Privacy policy

Who is responsible

Reparlo is run by Nintai Dick, an individual based in Douala, Cameroon, who decides what data is collected and why (the "controller"). Contact for anything in this policy: hello@reparlo.com.

What stays on your device

Reparlo is built so that the most personal part of a session never reaches us.

• Your video. It is recorded and kept in your browser's storage on your device. Your video stays on your device. If you turn on backup, it is encrypted before it leaves, and only you can open it. Backup is off unless you turn it on (see §9).
• Tracking. Body and face tracking runs in your browser, on your device. The camera image is never sent anywhere.
• The replay. The replay is assembled in your browser from your own recording.
• In a mic-only session, the copy of your audio used for replay is also kept on your device.
• Your takes while offline. A take recorded without a connection stays on your device until you send it for analysis.

Clearing your browser's site data, or using "Clear from this device" in settings, removes these copies. We cannot restore them.

What we receive and keep

• The audio of a session, as a 16 kHz mono file. It is used only to produce the transcript and is deleted as soon as the transcript is stored, even if the rest of the analysis then fails. If transcription itself fails, the audio is kept for 24 hours so you can retry, then deleted. Uploads from a take you never sent for analysis are deleted when you discard the take, or after 24 hours.
• The transcript, the scores and the flagged moments produced from it, and the speaking language, scenario and any context you typed (presentation notes, an interview question, a drill topic).
• Practice data you give us: your practice profile answers (your field, what's coming up, what you want to get better at, and anything you add), job ads you paste for an interview set, your presentation notes, and your drill topics and their key points. They are kept in our database and sent to Cloudflare Workers AI only as data for the analysis you asked for (choosing or tailoring questions and topics, marking your take). They are never used to train any model.
• Body landmark numbers: points of posture, hands and face, sampled 15 times a second and stored as numbers, plus summary measures computed on your device (for example, how often you looked at the lens). They are not images and cannot show your face. They are absent in a mic-only session.
• Your account: your email address, your app and speaking languages, your goal, your capture preference, your onboarding baseline, and your confirmations that you agreed to this policy and are 18 or over.
• Sign-in records: a hashed sign-in token and a hashed form of your IP address when you ask for a sign-in link (used for rate limiting and deleted after 24 hours), and for each signed-in device a session record with its browser description (user agent), so you can see and revoke it in settings.
• Daily usage counters: how many sessions and minutes of audio you analysed each day, to apply the free daily limits.
• Your practice record: each day's daily drill (its topic, key points and the skill it works on) and your streak (how many days in a row you practised, and your longest run).
• Reminder settings, only if you turn reminders on: the hour you chose, your time zone, and the day and time of the last reminder we sent. See §8.
• Encrypted backups, only for recordings you choose to back up: the encrypted file, its size and type, and your locked key. We cannot open them. See §9.
• Anonymous diagnostics: replay performance numbers and network error codes, without any identifier. See §10.

We use no advertising or analytics trackers. The app sets one cookie of its own, to keep you signed in; the anti-bot check on the sign-in page is run by Cloudflare Turnstile.

Why we use it

• To transcribe and mark your sessions and show you the results: this is the service you ask for.
• To sign you in and keep your account secure.
• To apply the free daily limits and stop abuse, including the anti-bot check on the sign-in page.
• To pick your daily drill, keep your streak and draw your progress charts.
• To send the practice reminder you asked for, at most once a day, and to keep the encrypted backups you turned on.
• To choose how the replay is drawn on your kind of device, and to find and fix technical problems.

Legal basis to confirm: performing the service you asked for, your consent given at onboarding, and our legitimate interest in keeping the service secure and affordable.

Nothing is used to train anything

Your audio, transcripts, scores, landmarks and practice data (profile answers, job ads, presentation notes, drill topics) are not used to train or improve any AI model, ours or anyone else's. Every AI step (transcription, the written evaluation, and choosing interview questions and drill topics) runs on Cloudflare Workers AI. Cloudflare states that it does not use customer content sent to Workers AI to train its models. We do not send your data to any other AI provider.

We do not sell your data, share it for advertising, or show ads.

Who processes it for us

Reparlo runs entirely on Cloudflare, Inc., which acts as our processor under its data processing terms. The Cloudflare services involved are:

• Workers: runs the app and its server code, and keeps short-lived request logs for troubleshooting.
• D1: the database for your account, transcripts, scores, practice data, counters, reminder settings and your locked backup key.
• R2: file storage for the audio (until transcribed), landmark tracks and encrypted backups.
• Workers AI: speech-to-text and the written evaluation.
• Email Service: sends your sign-in links and, if you turn them on, your practice reminders, from login@reparlo.com.
• Turnstile: the anti-bot check on the sign-in page.

