Privacy Policy

• Account info: your email, name (optional), and profile image (if you sign in with Google).
• Consent records: whether and when you agreed to the Terms & Conditions and this policy at signup.
• Practice data: the audio you record for reps, transcripts generated from that audio, scores, and feedback.
• Onboarding answers: your vertical (sales, consulting, etc.), personas you speak to, and improvement goals. Used to personalize your workouts.
• Usage signals: reps completed, scores over time, streak days, which features you use.

• We don't sell your data to advertisers or third parties.
• We don't train our AI models on your audio or transcripts. Your reps stay yours.
• We don't share your individual scores or transcripts with anyone, not even team admins, unless you explicitly share them.
• We don't use third-party ad trackers.

We use your data to run the product: transcribe and score your reps, generate feedback, track your progress, personalize your workouts, send service emails (welcome, reminders you opt into, account notices), keep the service secure, and fix bugs. That is the list. Legal bases where required: performing our contract with you, your consent (recorded at signup), and our legitimate interest in keeping the service secure and working.

We use a small number of third-party processors to run Cognify: Supabase (database, auth, file storage), Anthropic (Claude, for scoring and feedback), OpenAI (scoring and embeddings), Deepgram (speech-to-text), Hume.ai (vocal prosody analysis for tone scoring), Vercel (hosting and analytics), Resend (email). Each has its own privacy policy and processes only the data required to perform its job. Some providers may process data in the United States or other countries; where they do, standard contractual safeguards apply.

Account and progress data stay as long as your account exists. Rep audio is retained on a rolling window and cleaned up automatically; transcripts and scores persist so your history and progress charts keep working. When you delete your account we delete your personal data within 30 days, except minimal records we are legally required to keep (like consent timestamps and billing records, where applicable).

Data is encrypted in transit and at rest by our infrastructure providers. Access to production data is restricted and credentialed. No system is perfectly secure; if we learn of a breach affecting your data we will notify you without undue delay.

You can request a copy of your data, correct it, delete your account, or object to optional processing at any time. Depending on where you live (for example the EU/UK under GDPR or California under CCPA/CPRA) you may have additional statutory rights, including the right to lodge a complaint with your local supervisory authority. Email support@cognifygym.com and we'll handle any request within 30 days.

Cognify is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has created an account, contact us and we will delete it.

We use a small set of first-party cookies: cognify_guest_id (remembers you across pages before you sign up), cognify_terms_accepted (carries your signup consent timestamp to our server), and Supabase's auth session cookies when you're signed in. No third-party trackers.

If we materially change this policy, we'll notify active users by email and update the "Last updated" date above.