Privacy Policy
Effective Date: February 1, 2026
At DoReps, we believe privacy matters. This policy explains what data we collect, how we use it, and what rights you have. We've written this in plain English — no legal jargon walls.
What We Collect
Account Information
When you sign up with Google, we collect:
- Your name and email address
- Profile picture (if you choose to share it)
Conversation Data
To help you improve, we store:
- Your practice conversations with Maya (our AI coach)
- Feedback and scores from each session
- Quiz answers from your onboarding assessment
Usage Data
To understand how people use DoReps, we collect:
- Which scenarios you practice
- When and how often you use the app
- What features you interact with
- Technical data like browser type and device info
Payment Information
We use Stripe to process payments. We never see or store your credit card details.Stripe handles all payment data securely. We only know if your subscription is active or cancelled.
How We Use Your Data
Improve Your Experience
- Personalize feedback and coaching based on your progress
- Track your improvement over time
- Suggest scenarios that match your skill level
Make DoReps Better
- Understand which features are helpful (and which aren't)
- Identify bugs and technical issues
- Improve Maya's coaching quality
Essential Operations
- Authenticate your account
- Process your subscription
- Send you important updates (like password resets or billing issues)
- Respond to your support requests
AI Processing
Your conversations are processed by AI to provide coaching feedback:
- Claude by Anthropic: We use Claude Sonnet 4 to power Maya, our AI coach. Your conversations are sent to Anthropic's API for processing.
- Anthropic API: We use Claude (Anthropic) directly to power Maya and process your conversations for coaching feedback.
Important: We do not use your conversations to train AI models. Anthropic's data usage policy prohibits training on customer data without explicit consent.
Third-Party Services
DoReps relies on trusted third-party services:
| Service | Purpose | Data Shared |
|---|---|---|
| Authentication | Email, name, profile picture | |
| Stripe | Payment processing | Email, subscription status |
| Anthropic | AI conversations | Conversation text |
| Meta (WhatsApp) | Optional messaging channel | Phone number, messages (if you link WhatsApp) |
| Telegram | Optional messaging channel | Chat ID, messages (if you link Telegram) |
| Google Cloud Platform | Infrastructure & database | All DoReps data |
| Google Cloud Run | Application hosting | Technical logs, request metadata |
| PostHog | Analytics | Usage data (anonymized) |
Each service has its own privacy policy. We've chosen providers that prioritize security and privacy.
Data Storage & Security
Where We Store Data
Your data is stored in Google Cloud SQL in the Canada (northamerica-northeast1) region.
How We Protect It
- Encryption at rest: All database data is encrypted using industry-standard encryption
- Encryption in transit: All connections use HTTPS/TLS
- Access controls: Only authorized team members can access production systems
- Regular backups: Daily automated backups with 30-day retention
No Data Broker
We never sell your data. We don't work with data brokers, ad networks, or marketing companies. Your conversations stay private.
Data Retention
- Conversations: Kept until you delete them or delete your account
- Account data: Kept while your account is active
- Usage analytics: Aggregated data kept for up to 1 year
- Deleted data: Permanently removed within 30 days of deletion request
Crisis Data Protection
If Maya detects language related to self-harm, suicidal thoughts, or severe distress:
- The conversation is immediately paused
- We provide crisis hotline information
- These messages are never stored, logged, or used for any purpose
Crisis data protection is automatic. You don't need to do anything to enable it.
Your Rights
You have complete control over your data:
Access Your Data
View all your data in the app at any time. Go to Settings → Data & Privacy.
Export Your Data
Download a copy of all your conversations, feedback, and account data. We'll send you a JSON file within 24 hours.
Delete Your Data
Delete individual conversations or your entire account:
- Delete conversations: Settings → Data & Privacy → Delete All Conversations
- Delete account: Settings → Data & Privacy → Delete My Account
Account deletion is permanent. All your data is removed within 30 days.
Opt Out of Analytics
We use PostHog for usage analytics. While we only track identified users (not anonymous visitors), you can request to opt out by contacting us.
Cookies & Tracking
DoReps uses minimal cookies:
- Authentication cookie: Required to keep you logged in (next-auth.session-token)
- Analytics: PostHog uses localStorage for analytics tracking
We don't use advertising cookies or third-party tracking pixels.
Children's Privacy
DoReps is not intended for anyone under 18. We don't knowingly collect data from minors. If we learn that we've collected data from someone under 18, we'll delete it immediately.
International Users
DoReps is operated from Canada. If you're outside Canada, your data will be transferred to and stored in Canada. By using DoReps, you consent to this transfer.
European users: We comply with GDPR. You have the right to access, rectification, erasure, restriction, data portability, and objection.
Changes to This Policy
We may update this privacy policy from time to time. If we make significant changes, we'll notify you via email or an in-app message before they take effect.
You can always view the current version at doreps.app/privacy.
Contact Us
Questions about privacy? We're here to help:
Last updated: February 1, 2026 · Terms of Service · Back to DoReps