Privacy Policy

1. Who we are

Rehearse is an app for practising difficult workplace conversations out loud with an AI character, and getting feedback on how it went. It is built and operated by Mobil80 Solutions and Services Pvt. Ltd., a company incorporated in India (“Mobil80”, “we”, “us”).

This policy covers the Rehearse app for iPhone and Android, and this website. For personal data processed through Rehearse, Mobil80 is the data fiduciary under India’s Digital Personal Data Protection Act, 2023, and the data controller under the EU and UK GDPR and similar laws: the organisation that decides why and how your data is used.

For questions or requests about your data, email akiltheredr@gmail.com. To raise a complaint, see Contact and grievances.

2. The short version

• We don’t record your voice. Audio is streamed live so the character can answer you, and is never stored.
• Transcripts are deleted after 30 days, and feedback and session records after 90.
• We don’t sell your data, show you ads, or use your conversations to train AI models.
• Nobody you rehearse about sees anything — not your manager, your team or your employer.
• You can delete everything from inside the app, whenever you like.
• A small number of our staff can read a transcript when there’s a reason to, such as helping you with a problem. Here’s exactly who.

This summary isn’t the whole policy. The sections below are.

3. Information you give us

“How work has felt lately” is not a health question. It’s a simple workload signal. We don’t ask about medical or mental health conditions, we don’t treat your answer as health information, and we use it only to adjust the tone and pace of your practice.

You can update your setup answers at any time from Profile → Reset onboarding.

4. Information created when you practise

Your camera is never used. In avatar mode the character’s face is video sent to you; nothing is filmed on your side.

5. Information collected automatically

• Time zone. So a late-night session counts towards the right day on your streak.
• Purchases. If you subscribe or buy credits, Apple or Google tells our subscriptions provider, RevenueCat, what you bought: the plan or pack, the store, transaction identifiers, and when it renews or ends. We never receive your card or bank details.
• Product analytics. Where analytics is switched on in the app, our analytics provider, Layers, receives your account ID, basic device information and in-app events: finishing setup, starting or completing a session (with the scenario, voice or avatar mode and duration), viewing feedback (with your score), opening the plans screen and completing a purchase. On Android, Layers also receives your device’s advertising ID, which we use to understand how people find and install Rehearse. It isn’t sent if you’ve opted out of ads personalisation, and you can reset or delete it at any time in your phone’s settings. On iPhone, Rehearse doesn’t ask for tracking permission, so Layers doesn’t receive your advertising identifier. Layers doesn’t receive your voice, transcripts or email address.
• Technical and security information. When your device connects, our hosting and connection providers process your IP address and basic connection details. Our own server logs record account and session identifiers, timestamps and error details. Email addresses are masked in those logs, and what you say in a session is not written to them.

Permissions the app asks for

Microphone, so you can practise out loud. On Android the app also uses nearby devices (to connect a Bluetooth headset), network status, and a wake lock that keeps the screen on during a call.

Rehearse doesn’t access your camera, location, contacts or photos. The advertising ID used on Android is described under Product analytics above.

6. How we use your information

What we don’t do

• We don’t sell or rent your personal data.
• We don’t show ads, and we don’t use your data to target ads at you.
• We don’t use your conversations, transcripts, feedback or scenarios to train AI models.
• We don’t share your practice with your employer, colleagues or anyone you rehearse about.
• We don’t make decisions about you that have legal or similarly significant effects. Scores exist only to help you practise.

7. How the AI works

The conversation

The character you talk to is an AI voice model provided by OpenAI. During a session your microphone audio is streamed to it live, and it speaks back. It’s set up with the scenario and the character’s personality, and may include your name and relevant setup answers so it fits you. Rehearse works in English; speech in other languages may be ignored.

The face

In avatar mode, Anam turns the character’s speech into a talking face. Anam receives the character’s voice, not yours: your microphone audio isn’t sent to Anam. Voice-only mode doesn’t use Anam at all.

Your feedback

After a session, the transcript is sent to OpenAI to produce your scores and written feedback. It’s generated by AI, so it can be wrong or miss context. Treat it as a practice aid, not a verdict.

Checking your own scenarios

When you write a scenario, its text is checked with OpenAI’s moderation service before it’s saved. If it’s flagged as harmful — for example harassment, threats, self-harm, or sexual content involving minors — we refuse it, point you towards real help where that’s appropriate, and don’t save it.

Training

We don’t use your conversations, transcripts, feedback or scenarios to train AI models. OpenAI’s API terms state that data sent through its API is not used to train its models by default.

The characters and their faces are synthetic. They aren’t real people and don’t represent anyone.

8. Who we share it with

We use these providers to run Rehearse. Each receives only what it needs for its part.

Apple and Google handle app downloads, payments and refunds as independent companies, under their own privacy policies rather than on our instructions.

