Privacy Policy

In this policy, "we", "us" and "our" mean Comingwave trading as InterviewTraining.ai. We handle your personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

This policy tells you what we collect, why we collect it, and how we use, share and protect it. It also explains your choices and your rights.

You can contact us about privacy at support@interviewtraining.ai. We are based in Sydney, NSW, Australia.

We collect only what we need to run the service.

Account details

If you sign up with email, we collect your name, your email address and a password. If you sign in with Google, we receive your name, your email address and a Google account identifier. Passwords are handled by Firebase Authentication, so we cannot read your password.

Your trade, country and English level

You tell us your occupation, your destination country and your English level. We use these to show you the right questions and to set the answer timer.

Your practice answers

We keep your practice history, including which questions you answered and when. For spoken and typed answers, we keep the text of your answer. We call this text the transcript.

Scores and AI feedback

We keep the score and the feedback that the AI produces for each marked answer, and your results in multiple-choice practice.

Question usage and plans

We keep a record of how many marked questions you have used and how many you have left, your plan and its dates.

Payment records

Purchases are sold by Red Migration FZC (United Arab Emirates) and paid through Stripe. We keep a record of what you bought, when, and the amount. We never see or store your full card number.

Microphone and camera

When you answer out loud, your browser's speech recognition turns your speech into text. In Google Chrome this feature is provided by Google, so Google processes the audio to produce the text. Other browsers may use their own speech service. We store the text transcript only. We never store an audio recording of your voice.

The microphone starts only after the interviewer has finished asking the question. If you block the microphone, you can type your answer instead.

The self-view camera is optional. It shows your own face on your own screen only. The picture is never recorded, uploaded, stored or analysed.

Device, browser and usage data

Our servers keep standard logs. These include your IP address, your browser and device type, the pages or data requested, the time, and any errors.

Messages you send us

If you email us, we store your message and your contact details so we can reply.

Analytics on our public pages

Our public pages use Google Analytics 4 (Google LLC) and Microsoft Clarity (Microsoft Corporation) to understand how visitors use the website: which pages are viewed, how far a page is scrolled, which buttons and links are clicked, and the device, browser and country of a visit. Both services use cookies and similar technologies.

Microsoft Clarity also records clicks, scrolling and mouse movement as heatmaps and session replays. Text typed into form fields is masked. Microsoft may also use this data for advertising, as described in the Microsoft Privacy Statement.

These services run on our public pages and on the sign-in and first set-up screens. They never run inside the practice area. Your practice answers, transcripts, scores and results are never sent to them. We do not send your name or your email address to either service, and the advertising features of Google Analytics are switched off.

You can read more in Google's privacy policy and the Microsoft Privacy Statement. You can stop Google Analytics in your browser with the Google Analytics opt-out add-on.

Cookies and device storage

The analytics services above set these cookies on our public pages:

• _ga and _ga_<ID> (Google Analytics, up to 2 years)
• _clck (Microsoft Clarity, 1 year) and _clsk (Microsoft Clarity, 1 day)
• CLID and MUID (Microsoft, 1 year)

We set no advertising cookies of our own.

The app does keep some information in your browser's own storage on your device. This storage is called local storage and IndexedDB. It holds:

• Your sign-in session. Firebase Authentication keeps you signed in on that browser.
• An offline copy of your data. Our database, Cloud Firestore, keeps a local copy of the data you have already loaded.
• Your profile. A copy of your trade, country and English level, so pages load faster.
• Your progress in some sections. Which Interview Presence questions and Living & Working Here topics you have answered, and your Picture Quiz progress.
• A list of scenarios. A saved copy of the scenario list, so it opens quickly.

You can remove this information at any time by clearing the site data in your browser settings.

When you sign in with Google, Google's own sign-in pages may set Google cookies. Our fonts are loaded from Google Fonts, so your browser contacts Google to fetch them.

Please do not put sensitive information in your answers, such as health details or passport and visa numbers. You can practise well without it.

We collect personal information in these ways:

• From you. When you sign up, choose your trade, country and English level, answer questions, buy a plan or a top-up, or contact us.
• Automatically. Our servers record standard log data when you use the service, the app saves the items listed above in your browser, and the analytics services described above record visits to our public pages.
• From Google sign-in. If you choose to sign in with Google, Google gives us your name, your email address and an account identifier.
• From our payment provider. Stripe confirms that your payment went through, and we receive a record of the purchase.

If a migration agent, employer or other organisation gives you a seat, it may give us your name and email address so we can set up your account.

You can read our public pages without giving us any personal information. You need an account to practise and to save your results.

We use your personal information to:

• show you questions for your trade, your destination country and your English level, and save your place;
• mark your answers, using AI for spoken and typed answers and our own code for multiple-choice questions;
• create your account and keep it secure;
• count your marked questions and keep your plan and purchase records;
• answer your questions and give you support;
• keep the service safe, prevent fraud and fix errors;
• improve our questions and model answers, for example by finding questions that are unclear;
• send you service emails and, only if you agree, marketing emails;
• meet our legal duties, such as tax and record-keeping rules.

