Privacy Policy

Data Controller

The data controller responsible for processing your personal data is Crocware Filip Młynarski, a sole proprietorship registered in Poland (VAT ID: PL8652572212). For any privacy-related enquiries, contact filip@interhub.tech.

1. Information We Collect

Information you provide directly: name, email address, password (stored hashed), career path preferences, target seniority level, chosen technologies, reminder time, and feedback messages you submit.

Information generated while you use the service: study session metadata (timestamps, question attempts, answer text), interview answer scores and AI-generated feedback, progress snapshots, and subscription status.

Voice and speech data: if you use Practice Mode with voice input, we process your spoken answers. By default, transcription happens locally on your device. If you opt in to cloud transcription, audio recordings (m4a) are sent to our backend and forwarded to OpenAI for transcription; the resulting text is stored and the audio is not retained server-side after transcription.

Device and delivery data: when you enable push notifications we store a Firebase Cloud Messaging (FCM) token associated with your account, along with the platform (iOS/Android) and last-used timestamp.

Payments: we do not store card numbers. For subscriptions we store the Apple transaction identifiers, product ID, environment flag, renewal/expiration timestamps, and the signed transaction payload for audit purposes.

We do not collect IP addresses, user-agent strings, precise location, contacts, photos, or advertising identifiers. No third-party analytics or advertising SDKs are integrated in the mobile app.

2. How We Use Your Information

We use your information to provide and improve the InterHub service, personalize your learning experience, generate adaptive question sessions, track your progress, and communicate with you about your account and updates to the service.

3. Data Storage and Security

Your account data is stored in our PostgreSQL database hosted on Amazon Web Services in Frankfurt, Germany (eu-central-1). We use TLS for all network traffic and encryption at rest for the database. Authentication tokens on your device are stored in the iOS Keychain. Non-sensitive UI preferences are stored in the app's sandboxed local storage.

Some processing necessarily happens outside the EU: see "Sub-processors and International Transfers" below.

4. Sub-processors and International Transfers

We share personal data with the following processors, each bound by a data processing agreement:

• OpenAI, Inc.(USA) - LLM grading of answers and transcription of voice recordings. Data shared: question prompt, answer text, and audio file when cloud transcription is enabled. Under OpenAI's API data usage policy, content submitted via the API is not used to train OpenAI models and is retained for up to 30 days for abuse monitoring before deletion.
• Google LLC (Firebase Cloud Messaging) (USA) - delivery of push notifications. Data shared: FCM device token and notification payload.
• Apple Inc. (USA) - Sign in with Apple, App Store subscription billing, and receipt validation. Data shared: OAuth identity token and StoreKit transaction data.
• Google LLC (Sign-In) (USA, optional) - Sign in with Google. Data shared: OAuth ID token.

Transfers outside the EEA rely on the EU Commission Standard Contractual Clauses (SCCs) and, where available, the EU–U.S. Data Privacy Framework.

5. Data Sharing

We do not sell your personal information to third parties. Beyond the sub-processors listed above, we may disclose information when required by law or to protect the rights, property, or safety of InterHub, our users, or others.

6. Your Rights and Legal Bases (GDPR)

We process your personal data on the following legal bases (GDPR Art. 6):

• Performance of a contract (Art. 6(1)(b)) - creating and operating your account, delivering learning content, processing subscriptions.
• Legitimate interest (Art. 6(1)(f)) - securing the service, preventing abuse, and server-side logs for operational diagnostics.
• Consent (Art. 6(1)(a)) - push notifications, microphone access, and cloud transcription (each revocable in settings).

You may exercise your rights under GDPR Articles 15–22 (access, rectification, erasure, portability, restriction, objection) by emailing filip@interhub.tech. We respond within one month (Art. 12(3)). Data exports are provided in a structured machine-readable format on request.

7. Cookies and Analytics

InterHub's mobile app does not use browser cookies. Authentication tokens are stored in the iOS Keychain; app preferences are stored locally on your device. This marketing website uses only strictly-necessary cookies for session management. We do not use any analytics or advertising SDKs in the mobile app.

8. Data Retention

When you delete your account via the app (Settings → Delete account), your user record and all directly-linked data - career paths, study sessions, question attempts, mock interviews, progress snapshots, device tokens, and subscription records - are permanently removed from our database immediately.

Certain records are retained for legitimate compliance and audit purposes: Apple App Store subscription webhook notifications (identified only by Apple transaction ID, with no link back to your deleted account) are retained for up to 24 months. Encrypted backup snapshots may contain your data for up to 30 days before rotation.

9. Children's Privacy

InterHub is intended for users aged 16 or older. By creating an account, you represent that you are at least 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such data without verifiable parental consent, we will delete the account and associated data.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by posting the updated policy in the App and updating the "Last updated" date above.

11. Contact

For questions or concerns about this privacy policy or your personal data, contact us at filip@interhub.tech.