Draft for review. Not yet in effect; Gauntlet is invite-only while these are finalised.
Privacy Policy
Draft version 2026-10 · not yet in effect
The short version
- Gauntlet is an AI interview-practice app. To grade your answers, we send what you say or type to our AI provider, Anthropic. Anthropic is not allowed to train its models on it.
- We don't sell your data, show ads, or share your answers with employers or anyone else.
- Voice recordings are off by default. If you turn on "Keep my recordings", we store them for 30 days, then delete them automatically. Our servers otherwise store only the text of your answers.
- Please don't include confidential information about your employer, or names and details of colleagues, in your answers.
- You can download or delete your data at any time from your Profile page.
- You must be 18 or older to use Gauntlet.
1. Who we are
Gauntlet (gauntlet.neural-bridge.dev) is operated by Andy Herman, an individual located in the United States (postal address TBD) ("we", "us"). For privacy questions, contact neural.bridge.dev@gmail.com.
2. What we collect
- Account information. When you sign in with Google, we receive your Google account ID and email address. We don't receive your Google password, contacts or other Google data.
- Age confirmation. That you confirmed you are 18 or older, and when.
- Your interview profile. Target company, role, level and interview dates that you enter.
- Your practice content.
- Voice recordings of your spoken answers stored on our servers only if you turn on "Keep my recordings".
- Text transcripts of your spoken answers, and answers you type.
- Whiteboard drawings.
- Messages you send to the AI coach.
- AI-generated content about your practice. Scores, grading notes, coach replies, your practice history and schedule, streaks and badges.
- Notification settings. If you turn on reminders, a push subscription token from your browser.
- Technical information. IP address, browser and device type, and timestamps in our security logs. We don't use advertising or analytics cookies. We use one cookie to keep you signed in.
- Messages to us. If you email us, your email and its contents.
We don't ask for sensitive information such as health, religion, sexual orientation or union membership. If you choose to mention it in an answer, it will be processed like the rest of your answer, with the consent you give at signup (see section 4).
3. How we use your information
- To run Gauntlet: sign you in, run practice sessions, grade answers, power the AI coach, schedule reviews, track streaks and badges, and generate reports you export.
- To speak interview questions aloud using a text-to-speech service.
- To send practice reminders, only if you turn them on.
- To keep Gauntlet secure, prevent abuse, and fix problems.
- To respond to your requests and comply with law.
We do not use your answers to train AI models, sell them, use them for advertising, or share them with employers or recruiters. If we ever want to use your content to improve Gauntlet in a new way, we will ask you first.
Gauntlet's scores and feedback are generated by AI and may be inaccurate. They are practice aids, not assessments of your suitability for any job, and nobody uses them to make decisions about you.
4. Legal bases (for users in the EU and UK)
- Contract: to provide the service you signed up for (account, practice, grading, coach, history, export, text-to-speech).
- Consent: for reminders; for keeping voice recordings; and for processing any sensitive information you choose to include in answers. You can withdraw consent in Settings at any time. Withdrawal doesn't affect processing already done.
- Legitimate interests: for security logging and abuse prevention, and for limited processing of information about other people that you mention in answers, in support of your interest in preparing for interviews.
- Legal obligation: to keep records needed to meet legal requirements, such as your age confirmation and privacy requests.
5. Speech recognition in your browser
When you answer out loud, Gauntlet uses your browser's built-in speech recognition to turn your voice into text. In Google Chrome and on most Android devices, the browser sends your audio to Google's servers to do this. Google handles that audio under its own privacy policy (policies.google.com/privacy); we don't control it. If you prefer, you can type your answers instead.
6. Who we share information with
We share your information only with service providers who process it on our behalf under contracts that limit their use of it:
| Provider | What they do | What they receive |
|---|---|---|
| Google Cloud (Google LLC), United States | Hosting, database, storage, security logs, text-to-speech [, speech-to-text] | All data we store; question text for speech |
| Anthropic, PBC, United States | AI grading, coaching and whiteboard review | Your answers, transcripts, drawings, coach messages and relevant profile details |
Your browser's push service (for example Google, Mozilla or Apple) delivers reminders you turn on. Reminder messages don't contain your answers or target company.
We may also disclose information if required by law, to protect people's safety or our rights, or as part of a business transfer with notice to you. We do not sell or "share" personal information for targeted advertising.
7. International transfers
We and our providers are in the United States. If you use Gauntlet from outside the US, your information is transferred to and processed in the US. For transfers from the EU, UK and Switzerland we rely on:
- Google's certification under the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. Framework;
- the European Commission's Standard Contractual Clauses (with the UK Addendum) in our agreements with Google and Anthropic.
Contact us for a copy of the relevant safeguards.
8. How long we keep information
| Information | How long |
|---|---|
| Voice recordings | Not stored unless "Keep my recordings" is on; then 30 days, deleted automatically. |
| Answers, transcripts, drawings, coach chats, scores, history | Until you delete them or your account. Accounts inactive for 24 months are deleted after we email you 30 days' notice. |
| Account and profile | Until you delete your account |
| Security logs | 30 days |
| Backups | Deleted data leaves our backups within about 35 days |
| Anthropic | Anthropic deletes inputs and outputs within 30 days. Content flagged by its automated safety systems may be kept up to 2 years. |
| Google Cloud text-to-speech | Google states it does not log text or audio sent to this service |
| Privacy requests and support emails | 24 months after we close them |
9. Your choices and rights
From your Profile page you can:
- download all your data;
- edit your profile;
- delete individual answers or sessions;
- delete your account (also explained at /legal/delete-account);
- turn reminders and recording retention on or off;
- withdraw your consent for sensitive information.
You can also email neural.bridge.dev@gmail.com to access, correct, delete or port your information; object to or restrict processing; or appeal a decision we make about your request. We respond within 30 days.
- Washington residents (consumer health data). If information you provide reveals health information or if you keep voice recordings, Washington's My Health My Data Act gives you rights to confirm, access and delete that data and to withdraw consent. See our Consumer Health Data Privacy Policy. We respond within 45 days, and if we deny your request you can appeal and contact the Washington Attorney General.
- EU and UK users. You may complain to your local data protection authority, in the UK the Information Commissioner's Office. You can also complain to us first: we acknowledge complaints within 30 days.
- US state privacy laws. Where a state privacy law applies to us, we honour the rights it gives you in the same way.
- Do Not Track and Global Privacy Control. We don't track you across websites or sell or share data for advertising, so these signals don't change how we handle your data.
10. Information about other people, and your employer's confidential information
Interview answers often describe real work. Please:
- describe situations without confidential details;
- don't include trade secrets or information you've agreed to keep confidential;
- refer to people by role, not name.
If you believe Gauntlet holds information about you that another user entered, contact neural.bridge.dev@gmail.com and we will review and, where appropriate, delete it. We don't read your practice content except where you ask us to for support, or where we need to investigate abuse or respond to a legal requirement.
11. Children
Gauntlet is for people 18 and older. We don't knowingly collect information from anyone under 18. If we learn we have, we delete it. Contact neural.bridge.dev@gmail.com if you believe a minor is using Gauntlet.
12. Security
We use encryption in transit and at rest, access controls with multi-factor authentication, and least-privilege service accounts. We keep answer content out of our logs. No system is perfectly secure. If a breach affects your information, we will notify you and the relevant regulators as the law requires.
13. Changes
We will post updates here with a new effective date. For material changes, especially any new use of your practice content, we will notify you in the app before the change takes effect and ask for your consent where required.
14. Contact
Andy Herman, postal address TBD, neural.bridge.dev@gmail.com