Privacy Policy
Colloqa is a rehearsal tool, which means you tell it things you have not said out loud yet. This page explains exactly what happens to that, in plain language rather than legal boilerplate.
Last updated
Who we are
You can reach Colloqa about anything on this page at support.colloqa@gmail.com. For data-protection purposes we are the controller of the information described below.
What we collect
Your account
Your email address, and the sign-in method you used. You can also start a session without creating an account at all — in that case we hold an anonymous identifier and nothing that identifies you personally.
What happens inside a session
This is the sensitive part, so we are specific about it. We store the context you set up (the role you are interviewing for, a job posting you paste, the situation you describe), the text of what you said, the AI counterpart’s replies, the feedback generated at the end, and your skill scores over time. That history exists so you can reopen a past session and so progress can be tracked between them.
Your voice
We do not keep recordings. When you speak, the audio is recorded in your browser and sent for transcription. We store the resulting text; the audio itself is not written to any database or file storage of ours and is not retained after transcription.
Usage and technical data
- How much you have used — sessions today, minutes of voice, and your subscription status — because the free tier has daily limits.
- A two-letter country code, derived from your connection when you first use the app. We do not store your IP address ourselves, though our hosting provider processes it to serve the page.
- Records of which transactional emails we sent you, and whether you unsubscribed.
Analytics on this website and in the app
We measure how the site and product are used — which pages are opened, which buttons are clicked, where people drop out of a flow — under a random identifier stored in a cookie, not under your name. We also use session-replay and heatmap tooling that records page interactions such as clicks, scrolling and mouse movement. We do not put your email, your name, or the text of your answers into analytics events.
Why we use it
- To provide the product. Generating questions, replies, feedback and scores is the service itself — without your session content there is nothing to respond to.
- To enforce the free tier. Daily limits need a count of what you have used.
- To keep the service working and honest. Anti-abuse checks on sign-up, error diagnosis, and understanding which parts of the product fail people.
- To email you about your account — a welcome message, and a reminder if you left something half-finished. Every one of these has an unsubscribe link.
Where the GDPR applies, we rely on performance of our contract with you for the first two, and on our legitimate interest in running and improving a working product for the rest. Where consent is the right basis for analytics in your jurisdiction, you can withdraw it by appending ?analytics=false to any page URL, which disables the analytics tooling for that session.
Who else processes it
We are a small product and we do not build speech recognition or language models ourselves. The services below process data on our behalf, under their own terms. We do not sell your data, and we do not share it with advertisers.
Hosting & infrastructure
| Service | What it does |
|---|---|
| Supabase | Hosts the account database and handles sign-in. Stores your email, session transcripts, feedback and subscription status. |
| Vercel | Hosts this website and the app, and serves them through its CDN. Processes connection metadata such as IP address in server logs. |
| Cloudflare | Runs the Turnstile anti-abuse check on sign-up and supplies the country code attached to your account. |
AI, speech and content
| Service | What it does |
|---|---|
| Google Cloud Speech-to-Text | Converts the audio of what you say into text so the AI can respond to it. Audio is sent for transcription and not retained by us. |
| Google Gemini | Generates the AI counterpart’s questions and replies, your feedback and your skill scores. Also transcribes longer voice answers. |
| Google Cloud Text-to-Speech | Generates the spoken voice of the AI counterpart from the text it produces. |
| Lovable AI Gateway | Routes our requests to the AI models above. Prompts and session content pass through it in transit. |
| Jina Reader | Fetches and cleans the text of a job posting when you paste its URL, so the AI can tailor questions to that role. |
| Service | What it does |
|---|---|
| Resend | Delivers transactional email — the welcome message, and reminders if you stop mid-way. |
Analytics
| Service | What it does |
|---|---|
| Amplitude | Product analytics: which pages and steps are used, under a random identifier rather than your name. |
| Microsoft Clarity | Records anonymised session replays and heatmaps of how pages are used, so we can find broken layouts. |
| Google Analytics | Aggregate traffic measurement — where visitors arrive from and which pages they open. |
Payments. We do not currently charge for subscriptions, and no payment processor is involved. When paid plans go live this page will name the processor before any card details are collected.
Where your data is handled
The services listed above are based largely in the United States and the European Union, and we handle your data from outside the European Economic Area. That means your information may be processed outside the country you live in. Where those transfers are covered by the GDPR, they rely on the safeguards each provider maintains — most commonly the European Commission’s standard contractual clauses.
How long we keep it
Session history and your account stay until you delete them. Usage counters reset daily and are not kept as a long-term record. Voice audio is not retained at all. Analytics data is held under the retention periods of the tools listed above.
Your rights and how to use them
Deleting everything is built into the product. In your account settings inside the app you can delete your account, which removes your sessions, transcripts, feedback and scores along with it. This is immediate and it is not reversible.
You can also ask us for a copy of what we hold about you, ask us to correct it, ask us to restrict or stop a particular use, or object to processing we base on legitimate interests. Write to support.colloqa@gmail.com and we will answer within 30 days. If you are in the EEA or the UK and you think we have handled this badly, you have the right to complain to your national data protection authority.
Age
Colloqa is built for people preparing for work and personal conversations and is not intended for children. Do not use it if you are under 16. If we learn that we hold data from someone under that age, we will delete it.
Changes to this policy
When the product starts doing something materially different with your data — a new processor, paid plans going live — we update this page and move the date at the top. Significant changes will also be emailed to registered users.
See also our Terms of Service.