 days, then deleted with it.
• Pointers for a meeting: the description you write of a conversation you are about to have is sent to our server once, to write the sheet, and is not stored — it exists there only for the duration of the request, like a reply. The sheet itself is not kept on our server either; it is on your phone only while the screen is open.
• People you save (a paid feature): the list of colleagues you describe — name, role, tone, a note — is kept on your phone only. When you pick one to rehearse with, those fields are sent once to our server to write the scenario around them, and they sit inside that generated scenario for up to 7 days, unlinked to your account, then go with it. The field you enter on "Rehearse your own conversation" is remembered on your phone so you need not retype it.
• Voice input (optional, the mic button): what you say is turned into text by your phone's own speech recognition service — on Android usually Google's, in a browser the browser's — which may send the audio to that provider under its own privacy policy. We receive only the resulting text, exactly as if you had typed it, never the audio. The microphone is used only while the mic button is active. The same speech service runs Practise the moves, the spoken drill after a debrief — no new data, same disclosure.
• Practice reminders: the app registers this install with OneSignal when it starts, which is what makes a reminder possible at all. OneSignal gives the install a subscription id, holds the notification token your phone's operating system issues, and records the device details its SDK collects (model, operating system version, app version, language, time zone, and the country your IP address resolves to). We add four facts of our own, so a reminder only goes to someone it makes sense for and can say something true: how many rehearsals this install has used, whether you subscribe, the name of the one dimension your most recent debrief scored lowest (one of Clarity, Evidence, Ownership, Warmth or Path; absent if that debrief scored the top level on everything, since there is then nothing to name), and the day that debrief was scored. That is so a reminder can say "Ownership was your lowest last time" rather than something generic. If you are signed in, your account identifier is attached, so two of your devices are one person rather than two. No message, scenario title, character name, transcript or numeric score is ever sent to OneSignal, and deleting your last saved debrief removes the dimension and date. Nothing is delivered to you unless you allow notifications, and turning them off in your phone's settings stops them.
• On your device only: your free-session count, settings, your past rehearsals, the scenarios you wrote, the people you saved and your remembered field. When a rehearsal is scored, the app keeps the transcript and its debrief on your phone (the newest 50) so you can reread them before the real conversation, along with how ready you said you felt before and after it, if you answered. They never leave the device, are excluded from Android's cloud backup, and go when you delete them in the app, use Clear rehearsals on this device, delete your account, or uninstall the app. Signing out does not remove them.

Who processes data on our behalf

• Cloudflare hosts our server (standard server logs: IP address, request URL — not message content).
• Anthropic provides the AI model. Content sent to its API is not used to train models and is retained by Anthropic only per its standard API data policy.
• Google Play and RevenueCat handle purchases. We never see your payment details; RevenueCat processes purchase tokens against your account identifier to unlock the paid tier.
• Google Sign-In, if you choose to sign in: Google tells us your name, email address and Google user id, under Google's privacy policy.
• OneSignal delivers practice reminders: see OneSignal's privacy policy. On Android the notification itself travels through Google's Firebase Cloud Messaging.
• Google (speech recognition on Android), when you use the mic: see Google's privacy policy. In a browser, the browser's own speech service applies.

What we don't do

No advertising. No analytics or tracking SDKs (RevenueCat, which handles purchases, keeps subscription statistics; OneSignal, which sends practice reminders, records whether one was delivered and opened). No sale or sharing of your data. No audio recording by the app: dictation is done by your phone's speech service, which may send audio to its provider. No use of your conversations for training AI models. No account is needed to practise — only to subscribe.

Your choices: deleting your data without deleting your account

You can use the free sessions without ever signing in. If you have signed in, you can sign out or delete your account from the Account screen — see Deleting your account. Signing out leaves your saved rehearsals on the phone; it only ends the session on this device and detaches your subscription from it. To remove what is stored on the phone, use Clear rehearsals on this device on the Account screen — it erases your saved debriefs, the scenarios you wrote, the people you saved, your remembered field and any unfinished conversation, and leaves your account and subscription untouched (useful on a shared phone) — or delete your account, which does both. A scenario you created expires by itself within 7 days. Any saved rehearsal can be deleted from its debrief screen. Sensitive advice: the app is a rehearsal tool, not a channel for confidential information — change names and leave out details you wouldn't want processed.

Deleting your account

You can delete your account and everything stored under it at any time.

• In the app: open the Account screen from the avatar in the Home header, tap Delete account, and confirm.
• Without the app: email practiceroomteam@gmail.com from the address you signed in with, asking us to delete your account. We will action it and confirm by reply.

What is deleted: your account record on our server — name, email address, Google user id, account identifier — and the subscription record held against it. Deletion is immediate and permanent; we keep no copy. At the same time we ask RevenueCat to delete the customer record it holds under your account identifier; if that request fails for any reason, email us and we will do it by hand. Google Play keeps its own purchase record for as long as its policies require. On the phone you delete from, the app also removes your saved debriefs, the scenarios you wrote, the people you saved, your remembered field and any unfinished conversation. Rehearsals on any other phone you used stay there until you clear them or uninstall. Scenarios you created were never linked to your account and expire from our server on their own within 7 days.

Deleting your account does not cancel your subscription. Purchases are held by Google Play, not by us. Cancel it yourself at Google Play subscriptions, otherwise it keeps renewing.

Security

All traffic between the app, our server, and our processors is encrypted in transit (TLS). Message content is not stored on our server, so there is no message store on our side to secure at rest. Account records live in our hosting provider's managed database and are reachable only by the app's own server, using a signed token issued to your device when you sign in. On your phone, saved rehearsals sit in the app's private storage, which other apps cannot read, and are kept out of cloud backups.

Your rights

If you have never signed in, we hold nothing linked to your identity, so there is nothing to access, correct or delete on our side. If you have an account, you can ask us to access or correct what we hold, and you can delete it outright — in the app or by email, as described under Deleting your account. Write to us at the address below and we'll respond.

Children

Practice Room is a workplace tool and is not directed at children under 13.

Contact

Questions: practiceroomteam@gmail.com

Changes

If this policy changes, the new version will be posted at this address with an updated date.