Privacy policy

1. What we collect

Information you give us:

• Your email address, and if you sign in with Google, your name and profile picture from your Google account.
• What you type during practice: your answers, questions and anything else you send the interviewer, and what you type into the question search.
• Any feedback you send us, such as rating a reply or a debrief.

Information created as you use Pondly:

• Your practice history: the questions you attempt, the conversation, the hints you use, and the ratings and written feedback the interviewer gives you.
• Your pass: which plan you bought, when it started and ends, and its status.
• How you use the site: the pages you visit, the buttons and links you click, which parts of a page you scroll to, the site that sent you to us and any campaign tags in the link, your device type, browser, operating system and country.

Payments are handled by Stripe. We never see or store your full card number. Stripe tells us the plan, the amount, and a customer reference so we can link the payment to your account.

2. Cookies and analytics

We use our own analytics, not advertising networks. When you visit, we set a first-party cookie (pd_anon) holding a random identifier, so we can understand how people move through the site and link your visits before and after you create an account. We also use cookies to keep you signed in.

We don't store your IP address in our analytics. We also use Vercel Analytics, which counts page visits without cookies.

You can block or delete cookies in your browser. The site still works, but you'll need to sign in again, and we won't be able to connect your visits together.

3. How we use your information

• To run your practice sessions: the AI interviewer reads the conversation so far to reply, give hints and write your debrief.
• To run your account: signing you in, showing your progress, and managing your pass.
• To take payments and send receipts, through Stripe.
• To improve Pondly: we review how sessions go, including samples of real conversations, to check the interviewer's quality and fairness, fix problems, and improve the questions and feedback.
• To understand and improve the site, using the analytics above.
• To contact you about your account, your pass or important changes. We'll only send marketing emails if you agree to them, and you can unsubscribe at any time.

We don't sell your personal information, and we don't use it for advertising.

4. The AI interviewer

Your practice conversations are processed by Anthropic, which provides the AI model behind the interviewer. Each time you reply, the conversation so far is sent to Anthropic's API to produce the interviewer's response. Under Anthropic's commercial terms, it does not use this data to train its models by default, and it keeps it only for a limited period.

Please don't put sensitive personal information, such as health, financial or identity details, into your practice answers. The questions never need it.

5. Who we share it with

We use trusted service providers to run Pondly. They handle your information only to provide their service to us:

• Supabase: our database and sign-in. Your account and practice history are stored in its Sydney, Australia region.
• Anthropic: the AI model behind the interviewer (United States).
• Stripe: payments, receipts and subscription management.
• Vercel: hosting for the website, and page-visit analytics.
• Google: if you choose to sign in with Google.
• Resend: sending sign-in codes and account emails.

We may also disclose information if the law requires it, or to protect the rights, safety or property of our users, ourselves or others.

6. Information sent overseas

Some of our providers store or process information outside Australia, mainly in the United States. We choose providers with strong security and privacy commitments, and we take reasonable steps so they handle your information consistently with the Australian Privacy Principles.

7. How long we keep it

• Your account and practice history: while your account is open. If you delete your account, we delete your profile, practice history and passes.
• Analytics: we keep usage records, but deleting your account removes the link between them and you.
• Payment records: as long as tax and accounting law requires, generally five years. Stripe keeps its own records under its policies.

8. Security

We protect your information with encryption in transit, access controls that limit each user to their own data, and server-side checks on every request. No system is perfectly secure, but we work to keep your information safe, and we'll tell you and the regulator if a breach is likely to cause you serious harm.

9. Your choices and rights

You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete your account. Email bengrech888@gmail.com, and we'll respond within 30 days. You can cancel a Monthly subscription at any time from your account menu.

10. Children

Pondly is for people preparing for professional interviews. It isn't designed for children, and you need to be at least 18, or have a parent or guardian's permission, to use it.

11. Changes to this policy

If we change this policy, we'll update the date at the top. If a change is significant, we'll tell you by email or on the site before it takes effect.

12. Contact and complaints

Questions or complaints about privacy: email bengrech888@gmail.com. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.