Privacy Policy

Prepped is an Australian-based platform that helps university students prepare for graduate and internship interviews. In this policy, “we”, “us”, and “Prepped” refer to the operator of this app. Prepped is based in Australia; our ABN and registered business address will be added here once business registration is finalised.

We only collect what we need to provide the service:

• Account details — your name, email address, university, year of study, and the fields you're targeting.
• Resume — the file you upload and the text you paste for AI review, used to personalise your interview questions and feedback.
• Mock interview content — audio of your spoken answers (sent to Deepgram for transcription, not stored on our servers), the resulting transcripts, and AI-generated feedback.
• Tracked applications — which firms you're tracking and the stage of each.
• Notification preferences — whether you want deadline emails and how often.
• Payment information — handled by Stripe; we never see or store your card details, only a Stripe customer reference and your subscription status.
• Authentication metadata — sign-in timestamps, IP addresses (briefly, for security), and OAuth identifiers if you sign in with Google.

We use your information to:

• Provide and operate the service (sign-in, AI mock interviews, feedback, tracking).
• Personalise interview questions and resume feedback to your actual background.
• Send deadline reminder emails (only if you've opted in — you can turn this off any time).
• Process paid plan subscriptions through Stripe.
• Protect the platform from abuse and debug issues.

We do not sell your data, share it with employers, or use your resume or interview content to train AI models.

We rely on the following providers to run Prepped. Each is contractually required to handle your data securely.

• Supabase (Australia / AWS Sydney) — primary database and authentication storage.
• Anthropic (United States) — generates your tailored interview questions and feedback. Your resume text and answer transcripts may be sent here.
• Deepgram (United States) — converts your spoken answers to text. Audio is sent for transcription but not retained.
• Stripe (United States) — processes paid plan payments. Card details go directly from your browser to Stripe; we never see them.
• Resend (United States) — sends deadline reminder emails (only if you've opted in).
• Google (United States) — if you choose to sign in with Google.

Overseas disclosure (APP 8): your database and authentication data are stored in Australia (Supabase, AWS Sydney). The other providers above are located in the United States, so by using Prepped you acknowledge that the relevant information (e.g. resume text and answer transcripts sent to Anthropic, audio sent to Deepgram) may be disclosed to recipients overseas.

We use industry-standard practices: encryption in transit (HTTPS) and at rest, row-level security on every database query so users can only access their own data, and access controls on all administrative functions. No system is perfectly secure — if a breach affects your data, we will notify you in line with the Notifiable Data Breaches scheme.

You can, at any time:

• Access your data — Settings → Privacy → “Export my data” downloads a JSON file with everything we have on you.
• Correct your data — edit your profile, resume, and preferences directly in Settings.
• Delete your account — Settings → Privacy → “Delete my account” permanently removes your profile, applications, sessions, resume file, and cancels any active subscription.
• Opt out of emails — Settings → Notifications → toggle off email alerts.
• Make a complaint — contact us first; if unresolved, you can complain to the Office of the Australian Information Commissioner (OAIC).

Active accounts: we keep your data while your account is active. Inactive accounts (12+ months no sign-in) may be flagged for deletion after notice. When you delete your account, your profile and app data are permanently removed; certain anonymised records (e.g. aggregate metrics) and Stripe transaction records may be retained as required for tax and accounting purposes.

Prepped is for university students and is not directed at children under 16. If you believe a child has registered, contact us and we will remove the account.

We'll update this policy when our practices change. The “Last updated” date at the top tells you when. Material changes will be communicated by email and/or in-app notice.

Questions or requests under the APPs: hello@preppedstudent.com.