Privacy Policy

1. Who we are

CabinCrewReady (“we”, “us”) operates cabincrewready.app, an interview-preparation tool for aspiring airline cabin crew. This policy explains what personal data we collect, why, and who processes it on our behalf. Contact for anything privacy-related: charles.warleyd@gmail.com.

2. What we collect

• Account data: your email address, used to sign you in and for essential service messages. If you set a password, it is stored only as a salted cryptographic hash by our authentication provider — we cannot read it, and nobody at CabinCrewReady can see it. You can also sign in with a one-time email link and set no password at all.
• Content you create: tracked applications (airline, stage, notes) and mock-interview transcripts, stored so you can return to them.
• Billing data: handled by Stripe. We store your Stripe customer ID and plan status. We never see or store your card number.
• Usage data: if analytics is enabled, we record product events (pages viewed, features used — e.g. “mock interview started”) tied to your account ID, plus basic device information, to understand and improve the product. We also keep a log of mock-interview request timestamps for rate limiting.

3. What we do with it

We use your data only to run the Service: signing you in, saving your prep work, generating AI interview replies, processing pass payments, preventing abuse, and understanding how the product is used so we can improve it. We do not sell personal data, and we do not use your interview answers to train AI models.

4. Who processes it for us

We rely on a small set of processors, each receiving only what its job requires:

• Supabase — database and authentication (your email, applications, transcripts).
• Stripe — payments and receipts (your email and payment details).
• Anthropic — AI provider; receives your mock-interview answers to generate the recruiter’s replies. Anthropic does not use API data to train its models by default.
• Vercel — hosting; processes request logs and IP addresses as part of serving the site.
• PostHog — product analytics (event data described above), when enabled.
• Sentry — error monitoring, when enabled. It receives technical crash reports (error messages and stack traces). We have configured it not to collect personal data, and it never receives your interview answers.

5. Cookies

We use cookies that are necessary for sign-in sessions, and — when analytics is enabled — a first-party analytics identifier so repeat visits count as one person. We do not run third-party advertising cookies.

6. Retention and deletion

We keep your data while your account exists. Email charles.warleyd@gmail.com from your account address to delete your account and its data; we will remove it from our systems within 30 days, except records we must keep for tax or legal reasons (e.g. Stripe payment records).

7. Your rights

Depending on where you live (including the EU/EEA, UK, and certain US states), you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Email us and we will honor these requests. You also have the right to complain to your local data-protection authority.

8. International transfers

We are based in the United States and our processors store data primarily in the US. If you use the Service from elsewhere, your data will be transferred to and processed in the US.

9. Age limit and changes

The Service is not directed at children and requires users to be at least 16. If we make material changes to this policy we will update this page and the date above. See also our Terms of Service.