Privacy Policy

1. Who we are

// in plain wordsAISIM is a voice-first simulator for high-stakes conversations. Questions? hi@aisim.com.

AISIM ("we") operates the aisim.com service — an AI-powered simulator for practising high-stakes conversations.

For anything in this policy — access, deletion, questions — write to hi@aisim.com.

2. What we collect

// in plain wordsYour email, an optional display name and photo, your sim transcripts and scores, and how you use the app. That's it.

Account data: your email address, an optional display name, an optional profile photo, your 18+ confirmation, and your current plan.

Practice data: voice audio is processed in real time to run the conversation. Text transcripts of your sims are stored with per-turn timestamps. We store the scored feedback report and derived delivery metrics (pace, filler-word counts, and similar).

Preferences: your voice accent preference and sim view preference.

Usage data: sim durations recorded in a minutes ledger, and first-party analytics events (which features were used — no third-party trackers).

Locale hints: your browser's timezone and language, used once per sim to pick a sensible default accent. Not stored as a tracking signal.

Payment data (when subscriptions launch): billing is handled by Stripe. We never see or store your card number.

3. What we don't do

// in plain wordsNo ad trackers. No third-party analytics. We don't sell your data. We don't train our AI on your conversations.

We do not run advertising trackers or third-party analytics scripts.

We do not sell, rent, or share your personal data for advertising.

We do not use your conversations, transcripts, or reports to train our own AI models.

4. How AI processes your sims

// in plain wordsYour voice runs through ElevenLabs to talk with the persona. Your transcript is scored by Google's Gemini model via our AI gateway. No human at AISIM listens to your sims.

Live voice conversations are processed by ElevenLabs (a voice AI provider) so the persona can hear and respond to you in real time.

After the sim ends, the text transcript is analysed by Google's Gemini model, called via our AI gateway, to produce the scored report.

These processors handle your data under their own terms of service. Every sim is a simulation with AI — no human at AISIM listens to your sims.

5. Storage and security

// in plain wordsYour data lives in Lovable Cloud (Supabase) with row-level security — only you can read your own rows. Profile photos are private. Share cards go public only if you publish one.

We store data in Lovable Cloud (Supabase), which provides authentication, database, and file storage. Row-level security policies are enabled on every table so each user can only read and write their own rows.

Profile photos are stored in a private bucket and served only through short-lived signed links.

Share cards are stored privately until you explicitly press Publish. Publishing generates a public image; you can unpublish it any time from the share screen or your history.

Traffic is encrypted in transit (HTTPS). Secrets and service keys are stored server-side and never shipped to the browser. We use rate limiting and security headers to reduce abuse.

6. How long we keep it

// in plain wordsTranscripts and reports stay until you delete them or your account. Deletes are hard deletes — the rows are gone.

Sim transcripts and reports are retained until you delete them individually, delete your account, or (rarely) we retire the associated data structure with notice.

Sims left in an interrupted state are auto-finalized so they stop consuming minutes and can be scored or discarded.

When you delete a sim or your account, the underlying rows and files are hard-deleted, not soft-flagged. Backups may retain data for a short rolling window before rotation.

7. Your rights and controls

// in plain wordsExport or delete anything from Settings. Photo on cards is off unless you turn it on per card. Leaderboard opt-in is off by default.

Access and export: Settings → Your data → Export my data downloads a JSON file with your profile, sims, transcripts, reports, share cards, custom scenarios, and usage records.

Correction: edit your display name and photo in Settings.

Deletion: delete an individual sim from History → Delete this sim's data. Delete everything from Settings → Delete my account.

Leaderboard: opt-in is off by default and reversible at any time.

Share cards: each card is private until you press Publish; the photo-on-cards toggle is per user and per card.

You have these rights whether or not the law where you live requires them. See region-specific notes below.

8. GDPR (EEA / UK)

// in plain wordsLegal bases: contract to run the service, legitimate interest for security and rate limits, consent for optional photos and leaderboard. You can complain to your local data authority.

If you're in the EEA or UK, we process your personal data under the following legal bases: (a) contract — to provide the sim service you signed up for; (b) legitimate interest — to keep the platform secure, rate-limit abuse, and improve reliability; (c) consent — for optional features like uploading a profile photo, appearing on the leaderboard, or publishing a share card.

You may access, correct, port, delete, or object to processing of your data. Use Settings → Your data for self-service, or write to hi@aisim.com.

You may lodge a complaint with your local supervisory authority. Cross-border transfers rely on the standard safeguards described in section 11.

9. California (CCPA/CPRA)

// in plain wordsWe don't sell or share your data for cross-context advertising. You can access, delete, and correct it from Settings.

We do not sell your personal information and we do not share it for cross-context behavioural advertising.

California residents can request to know, access, delete, and correct their personal information using Settings → Your data or by writing to hi@aisim.com. We will not discriminate against you for exercising your rights.

10. Other regions

// in plain wordsWherever you live, the same rights apply: access, export, correction, and erasure.

Wherever you live, we honor the same rights: access, export, correction, and erasure, self-service via Settings → Your data.

Where applicable national data-protection laws grant additional rights or grievance processes, we honor those too — write to hi@aisim.com and we aim to respond within 30 days.

11. International transfers

// in plain wordsOur processors (ElevenLabs, Google, hosting) may process your data outside your country. We pick reputable providers with standard safeguards.

Your data may be processed in countries other than your own — for example, our processors ElevenLabs and Google operate infrastructure that includes the United States.

We choose reputable processors with published security commitments and standard contractual safeguards.

12. 18+ only

// in plain wordsAISIM is for adults. We ask you to confirm 18+ at signup and don't knowingly collect data from anyone younger.

AISIM covers adult-stakes scenarios (visa outcomes, salary numbers, difficult professional conversations). The service is for adults 18 and older.

We ask you to confirm 18+ at signup and do not knowingly collect data from anyone under 18. If you believe a minor has created an account, write to hi@aisim.com and we will delete it.

13. Changes and contact

// in plain wordsIf we change this policy meaningfully, we'll say so on this page. Reach us at hi@aisim.com.

We will update this page when the policy changes. Material changes will be highlighted at the top with an updated effective date.

Contact: hi@aisim.com.

Privacy.