We do not use your personal information for any other purpose unless you agree, or the law allows or requires it.

When you finish a spoken or typed answer, we send three things to the Google Gemini API: the question, the text of your answer and our model answer. Gemini compares them and returns a score and feedback. We send no audio and no video, because we never record any.

• Only for marking. We send your answer text only to produce your score and feedback.
• Never sold. We do not sell your answers to anyone.
• No advertising profiles. We do not use your answers to build advertising profiles.
• Multiple choice stays with us. Multiple-choice questions are marked by our own code, without AI.

AI feedback is automatic and can be wrong. Scores are practice estimates. They are not official results, and they do not predict or guarantee the result of a real interview, job application, visa application or skills assessment.

We share personal information only with the providers that help us run the service:

• Google Firebase and Google Cloud. Hosting, the database (Cloud Firestore), file storage (Cloud Storage) and sign-in (Firebase Authentication).
• Google Gemini API. AI marking of your spoken and typed answers.
• Red Migration FZC. The seller of record, based in the United Arab Emirates. It receives your name, your email address, what you bought and the amount, so it can take payments, pay refunds and keep records.
• Stripe. Stripe handles your card details under its own privacy policy.
• Google Analytics and Microsoft Clarity. Visit data from our public pages only, as described under "Analytics on our public pages". Never your account details or your practice answers.

Your browser's speech service. Speech-to-text is done by your browser, not by us. In Google Chrome, Google processes the audio to produce the text.

Organisations that provide your seat. If an agent, employer or other organisation gives you a seat, it may see your progress, but only as agreed with that organisation. It cannot see people who are not on one of its seats.

When the law requires it. We may disclose information where the law requires or authorises it, or where it is needed to protect someone's safety.

We never sell your personal information, and we never give your account details or your practice answers to advertisers.

Your information is stored and processed outside Australia. Our app server and our database run in Google Cloud's Singapore region (asia-southeast1). Our media files, such as question videos, pictures and audio, are stored in Google Cloud Storage. Google may also process data in other countries where it operates, including for sign-in and for AI marking by the Gemini API. Purchase details go to Red Migration FZC in the United Arab Emirates. Stripe may process payment information in the United States and in other countries.

We take reasonable steps, as Australian Privacy Principle 8 requires, to make sure overseas providers handle your information properly. We do this by choosing established providers that are bound by contract to protect data and keep it secure.

How we protect your information

• Encrypted connections. Information travels between your browser and our servers over HTTPS.
• Limited access. Only staff who need your information to run or support the service can see it.
• Strict database rules. Our database rules let each user read only their own account and practice data. Anything not expressly allowed is refused.
• Encryption at rest. Our providers encrypt stored data.

How long we keep it

• Your account. We keep your account and practice data while your account is active. If you ask us to delete it, we delete it within 30 days.
• Answer transcripts. We delete each transcript 12 months after it was created, or when your account is deleted if that is sooner.
• Scores and feedback. We keep these while your account is open.
• Inactive accounts. If you do not use your account for 3 years, we email you a warning and then delete the account.
• Payment and tax records. We keep these for 7 years, as Australian tax law requires.
• Backups. Backup copies are overwritten within 35 days.

No system is perfectly secure. We work hard to protect your information, but we cannot promise that nothing will ever go wrong.

You can ask us to:

• access the personal information we hold about you;
• correct information that is wrong, out of date or incomplete;
• delete your account and your practice data;
• withdraw your consent to marketing emails.

To make a request, email support@interviewtraining.ai from the email address on your account. We may check your identity before we act, to keep your information safe.

We answer within 30 days, and we do not charge for a request. If we cannot do what you ask, we will tell you why in writing and explain how you can complain.

When we delete an account, we keep only the records the law tells us to keep, such as payment and tax records.

You can also change your trade and your destination country yourself in the app.

InterviewTraining.ai is for people aged 16 and over. If you are under 18, you need the permission of a parent or guardian to use it. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has made an account, email support@interviewtraining.ai and we will delete it.

We send marketing emails, such as interview tips, news about new questions and offers, only if you have agreed to receive them. Every marketing email has an unsubscribe link. You can also email support@interviewtraining.ai with "Unsubscribe" as the subject.

Opting out of marketing does not stop the service emails we need to send you. These are emails about your account, security and receipts.

If you think we have handled your personal information badly, please tell us first. Email support@interviewtraining.ai with the details. We will reply in writing within 30 days.

If you are not happy with our reply, you can complain to the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992

We may update this policy from time to time, for example when we add a feature or change a provider. We post the new version on this page and change the "Last updated" date.

If a change makes a real difference to how we handle your personal information, we will tell you by email or with a notice in the app before the change takes effect.