Privacy Notice

This Privacy Notice explains how Nenad Blaženović ("we", "us", "our"), the operator of Konzul (the "Service"), collects, uses, shares, and protects personal data. We are the data controller for the personal data described below.

1. Personal data we collect

• Account data — name, email address, and authentication identifiers (for example, Google or Apple sign-in identifiers, or a hashed password).
• Profile and preparation data — the display name you choose, the level you select, and the answers you give during simulated interviews (text and audio recordings).
• Interview transcripts and AI outputs — the transcribed text of your spoken answers, translations, evaluations, readiness scores, and feedback generated by AI models.
• Support and communications — the content of messages you send us.
• Usage and device data — pages viewed, features used, approximate time stamps, device type, browser, and coarse IP-derived location, collected for security and product improvement.
• Payment data — handled by our Merchant of Record, Paddle. We receive limited billing metadata (for example, subscription status, plan, period, currency, country for tax) but do not receive full card numbers.

2. How we use personal data

• to create and secure your account, and to provide the Service;
• to transcribe, translate, evaluate, and simulate consular interviews using AI models;
• to display your interview history and readiness dashboard;
• to process purchases, subscriptions, invoices, and refunds through Paddle;
• to prevent fraud, abuse, and to protect the security and integrity of the Service;
• to respond to support requests and legal or regulatory obligations;
• to analyse aggregated usage patterns to improve the Service.

3. Legal bases

Where the GDPR or similar laws apply, we process personal data on the following bases:

• Performance of a contract — providing the Service you have signed up for.
• Legitimate interests — securing the Service, preventing abuse, improving the product, and communicating operationally with users.
• Consent — for optional features that require it (for example, non-essential cookies or marketing communications, where applicable). You can withdraw consent at any time.
• Legal obligation — retention of billing and tax records, responding to lawful requests from authorities.

4. Voice recordings and AI processing

Simulating an interview requires recording, uploading, and transcribing your spoken answers. Audio is stored in our secure storage bucket and processed by third-party AI providers for transcription, translation, evaluation, and speech synthesis. Recordings and transcripts are associated with your account and are visible to you in your interview history. You can delete interviews from your account at any time.

5. Who we share personal data with

We share personal data with the following categories of recipients:

• Merchant of Record — Paddle for the sale of subscriptions, payment processing, subscription management, tax compliance, invoicing, and refund handling.
• Hosting and database — our cloud infrastructure provider that hosts the application, database, and audio storage.
• AI model providers that provide transcription, chat completion, translation, and speech synthesis capabilities used by the Service.
• Authentication providers where you choose to sign in with Google or Apple.
• Professional advisers such as legal, accounting, and tax advisers, where reasonably necessary.
• Authorities where required by law, regulation, or valid legal process.

We do not sell your personal data.

6. International transfers

Personal data may be processed outside your country of residence, including outside the UK/EEA, by service providers based in other jurisdictions. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

7. Retention

We retain personal data for as long as your account is active, and for a limited period afterwards where necessary to comply with legal obligations, resolve disputes, and enforce our agreements. Interview transcripts and audio associated with a deleted interview are removed from active storage within a reasonable period. Billing records handled by Paddle are retained as required by tax and accounting laws.

8. Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to withdraw consent where processing is based on consent. Where the GDPR applies, you also have the right to lodge a complaint with your local supervisory authority. We aim to respond to verified requests within one month.

9. Security

We implement appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, authenticated APIs, and least-privilege service credentials. No online service is completely secure; you are responsible for keeping your credentials confidential.

10. Cookies

We use a small number of cookies and equivalent browser storage for essential functionality, such as keeping you signed in and remembering your preferences. We do not currently use third-party advertising cookies. Where non-essential cookies are introduced, we will ask for consent as required.

11. Children

The Service is not directed at children under the age required to consent to online services in their country. If you believe a child has provided us with personal data, please contact us so we can remove it.

12. Changes

We may update this Privacy Notice from time to time. Material changes will be communicated through the Service or by email where appropriate.

13. Contact

For privacy questions or to exercise your rights, contact us through the in-app support channel. Billing-related privacy questions can also be raised with Paddle at paddle.net.