Cloudflare operates a global network, so your data may be processed outside Cameroon, including in the United States and the European Union. Transfer safeguards to confirm.

Body and face data

Landmarks of the body and face may count as biometric data under some laws. We treat them that way: they are stored only to show you your results and replay, never used to identify you or anyone else, never combined with other data to recognise a person, and deleted with the recording.

Reminder e-mails

Reminders are off unless you turn them on in settings. If you do, we use your e-mail address, the hour you chose and your time zone to send at most one reminder a day, and only on a day you have not practised yet (days are counted in your time zone).

Every reminder has a link that stops them in one click, without signing in, and you can turn them off in settings at any time. They are sent through Cloudflare Email Service from login@reparlo.com, carry no images or tracking pixels, and we do not record whether you open them. If your address cannot receive them, we switch reminders off.

Encrypted backup

Backup is optional and off until you turn it on. Your recording stays on your device. If you turn on backup, it is encrypted before it leaves, and only you can open it.

• Your key. When you turn backup on, your browser creates a key that only you hold. It is locked by your passkey, where your device supports it, and by a recovery code shown to you once. We store only the locked key: never the key itself, your passkey's secret or your recovery code.
• Your recordings. A recording you back up (its video, or for a mic-only take its replay audio) is encrypted on your device before it is uploaded. Reparlo keeps the encrypted file in Cloudflare R2 and the locked key in Cloudflare D1, and cannot open either.
• What we can see. That a backup exists, its size, its file type, when it was uploaded, and the identifiers of the passkeys that lock your key. Not what is in it.
• Limits. Each account can keep up to 1 GB of backups; past that, a new backup is refused with a message, never dropped silently. A backup is deleted with the recording or the account, or when you delete it.
• On a device you unlock, with the recovery code or a passkey, the unlocked key is kept in that browser, in a form that cannot be copied out, until you sign out or your session ends.
• Losing both. If you lose every passkey and your recovery code, nobody, including us, can open your backups. We say so before you turn backup on.

An honest limit: like any web app, Reparlo runs the code our server sends to your browser. The promise that only you can open your backups holds for the code we publish; a malicious change to that code could break it. The recovery code holds 128 bits of randomness, so guessing it is not feasible.

The app on your device, and diagnostics

• The installed app. If you install Reparlo on your device, it keeps a copy of Reparlo's own files (the app's code, fonts and images) so it can open without a connection. That copy holds no personal data beyond what the app already keeps in your browser: your takes, and your account basics (e-mail address, languages and preferences) so the app can open offline. Signing out removes the account basics.
• Diagnostics. The first time you watch a replay on a device, the app measures how smoothly it plays and sends us anonymous numbers: the frame rate, the replay mode it chose, and a coarse device class (phone, tablet or computer, a broad graphics class, and processor cores and memory in ranges). When an upload runs into network trouble, the app reports which step failed and why in the same way. These reports carry no account, device identifier or browser description, and are kept only in short-lived request logs.

How long we keep it, and deleting it

• Audio: until the transcript is stored, then deleted; at most 24 hours if transcription fails or the take is never analysed.
• Transcript, scores, flagged moments and landmarks: until you delete the recording or your account.
• Practice data: presentation notes and drill topics go with their recording; a pasted job ad goes with its interview set; your practice profile stays until you redo it in settings or delete your account. Deleting your account deletes all of it.
• Daily drills and your streak: until you delete your account.
• Reminder settings: until you delete your account. Turning reminders off stops them at once; your chosen hour is kept so you can turn them back on.
• Encrypted backups: until you delete the backup, its recording or your account. An upload left unfinished is deleted after 6 days.
• Diagnostics: only in short-lived request logs.
• Sign-in links: valid for 15 minutes, used once, and their records deleted within a day. Signed-in sessions: they expire after 30 days without use, and you can revoke any of them in settings.
• Delete a recording in the app and all of it goes: its database rows and its stored files.
• Delete your account in settings and everything we hold about you is deleted within 24 hours.

For adults only

Reparlo is for people aged 18 and over. You confirm your age when you start. If we learn that an account belongs to someone younger, we delete it.

Your rights

You can see your sessions and signed-in devices in the app, change your languages and preferences in settings, and delete recordings or your whole account yourself. You can also write to hello@reparlo.com to ask for a copy of your data, a correction, a deletion, or an export in a portable format, or to object to a use of your data. We answer within [TO CONFIRM: response time for data requests].

The laws we expect to apply to confirm: Cameroon's Law No. 2024/017 on personal data protection, and, for people in the European Union, the General Data Protection Regulation (GDPR). You may also complain to the data protection authority where you live.

Changes to this policy

If we change what we collect or why, we update this page and its date, and we tell signed-in users in the app before the change takes effect. If a change needs your consent, we ask for it again.