Privacy Policy

1. Introduction

Auralish Inc. ("Auralish," "we," "us," or "our"), a company incorporated in Canada, operates the mobile application Brief – AI Interview Coaching (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the App.

By downloading, accessing, or using Brief, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Policy, please do not use the App.

This Policy is designed to comply with:

• Canada's Personal Information Protection and Electronic Documents Act (PIPEDA)
• The EU/UK General Data Protection Regulation (GDPR)
• The California Consumer Privacy Act (CCPA/CPRA), as applicable to California residents

2. Information We Collect

2.1 Information You Provide Directly

• Account information: name and email address, obtained through Google Sign-In or Sign in with Apple
• Profile information: job title (optional) and a profile photo/avatar (optional)
• Resumes and job descriptions: documents or photos you upload for interview coaching purposes. We extract and store the text content; the original file or photo itself is not retained
• Voice recordings — live mock interviews: your voice is streamed in real time to generate the interview and produce a text transcript. The audio itself is processed and immediately discarded — it is not stored at any point in our systems
• Voice recordings — practice answers: when you record a spoken answer during practice mode, the recording is sent for scoring and then discarded on our servers. A copy may remain temporarily in the app's local cache on your device
• Purchase information: records of in-app purchases and subscriptions (processed by our payment provider, RevenueCat; we do not directly store your payment card details)

2.2 Information Generated Through Your Use of the App

• Interview transcripts: a text transcript of your live interview is generated and stored so that feedback can be produced from it
• AI-generated feedback: includes a summary, scores, and — for each question — the optimized answer suggestion alongside a quoted excerpt of your own answer
• Practice session results: scores and coaching notes for practice questions you answer

2.3 Information Collected Automatically

• Crash and diagnostic data: via Firebase Crashlytics, to help us identify and fix bugs. This includes device model, OS version, app version, and the technical details of any crash. Crash reports are not linked to your name, email, or account identity
• Device identifier for crash grouping: Firebase Crashlytics assigns an anonymous installation identifier used solely to group crash reports from the same device

We do not use any advertising or marketing analytics SDK. Brief does not display ads, does not use an advertising identifier, and does not share data with any ad network or attribution service.

2.4 Information from Third-Party Sign-In

• If you sign in with Google, we receive your name and email address via our backend provider, Supabase.
• If you sign in with Apple (including Face ID authentication), authentication is handled on-device and via Apple's secure framework; we do not receive your biometric data — only your name and email if you choose to share them, and confirmation of identity verification.

There is no password-based sign-up — Brief supports sign-in via Google or Apple only.

2.5 Notifications

Brief can send you local reminders (for example, a daily practice reminder) that are scheduled entirely on your device. We do not operate a remote push-notification system and do not collect a push token for this purpose. You can disable notifications at any time in your device settings.

3. How We Use Your Information

We use collected information to:

• Provide, operate, and personalize the interview coaching experience
• Generate interview questions, conduct live mock interviews, and produce AI-powered feedback using Google Gemini (voice and text processing)
• Transport live interview audio in real time using LiveKit Cloud, a third-party infrastructure provider
• Process in-app purchases and manage subscriptions via RevenueCat
• Authenticate and manage your account via Supabase
• Identify and fix crashes and bugs via Firebase Crashlytics
• Maintain security, prevent fraud, and comply with legal obligations

4. Third-Party Service Providers

We share limited information with the following third-party service providers, each of which processes data under its own privacy policy:

We do not sell your personal information to third parties, and we do not use any advertising, marketing-analytics, or attribution SDK.

5. Voice Recordings, Resumes, and Interview Content

Voice recordings, resumes, and interview transcripts are among the most sensitive data types we process. Specifically:

• Live interview audio is streamed for real-time processing and is never stored — only the resulting text transcript is retained.
• Practice-answer recordings are sent for scoring and discarded on our servers; a temporary copy may remain in the app's local cache on your device until the app clears it.
• Resume and job-description text is extracted from your upload and stored so it can be reused across your practice sessions and interviews; the original file or photo is not retained.
• Interview transcripts and feedback, including quoted excerpts of your own answers, are retained so you can review your interview history, and are deleted when you delete your account.
• You may delete individual resumes and job descriptions at any time from within the App.

6. Data Retention

We retain personal information only as long as necessary to provide the App's services, comply with legal obligations, resolve disputes, and enforce our agreements. Interview transcripts, feedback, resumes, and profile data are retained until you delete your account, at which point they are permanently deleted. Live interview audio is never retained in the first place.

7. International Data Transfers

Your information may be processed and stored on servers located outside your country of residence, including in the United States, where our service providers (Supabase, Google, LiveKit, RevenueCat) operate infrastructure. Where required, we rely on appropriate safeguards such as standard contractual clauses to protect data transferred internationally.

8. Your Privacy Rights

For All Users (PIPEDA)

You have the right to access, correct, or request deletion of your personal information, and to withdraw consent for its use, subject to legal and contractual restrictions.

For EU/UK Users (GDPR)

You have the right to: access, rectify, erase, restrict, or port your data; object to processing; and lodge a complaint with your local data protection authority. Our legal bases for processing include consent, contract performance, and legitimate interest.

For California Residents (CCPA/CPRA)

You have the right to know what personal information is collected, request deletion, and non-discrimination for exercising your rights. We do not sell or share personal information for cross-context behavioral advertising, and we do not use any advertising identifier.

To exercise any of these rights, contact us at hello@auralish.com.

9. Managing and Deleting Your Data

You may:

• Edit your profile information within the App
• Delete individual resumes and job descriptions within the App
• Delete your account at any time from within the App, via Settings → Delete Account. This permanently and immediately deletes your documents, interview history, transcripts, feedback, profile data, and avatar photo. This action cannot be undone.
• Learn more about the account deletion process at auralish.com/briefdeleteaccount
• Disable notifications via your device settings

10. Data Security

We implement industry-standard technical and organizational measures, including encryption in transit (TLS for all network communication, and encrypted transport for live interview audio) and secure authentication via Supabase and Apple/Google identity providers, to protect your information. Your profile photo, resumes, and interview data are stored with access controls limiting them to your own account. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

Brief is not directed to individuals under 16, and we do not knowingly collect personal information from children under this age. If you believe a child has provided us with personal information, contact us at hello@auralish.com and we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via the App or by email. Continued use of the App after changes take effect constitutes acceptance of the revised Policy.

13. Contact Us

Auralish Inc. · Canada
Email: hello@auralish.com  ·  Website: auralish.com/brief

If you are located in the EU/UK or California and have unresolved concerns, you also have the right to contact your local data protection authority.