Privacy

Where your data is held

Everything is held in Amsterdam, the Netherlands. The application, its database and the recordings of rehearsals are all on Railway, in its EU West region. Nothing is stored anywhere else.

What we hold

Your email address and the profile details you choose to give. Your attempts: the tags you placed and how they compared with a published key. If you are on a panel: your passes, tags and reasons. The lines you flagged. What you sent us, and our replies. Sign-in records: when you signed in, and the browser and network address it came from. Each is deleted within a day of it expiring.

There are no passwords: you sign in with a link or a code sent to your email address.

A rehearsal you hold is recorded: your own voice and the simulated client's, as two separate files, deleted 30 days after the conversation. Its transcript is kept for 12 months, and then its words are deleted. When each of you spoke, the figures measured from that, and the readings of your own words, are kept for as long as you have an account, unless you delete the rehearsal sooner. That is the only audio this product keeps.

You can have a recorded rehearsal deleted sooner, from the rehearsal's own page. That deletes its recording, its transcript's words, and its readings, the model's and yours, with the quotes of your own words. The transcript's words go the moment you ask; the readings and the recording go within a minute or so; nothing more is worked out from the rehearsal after that. What stays is when it was, how long it ran and how it ended, and what had already been measured from it: when each of you spoke, and the figures, which the notice you accepted before the rehearsal says are kept for as long as you have an account. Where each line began and ended stays too, without its words. For a scenario whose rehearsals can be reviewed by a mentor, a record that you started one, and when, stays as well. The transcript's words and the readings can remain in copies of the database made before you ask: our host's backups of the database, for up to 89 days after they are deleted; our own copies of the database, each kept for at most 30 days, except the newest, which is never removed; and a copy made from one of our own copies to check that it can be restored, which is deleted as soon as the check ends, or by hand if a check ever leaves it behind.

No real client's voice is recorded here. Every calibration transcript is synthetic, and the few Review sessions the founders have made are role-play or their own voices: no real client appears in any of them.

Your copy

You can download everything you have done here, at any time, from your account page. It is offered again before you close your account.

Closing your account

You can close your account from your account page. You are signed out straight away. For 30 days nothing is deleted, and signing in again restores the account exactly as it was.

After 30 days, your account is deleted: profile, attempts, tags, results, flagged lines, what you sent us and our replies, sign-in records and your invitation, and everything else of yours but what the next section lists. A job does this once a day, so deletion happens within a day of the 30 days ending.

One kind of account waits longer. If a credentialed mentor has observed a session of yours and produced the record an accrediting body reads, that record — and everything else of yours — is deleted after 90 days rather than 30. It is longer so that a body assessing you when you close can still read what it was given. You are told which of the two applies to you when you close, and the date does not move afterwards.

What stays, and why

Some things stay after your account is deleted, with your name taken off them, because other people's records rest on them and taking them out would take other people's work with you.

If you were on a panel, tags you placed that are already inside a published key stay in that key, with the reasons you wrote. The link between them and you is cut and the time you locked them is erased: what remains holds no name, no address, no order and no time. Other people's work is read against that key, and the agreement study is built on it; panelists agree to this when they are invited. Panel work that is not inside a published key is deleted with everything else.

The readings you recorded in somebody else's session, as a mentor or a peer, stay with the words you quoted: they are that coach's record. So does mentoring you gave, which stays on the coach's record with the credential you held when it began.

And, with your name taken off each: evidence records you filed about another coach; observation forms and competency reviews you signed for another coach, with the credential you signed with; rooms you ran; programmes you made; checks you recorded of a mentor's stated credential, with where you looked and what you found; keys you published; framework text you wrote; invitations you sent (to this product, and to read a session); panelists you asked to tag an exercise, by which transcript and by when; what you did to other people's accounts; Beta you switched on for somebody else; the record that a client agreed to a recording of a session of yours, with no name, label or address in it; that you were named to read a client's session, by the role and credential you were named with; that you shut the gate that keeps real clients' recordings out, with the reason you gave; and the count and cost of any model reading you started on somebody else's session.

One more thing can stay, for a different reason. If you were paying for a plan, and by the time your account is deleted Stripe has not confirmed that your subscription ends, we keep that subscription's Stripe id, its status and its renewal date, and nothing else of yours, until Stripe confirms it, so that it can still be ended.

Backups

Our host backs up the database on a fixed schedule: daily backups are kept for 6 days, weekly backups for 27 days, and monthly backups for 89 days.

So after an account is deleted, its data can remain inside a backup for up to 89 days, until the last backup holding it is removed. Backups exist only to recover the database after a fault. We do not promise instant, total erasure; we promise these numbers.

We also keep our own copies of the whole database, everything in it, on the same host in Amsterdam: each is kept for at most 30 days, except the newest, which is never removed, so that a copying job that stops cannot also delete the last copy.

A check that one of our own copies can be restored makes one more copy on the same host, and deletes it as soon as the check ends; if a check ever leaves it behind, we remove it by hand.

Who else handles your data

Railway — hosting and the database, in Amsterdam.

Resend — sends the sign-in email, from its EU region. It handles your email address and that message, and nothing else.

Deepgram — if you upload a recording to Review, the audio goes to Deepgram's European service to be written out as text. We do not keep the audio afterwards.

LiveKit — if you hold a rehearsal, LiveKit carries your voice to our service and the simulated client's voice to you while you talk. It records nothing.

OpenAI — if you hold a rehearsal, your voice is streamed to OpenAI's realtime model, which plays the simulated client; OpenAI writes out your turns as you speak, and a small OpenAI text model reads each turn to steer her. After a recorded rehearsal, OpenAI's speech recogniser writes out both voices from the recording, and an OpenAI language model reads that transcript beside our own descriptions of the markers.

What LiveKit and OpenAI do with your voice and words while they handle them is governed by their terms, not ours.

Stripe — if you pay for a plan, Stripe processes the payment on its own Checkout page. It holds the email address you give at Checkout and your payment details. We do not store either.

That is the whole list. There is no analytics service and no advertising.

ICF

Not affiliated with, endorsed by, or sponsored by the International Coaching Federation (ICF).

Calibration earns no ICF hours or credit of any kind.

Questions

Use Feedback once you are signed in: a person reads it. If you cannot sign in, ask the person who invited you: they can make you a one-use sign-in code.