Privacy Policy

This Privacy Policy governs your use of the AI Porada macOS application (the "App"). It outlines the types of data we collect, how we store it, how it may be used, with whom it may be shared, and your choices regarding these uses and disclosures. Please read this Privacy Policy carefully before using the App.

"GDPR" means the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

"EEA" includes all current Member States of the European Union and the European Economic Area.

"CCPA" means the California Consumer Privacy Act of 2018.

"Process", in respect of personal data, includes to collect, store, use, and disclose to others.

Please check our Terms of Use (the "Terms") for the meaning of defined words (those with capital letters) not explicitly defined in this Privacy Policy.

IvorySoft LLC, Yulii Zdanovskoi st. 36V, apt. 219, Kyiv, 03022, Ukraine will be the controller of your personal data.

AI Porada is designed with privacy as a foundation. Before describing what data we collect, we want to be clear about what we do not collect:

• No audio recordings stored or transmitted: Audio captured from your microphone and system audio is processed in real time for transcription only and is immediately discarded. We never store or transmit your audio to IvorySoft servers.

• No screenshots stored or transmitted: Screenshots captured for AI context analysis are processed in real time and immediately discarded. They are never stored or transmitted to IvorySoft servers.

• No account required: The App operates fully without a user account. We do not collect your email address, name, or any personal identifying information.

• No API keys transmitted to us: If you provide your own API keys (OpenAI, Anthropic, Google Gemini), those keys are stored exclusively in the macOS Keychain on your device and are sent directly from your machine to the respective AI provider. IvorySoft never sees or has access to your API keys.

We collect limited anonymous data automatically when you use the App:

3.1. Usage Analytics: • Anonymous device ID: A randomly generated identifier stored in macOS UserDefaults, used solely for analytics continuity across sessions. This ID is not linked to any personal information. • Event data: Anonymous app usage events (e.g., feature interactions, session counts, subscription status) collected via Amplitude and Google Analytics (Firebase). This data does not include your audio, transcripts, or conversation content.

3.2. Crash & Diagnostics Data: • Crash reports: Crash logs, stack traces, and device state information collected via Firebase Crashlytics to help us diagnose and fix App issues. Crash data may include your macOS version, device architecture, and App state at the time of the crash — but does not include your audio, transcripts, or any conversation content.

3.3. Transaction Data: • App Store transactions: When you purchase a subscription, all payment processing is handled exclusively by Apple Inc. via the Mac App Store. We do not collect or store your credit card or financial account data. We may receive transaction metadata such as the date, type, and amount of the purchase via StoreKit.

AI Porada requires the following macOS system permissions to function. These permissions are requested explicitly and are used solely for the purposes described:

4.1. Microphone Access: Required to capture your voice during interview sessions for real-time transcription. Audio is processed locally or sent to your chosen AI provider (based on your settings) for transcription only. Audio is not recorded, stored, or transmitted to IvorySoft servers.

4.2. Screen Recording Permission: Required to capture system audio (interview questions played through your speakers) and to take optional screenshots for context-aware AI analysis. Captured content is processed in real time and immediately discarded. IvorySoft never receives or stores your screen content or system audio.

You can revoke these permissions at any time in System Settings → Privacy & Security. Revoking either permission will disable the corresponding App features.

AI Porada includes a stealth overlay window that can be configured to be invisible to screen recording and screen sharing software. This feature is designed to keep the App's assistance private during your interview session. The stealth window displays AI suggestions only to you on your local display. No data is transmitted differently when stealth mode is active — it is purely a local display feature.

AI Porada sends your interview transcripts (text only — no audio, no screenshots unless you enable screenshot analysis) to AI providers to generate answer suggestions. These providers are chosen and configured by you:

• OpenAI (GPT models) — your transcripts are sent directly from your device to OpenAI using your own API key. OpenAI's data practices are governed by OpenAI's Privacy Policy (https://openai.com/privacy).

• Anthropic (Claude models) — your transcripts are sent directly from your device to Anthropic using your own API key. Anthropic's data practices are governed by Anthropic's Privacy Policy (https://www.anthropic.com/privacy).

• Google LLC (Gemini models) — your transcripts are sent directly from your device to Google using your own API key. Google's data practices are governed by Google's Privacy Policy (https://policies.google.com/privacy).

IvorySoft does not intermediate, log, or store any content sent to or received from these AI providers.

7.1. To provide and operate the App. We use anonymous analytics data to understand how the App is used, ensure it functions correctly, and prevent technical issues.

7.2. To analyze and improve the App. We analyze usage events to evaluate feature adoption, diagnose performance issues, and prioritize improvements.

7.3. To process your subscription. We use Apple Inc. as our payment processor for all Mac App Store purchases. Transaction metadata received via StoreKit is used solely to manage your subscription status within the App.

7.4. To send marketing communications. We do not collect your email address through the App and therefore do not send you marketing emails directly from the App. If you contact us voluntarily, we may respond and, with your consent, add you to a mailing list. You can opt out at any time by contacting artem@ivorysoft.co.

7.5. To comply with legal obligations. We may process, use, or share your data when the law requires it, including when requested by a law enforcement agency through lawful means.

