Privacy Notice

Last updated: July 25, 2026

This notice explains what personal data Practicum collects, why we collect it, who we share it with, and the choices you have. Practicum is a training/practice tool for graduate counseling students — it is not therapy, clinical supervision, or a crisis service, and it should not be used with real client information.

Please do not enter real client information. The AI "clients" you speak with are fictional. Do not use Practicum to rehearse sessions using identifiable details about real people you are working with — use anonymized or invented scenarios instead.

Who is responsible for your data

Practicum is operated by Tyler Sullivan (sole trader), acting as the data controller. You can reach us at Practicum.AI.Training@gmail.com.

What we collect

Account and profile info: email address and password (hashed), display name, graduate program, year of study, and self-reported experience level.
Voice input: when you speak in a session, your audio is sent to our AI gateway for real-time speech-to-text and text-to- speech. Raw audio is processed transiently — we do not retain the raw audio recordings after transcription.
Session transcripts and AI feedback: the text transcript of your practice session, the AI's simulated client responses, your scores, and the qualitative feedback and rewrites the AI generates.
Speech pattern analytics: derived metrics such as words-per-minute pacing, talk-time ratio, silence tolerance, and filler-word counts.
Progress data: streaks, XP, levels, number of sessions and notes completed, and custom scenarios you create.
Subscription status: your plan, trial status, and renewal state, provided to us by Paddle. We do not receive or store your full card number.
Technical data: basic device/browser info and IP address used for security and abuse prevention.

Why we use it

To create and secure your account and authenticate you.
To provide the core product — running practice sessions, generating AI feedback, and saving your history.
To calculate and display your progress, streaks, and analytics.
To enforce free-trial and subscription entitlements.
To provide customer support when you contact us.
To detect and prevent fraud, abuse, and security issues.
To comply with legal obligations.

Legal bases (where GDPR applies)

We process your data to perform our contract with you (delivering the service you signed up for), based on our legitimate interests (keeping the service secure, improving it, and preventing misuse), based on your consent where we ask for it, and to comply with legal obligations.

Who we share it with

Supabase — hosting for our database, authentication, and storage.
Paddle — our Merchant of Record for payments. Paddle handles checkout, cardholder data, tax, invoicing, and subscription billing. See Paddle's privacy notice.
AI model providers — the AI models routed through our AI gateway process your voice input, transcripts, and prompts to generate simulated client responses, feedback, and text-to-speech audio.
Professional advisers and authorities — where required by law, or to protect our rights.

We do not sell your personal data to third parties.

Data retention

We keep your account and session data for as long as your account is active, so you can review your history and progress. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we're required to retain some records (for example, billing records held by Paddle for tax purposes). Raw audio is not retained after it is transcribed.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal data, and to receive a copy of your data in a portable format. You can exercise these rights by emailing Practicum.AI.Training@gmail.com. If you're in the UK or EEA, you also have the right to complain to your local data protection authority.

Security

We use appropriate technical and organizational measures — including encryption in transit, access controls, and Supabase row-level security — to protect your data. No system is perfectly secure, but we take this seriously.

International transfers

Our service providers may process your data in countries outside your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

Cookies and local storage

Practicum uses cookies and browser localStorage for essential functionality — for example, keeping you signed in, remembering that you've dismissed the "Install this app" prompt, and remembering that you've completed the in-app tutorial. We don't use third-party advertising cookies.

Children

Practicum is intended for adult graduate students. It is not directed at children under 16, and we don't knowingly collect personal data from them.

Changes to this notice

We may update this notice from time to time. When we do, we'll change the "Last updated" date at the top, and, for material changes, we'll notify you in the app or by email.

Contact

Questions or requests? Email Practicum.AI.Training@gmail.com.