Other times we may share information

• When the law requires it — for example a valid court order or a lawful request from a government authority.
• To protect people — to prevent fraud or abuse, or to protect the rights, safety or property of our users, the public or Mobil80.
• If our business changes hands — in a merger, acquisition or sale of assets, your data may pass to the new owner, who must continue to honour this policy. We’ll tell you before that happens.
• With your permission — in any other case, only if you ask us to.

9. Who at Mobil80 can see your data

Our team runs Rehearse through an internal admin tool. What someone can see depends on their role:

Staff open a transcript only when there’s a reason to: you asked for help with a session, a session or its feedback failed, or a scenario may break our Terms. Sensitive actions — changing someone’s credits or plan, and suspending, exporting or deleting an account — are recorded in an audit log. Support staff can add internal notes to an account; those notes are deleted with it.

10. How long we keep it

Automatic deletion normally completes within a few days of the dates shown. Server logs are kept to operate and secure the service.

11. Deleting your data

Delete your account from inside the app: Profile → Delete account. It takes effect immediately and removes your profile and setup answers, every session, transcript and piece of feedback, your own scenarios, your credit balance and history, your streak, and your sign-in account.

A few things are kept afterwards, for these reasons:

• Purchase and billing records, for up to 400 days, for accounting and tax and to resolve billing disputes.
• Backups, which expire within 35 days. They exist to recover the service after a failure.
• Aggregate statistics, which don’t identify you.
• If we delete your account for you, for example after an email request, a record of that action in our audit log, including the account’s email address, for up to 400 days.
• What Apple, Google and RevenueCat hold about your purchases, under their own policies.

Deleting your account doesn’t cancel a subscription; cancel it in your App Store or Google Play settings. The full guide, including how to delete by email if you can’t use the app, is on Delete your account.

12. Your rights

Wherever you live, you can ask us to:

• Tell you what we hold about you and how we use it.
• Give you a copy of your data, in a machine-readable file.
• Correct or update it. You can change your setup answers yourself from Profile → Reset onboarding.
• Delete it. You can do this yourself in the app.
• Stop using it for a particular purpose, or withdraw your consent. Because Rehearse works by processing your practice sessions, withdrawing consent for that means closing your account.

In India

Under the Digital Personal Data Protection Act, 2023 you also have the right to have your grievances addressed by us, and to nominate someone to exercise your rights if you die or become unable to. If you’re not satisfied with how we handle a grievance, you can complain to the Data Protection Board of India.

In the EU, UK and Switzerland

You also have the right to object to or restrict our use of your data, and to data portability. We rely on performing our contract with you, your consent, our legitimate interests in running and securing the service, and our legal obligations. You can complain to your local data protection authority.

In the United States

We don’t sell your personal information or share it for targeted advertising. Depending on your state, including California, you have the right to know about, access, correct and delete your personal information, and we won’t treat you differently for using those rights.

How to make a request

Email akiltheredr@gmail.com from the address you sign in with, so we can confirm it’s you. We may ask for more information if we can’t verify a request. There’s no charge, and we aim to reply within 30 days.

13. Where your data is processed

Mobil80 is based in India, but Rehearse runs on servers in the United States (Amazon Web Services, N. Virginia), and OpenAI and LiveKit process session data there too. Some of our other providers may process data in other countries.

So your data will usually be transferred out of the country you’re in. We choose providers that commit to protecting it, your data is encrypted in transit and at rest, and we make these transfers as permitted by the laws that apply to us, including India’s DPDP Act.

14. How we protect it

• Data is encrypted in transit and stored encrypted at rest.
• There are no passwords to steal: you sign in with a one-time code sent to your email.
• Staff access is limited by role, and sensitive actions are logged.
• API keys and other secrets are held in managed secret stores, not in our code.
• Transcripts delete themselves, so old conversations don’t pile up.

No system is perfectly secure. If a breach affects your data, we’ll tell you and the relevant authorities as the law requires.

15. Children

Rehearse is for adults: you must be 18 or older to use it. We don’t knowingly collect personal data from anyone under 18, and if we learn that we have, we delete it. If you think a child is using Rehearse, email akiltheredr@gmail.com.

16. This website

This website doesn’t use analytics, advertising or tracking, and doesn’t set cookies.

• It’s hosted by Vercel, which keeps standard request logs, including your IP address, to deliver and secure the site.
• Its fonts come from Google Fonts, so Google receives your IP address and browser details when a page loads.

Links to the App Store, Google Play or your email app take you to services with their own privacy policies.

17. Changes to this policy

We’ll update this policy when Rehearse or the law changes, and change the date at the top. If a change materially affects how we use your data, we’ll tell you in the app before it takes effect.

18. Contact and grievances

To raise a grievance, email our Grievance Officer with what happened and what you’d like us to do. We’ll acknowledge it and respond within the time the law requires.