Privacy policy.

Impromptly is built by Manthan Patel. This policy explains what we collect when you use the Impromptly iOS app or this website, why we collect it, who we share it with, and how to delete it. Plain English version: we record your voice only while you ask us to, transcribe it, and throw the audio away. We do not sell your data. We never will.

1. What we collect

Account data

If you sign in with Apple, we receive a stable user identifier and an email address (real or relayed). If you sign in with email, we receive your email address. We store your display name only if you provide one.

Audio you record

When you start a practice session, the app captures audio from your microphone. Real-time filler detection runs entirely on your device using Apple's Speech framework and our own on-device acoustic analyzer. The audio buffer never leaves the phone during the session. After you tap Analyze, and only after you have accepted the in-app AI disclosure that names every provider by name, the recorded audio is sent over TLS to our authenticated Supabase Edge Function, which forwards it to OpenAI Whisper for transcription. Audio is processed in memory, returned to your device, and not retained by us or by OpenAI under their zero-retention API terms. The local recording is deleted from your device when the session ends.

Transcripts and feedback

The text transcript is sent to Anthropic Claude through the same authenticated proxy for structure and content feedback. Both the transcript and the resulting AI feedback are linked to your account so you can review your history. You can delete any session at any time from inside the app, and you can opt out of analysis entirely by skipping the Analyze step.

Usage and diagnostic data

Crash reports, basic interaction events (sessions started, score ranges, button taps), and device class. No advertising IDs. No cross-app tracking. We do not run third-party trackers on the marketing website.

Purchase data

Apple processes all in-app purchases. We receive an entitlement flag from Apple confirming your subscription status. We never see your card.

2. Third parties we share data with

We use a small number of vendors to operate the product. Each one receives the minimum data needed to do its job.

• OpenAI (Whisper): receives audio for transcription via our authenticated proxy. Zero-retention. Audio is processed in memory and discarded after the response is returned.
• Anthropic (Claude): receives the text transcript for structure and content analysis. Zero-retention enterprise terms.
• Supabase: hosts our authenticated database, auth, and storage. Account, session, and transcript records live here, encrypted at rest.
• Apple:handles Sign in with Apple and StoreKit subscriptions. Apple's privacy policy governs that flow.
• Resend: sends transactional email such as sign-in links and account deletion confirmations.

3. Where audio actually goes

Real-time filler-word detection runs on your device using Apple's Speech framework and our own on-device acoustic analyzer. That stream never leaves the phone. After the session ends, if you tap Analyze and have accepted the AI disclosure, the recorded audio is sent over TLS to our Supabase Edge Function, which forwards it to OpenAI Whisper for transcription and returns the text to your device. The transcript is then sent to Anthropic Claude for structure and content feedback. Neither we, OpenAI, nor Anthropic retain the audio or the text under our zero-retention enterprise terms. Apple's Privacy Manifest shipped in the app declares every data type collected here.

4. Your rights

Under GDPR, CCPA, and equivalent regimes, you have the right to access, correct, export, and delete your personal data. The fastest path to deletion is the in-app Settings → Delete accountcontrol: one tap, one confirmation, and we purge all linked records on the schedule described in section 5. For Sign in with Apple users, deletion also revokes our access to your Apple credential server-side via Apple's token revocation endpoint. To exercise any other right, email hello@impromptly.ai from the address on your account. We respond within 30 days.

California residents may also request information about categories of personal information disclosed for a business purpose in the prior 12 months. Same email, same reply window.

5. Data retention

Audio is never retained beyond a single session. Transcripts and feedback are retained for the life of your account. When you delete your account, we purge all linked records within 30 days from primary storage and within 90 days from encrypted backups.

If you signed in with Apple, deleting your account also revokes our access to your Sign in with Apple credential by calling Apple's token revocation endpoint. Your subscription is billed by Apple; cancel it from iOS Settings → your Apple ID → Subscriptions.

6. Children

Impromptly is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has signed up, email us and we will delete the account.

7. Changes

We will update this page when our practices change. The date at the top of this policy reflects the most recent change. Material changes will trigger an in-app notice before they take effect.

8. Contact

Questions, deletion requests, or anything else: hello@impromptly.ai. Manthan reads this inbox.