This section applies only to users based in the EEA. We process your personal data under the following legal grounds:

8.1. Performance of our contract with you — to provide the App and manage your subscription.

8.2. Our legitimate interests (unless overridden by your rights and freedoms): • To analyze and improve the App — our interest in understanding anonymous usage patterns to make the App better • To prevent fraud and enforce our Terms — our interest in protecting the App and its users

8.3. Compliance with legal obligations — where we are required by law to process or retain certain data.

Amplitude: We use Amplitude to collect anonymous event analytics about how you interact with the App. Amplitude's data practices are governed by Amplitude's Privacy Policy (https://amplitude.com/privacy).

Google Analytics for Firebase: We use Google Analytics (via the Firebase SDK) to collect anonymous usage data and App performance metrics. Google's data practices are governed by Google's Privacy Policy (https://policies.google.com/privacy).

Firebase Crashlytics: We use Firebase Crashlytics to collect crash reports and diagnostic data to diagnose and fix App issues. Crash data may include device identifiers and App state at the time of the crash. Google's data practices are governed by Google's Privacy Policy (https://policies.google.com/privacy).

You can opt out of analytics data collection by contacting us at artem@ivorysoft.co.

10.1. Analytics and crash reporting providers: • Amplitude, Inc. — receives anonymous event data • Google LLC (Firebase Analytics, Firebase Crashlytics) — receives anonymous usage and crash data

10.2. Payment processor: • Apple Inc. — processes all subscription payments through the Mac App Store

10.3. AI providers (at your direction): Your transcripts are sent to the AI provider you select (OpenAI, Anthropic, or Google Gemini) using your own API key. This transmission happens directly from your device to the provider — IvorySoft is not a party to this data flow.

10.4. Law enforcement and public authorities: We may disclose data to enforce our Terms, protect our rights, and respond to lawful requests from courts, law enforcement agencies, and regulatory authorities.

10.5. Mergers and acquisitions: As we develop our business, we may buy or sell assets or business offerings. Anonymous analytics data may be one of the transferred assets. We will notify you of any such transfer by updating this Policy.

• Analytics and crash data is stored on the servers of our service providers (Amplitude, Google) in accordance with their security standards • Your API keys are stored exclusively in the macOS Keychain on your device and are never transmitted to IvorySoft • No audio, transcript, or screenshot data is stored by IvorySoft • While we strive to protect the data we do collect, no method of electronic transmission or storage is 100% secure

• Analytics data: Retained according to each provider's retention policies (typically 12–26 months for Amplitude; Google Firebase retention is configurable) • Crash reports: Retained for up to 90 days by Firebase Crashlytics • Anonymous device ID: Stored locally in macOS UserDefaults until you uninstall the App or clear App data • Transaction metadata: Managed by Apple in accordance with Apple's data retention policies

Your anonymous analytics and crash data may be transferred to and processed in the United States, where our service providers (Google, Amplitude, Apple) maintain servers. These countries may have different data protection laws. By using the App, you consent to such transfers. We ensure appropriate safeguards are in place through standard contractual clauses and other legal mechanisms.

To be in control of your personal data, you have the following rights:

• Access / Review / Correct: You may request information about the data we hold about you by contacting artem@ivorysoft.co. Because we do not collect personally identifying information, we may be unable to identify your specific data without additional context. • Erasure: You can request deletion of any personal data we hold by contacting artem@ivorysoft.co. • Restriction: You can ask us to stop using all or some of your data by contacting artem@ivorysoft.co. • Portability: You may request your data in a structured, machine-readable format by contacting artem@ivorysoft.co. • Object: You may object to processing based on legitimate interests. • Withdraw Consent: Where processing is based on consent, you may withdraw it at any time. • Analytics Opt-Out: You can opt out of analytics data collection by contacting artem@ivorysoft.co. • Lodge a Complaint: You have the right to lodge a complaint with a competent data protection supervisory authority in your jurisdiction.

We will respond to requests within 30 days.

This section applies only to residents of California, United States.

Under CCPA/CPRA you have the right to: • Right to Know: Request the categories and specific pieces of personal information we have collected about you • Right to Delete: Request deletion of your personal information • Right to Opt-Out of Sale/Sharing: IvorySoft does not sell your personal data. We share anonymous analytics data with Amplitude and Google for analytics purposes, which may constitute "sharing" under CCPA. You may opt out by contacting us at artem@ivorysoft.co. • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To make a CCPA request, contact artem@ivorysoft.co with "California privacy rights request" in the subject line. Include your full name, address, and a statement that you are a California resident. We will respond within 45 days.

AI Porada is designed for adults (18+) conducting job interviews. We do not knowingly collect personal data from anyone under 18. If you believe a minor has used the App, please contact us at artem@ivorysoft.co.

We may modify this Privacy Policy at any time. If we make material changes, you will be notified through the App or other available means. By continuing to use the App after changes become effective, you agree to be bound by the revised Privacy Policy.

Please contact us with any questions regarding this Privacy Policy. Email: artem@ivorysoft.co Website: aiporada.com Attention of: Customer Support, IvorySoft LLC.