Privacy Policy
Last updated October 12, 2026
The short version. Your free Report is worked out on your iPhone. When Captivating coaches you, it sends the words you said and your measurements, not your audio. We don’t sell your data or use your voice to advertise. You can delete everything from inside the app.
This policy explains how Captivating (“Captivating”, “we”, “us”), the iPhone app and the website becomecaptivating.com, collects, uses and shares information. Captivating is operated by Nam Dao, who is the controller of your personal data. Questions: [email protected].
What we collect
Recordings and what you say
- Audio. When you record an answer, the audio is analyzed on your device to measure things like melody (pitch movement), pauses, pace, volume and filler words, and to make a transcript. For features that need server scoring, a recording may be uploaded; it is deleted once scoring finishes, unless you choose to keep it (for example, saving your first recording as your “Day 1” so you can compare later). You can delete kept recordings at any time.
- Transcripts and measurements. To give you coaching (your Capo remark, the one fix, the suggested rewrite and the five-axis breakdown), the app sends the transcript of your answer and your measured numbers to our servers, which pass them to a language-model provider to generate the feedback. We store the result with your account so your Report, Path and progress work.
- Camera (optional features). If you use an on-camera check, video is analyzed on your device only. Video frames are not uploaded or stored by us.
Account and app data
- Account. The app creates an anonymous account so your progress is saved without signing up. If you choose Sign in with Apple, we receive a stable Apple user identifier and, if you share it, your name and email (which may be an Apple private relay address).
- Your answers in onboarding, such as your goal, the name you want to be called, and how you heard about us.
- Progress data: scores, lessons completed, streaks, gems, leagues and similar game data.
- Purchases. Payments are handled by Apple. We receive subscription status and transaction identifiers (via Apple and our subscription provider), never your card details.
Usage and diagnostics
- Product analytics: which screens you see and which features you use, tied to a random identifier, so we can improve the app.
- Crash and performance reports: device model, OS version and technical details of errors.
- Attribution: if you allow tracking when iOS asks (App Tracking Transparency), we may learn which ad or campaign led to your install. If you don’t allow it, we don’t track you across other companies’ apps and websites.
Website and waitlist
- If you join the waitlist we store your email address, the time, the page section you used, your approximate country (from your IP address), and campaign tags in the link you followed. We use a one-way hash of your IP address, kept per hour, only to block abuse; we don’t store the IP itself.
- The website does not use advertising cookies or third-party trackers.
How we use it
- To run the app: measure your recordings, build your Report and Path, save your progress, and run streaks and leagues.
- To coach you: generate feedback on what you said and how you said it.
- To handle subscriptions and restore purchases.
- To keep the service secure, prevent abuse and fix bugs.
- To improve scoring and the app using aggregated or de-identified data.
- To email you about the waitlist or launch, if you asked us to. You can unsubscribe at any time.
We do not sell your personal data, and we do not share it for cross-context behavioral advertising. We do not use your recordings or transcripts to train third-party models, and our providers are not permitted to use them to train theirs.
Legal bases (EEA/UK): performing our contract with you (running the app), legitimate interests (security, analytics, improving the service), consent (tracking for attribution, keeping recordings, marketing email) and legal obligations.
Who we share it with
We use service providers who process data on our behalf, under contracts that limit their use of it:
| Provider | What for |
|---|---|
| Supabase | Database, accounts and file storage for the app |
| OpenAI (and potentially Anthropic) | Generating coaching feedback from transcripts and measurements |
| Speech-to-text provider | Transcribing recordings uploaded for server scoring |
| Apple, RevenueCat | Payments and subscription status |
| PostHog | Product analytics |
| Sentry | Crash and error reports |
| AppsFlyer | Install attribution, only with your tracking permission |
| Cloudflare | Website hosting and the waitlist |
We may also disclose information if required by law, to protect rights and safety, or as part of a merger or sale of the business (in which case this policy continues to apply to your data).
Sharing you choose. If you share a Report, clip or score card, anyone with the link can see what you shared. Public challenge entries can show your display name and score.
How long we keep it
- Uploaded audio: deleted after scoring, unless you choose to keep a recording. Kept recordings stay until you delete them or your account.
- Account, transcripts, scores and progress: for as long as you have an account.
- Analytics and crash data: up to 24 months.
- Waitlist emails: until launch plus 12 months, or until you ask us to remove yours.
When you delete your account, we delete or anonymize your personal data within 30 days, except where the law requires us to keep it (for example, purchase records).
Your choices and rights
- Delete your account in the app (Settings → Account → Delete account), or email [email protected]. See how to delete your account.
- Microphone, camera and tracking permissions can be changed any time in iOS Settings.
- Depending on where you live (including the EEA, UK and California), you can ask to access, correct, delete or export your data, object to or restrict processing, and withdraw consent. Email [email protected]; we’ll answer within 30 days. You can also complain to your local data protection authority.
- We will not discriminate against you for exercising your rights.
International transfers
Our providers may process data in the United States and other countries. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.
Security
Data is encrypted in transit and at rest with our providers. Access to your data in our database is restricted per user (row-level security), and scores are written by our servers only. No system is perfectly secure; if a breach affects you, we’ll tell you as the law requires.
Children
Captivating is not directed to children under 13 (or the minimum age in your country), and we don’t knowingly collect their data. If you believe a child has given us data, email [email protected] and we’ll delete it.
Changes
We’ll post changes here and update the date above. If a change is significant, we’ll tell you in the app or by email before it takes effect.
Contact
Nam Dao · [email protected]