Privacy Policy

Prepped is a registered business name of The Trustee for Fresh Food Delivery Trust(ABN 23 565 805 837), an Australian trust. In this policy, “we”, “us” and “Prepped” refer to The Trustee for Fresh Food Delivery Trust. You can reach us any time at hello@preppedstudent.com. Prepped helps university students prepare for graduate and internship interviews.

We only collect what we need to provide the service:

• Account details, your name, email address, university, year of study, and the fields you're targeting.
• Resume, the file you upload and the text you paste for AI review, used to personalise your interview questions and feedback.
• Mock interview content, audio of your spoken answers (sent to Deepgram for transcription, not stored on our servers), the resulting transcripts, and AI-generated feedback.
• Tracked applications, which firms you're tracking and the stage of each.
• Notification preferences, whether you want deadline emails and how often.
• Payment information, handled by Stripe; we never see or store your card details, only a Stripe customer reference, your subscription status, and if you buy a season pass, the date it ends.
• Authentication metadata, sign-in timestamps, IP addresses (briefly, for security), and OAuth identifiers if you sign in with Google.
• Session recordings, a masked replay of how you move around the site: which pages you open, where you click, how far you scroll. All text and images are hidden, so a recording shows the shape of a page rather than anything written on it, and what you type is never recorded. We use these only to find the places where people get stuck. Recordings are deleted after 30 days.

We use your information to:

• Provide and operate the service (sign-in, AI mock interviews, feedback, tracking).
• Personalise interview questions and resume feedback to your actual background.
• Send deadline reminder emails (only if you've opted in, you can turn this off any time).
• Process payments for paid plans and the season pass through Stripe.
• Protect the platform from abuse and debug issues.
• Find and fix the parts of the app where people get stuck, using the usage measurements and masked session recordings described above.

We do not sell your data, share it with employers, or use your resume or interview content to train AI models.

We rely on the following providers to run Prepped. Each is contractually required to handle your data securely.

• Supabase (Australia / AWS Sydney), primary database and authentication storage.
• Anthropic (United States), generates your tailored interview questions and feedback. Your resume text and answer transcripts may be sent here.
• Deepgram (United States), converts your spoken answers to text. Audio is sent for transcription but not retained.
• Stripe (United States), processes paid plan payments. Card details go directly from your browser to Stripe; we never see them.
• Resend (United States), sends deadline reminder emails (only if you've opted in).
• Google (United States), if you choose to sign in with Google, and Google Analytics, which measures how the site is used (pages viewed, general location, device) via cookies to help us improve it.
• PostHog (European Union), product analytics that helps us understand which features are used (pages viewed, buttons clicked, device type, general location worked out from your IP address, and which tools you use such as starting a mock interview or a resume review) so we can improve them. Once you're logged in this activity is linked to your account id, along with your plan, university, study year and chosen fields. PostHog also stores the masked session recordings described in section 2, for 30 days. We don't send your name, your email address, your resume, your answers or anything you type. Hosted in the EU.

Overseas disclosure (APP 8): your database and authentication data are stored in Australia (Supabase, AWS Sydney). The other providers above are located in the United States, except PostHog, which is hosted in the European Union, so by using Prepped you acknowledge that the relevant information (e.g. resume text and answer transcripts sent to Anthropic, audio sent to Deepgram, usage data sent to PostHog) may be disclosed to recipients in those countries.

We use industry-standard practices: encryption in transit (HTTPS) and at rest, row-level security on every database query so users can only access their own data, and access controls on all administrative functions. No system is perfectly secure, if a breach affects your data, we will notify you in line with the Notifiable Data Breaches scheme.

You can, at any time:

• Access your data, Settings → Privacy → “Export my data” downloads a JSON file with everything we have on you.
• Correct your data, edit your profile, resume, and preferences directly in Settings.
• Delete your account, Settings → Privacy → “Delete my account” permanently removes your profile, applications, sessions, resume file, and cancels any active subscription.
• Opt out of emails, Settings → Notifications → toggle off email alerts.
• Make a complaint, contact us first; if unresolved, you can complain to the Office of the Australian Information Commissioner (OAIC).

Active accounts: we keep your data while your account is active. Inactive accounts (12+ months no sign-in) may be flagged for deletion after notice. Masked session recordings are deleted after 30 days. When you delete your account, your profile and app data are permanently removed; certain anonymised records (e.g. aggregate metrics) and Stripe transaction records may be retained as required for tax and accounting purposes.

Prepped is for university students and is not directed at children under 16. If you believe a child has registered, contact us and we will remove the account.

We'll update this policy when our practices change. The “Last updated” date at the top tells you when. Material changes will be communicated by email and/or in-app notice.

Questions or requests under the APPs: hello@preppedstudent.com.