Privacy Policy
Last Updated: June 2026
Data Controller: MocklyAI Ltd
MocklyAI Ltd (“Mockly,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use our AI-powered interview practice platform.
By using Mockly, you agree to the collection and use of your information as described in this policy.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Name and preferred name (nickname)
- Email address and password
- Age confirmation (whether you are 18 or over)
- Career stage (apprentice, intern/placement, or graduate)
- Target sector
- Referral source (how you heard about us)
1.2 Interview Data
When you use Mockly to practise interviews, we collect:
- Video and audio recordings of your interview sessions
- Transcripts generated from your interview audio
- AI-generated performance scores, feedback, annotations, and coaching recommendations
- Session metadata including timestamps, question categories, and session duration
1.3 CV and Job Description Data
If you upload a CV or paste a job description, we collect and store that content to personalise your interview questions and feedback.
1.4 Subscription and Payment Data
When you subscribe to Mockly Pro, our payment processor (Stripe) collects your payment card details. We do not store your full card number. We retain your Stripe customer ID, subscription status, and billing history.
1.5 Device and Usage Information
We automatically collect:
- Device type, operating system, and browser
- IP address
- Features used, pages visited, and interaction patterns
- Device capability information (used to determine whether eye-contact analysis can run on your device)
1.6 Cookies
We use essential cookies for session management and authentication. We do not use third-party advertising or tracking cookies.
2. Legal Basis for Processing (UK GDPR)
We process your data on the following legal bases:
- Contractual necessity: delivering the interview practice service you signed up for, processing your subscription, and managing your account.
- Legitimate interest: maintaining platform security, preventing fraud, fixing bugs, and understanding how users interact with the service to improve it.
- Consent: sending marketing communications (where you have opted in) and using your transcripts to improve our prompts and grading systems (where you have opted in). You can withdraw consent at any time.
- Legal obligation: retaining payment records for tax compliance, and responding to lawful requests from authorities.
3. How We Use Your Information
We use your information to:
- Deliver the interview practice service: generating questions, recording your responses, transcribing audio, producing AI-generated feedback and scores
- Manage your account and subscription
- Personalise your interview experience based on your CV, job description, career stage, and sector
- Communicate with you about your account, including service updates and support responses
- Send you marketing communications about Mockly (only where you have opted in, and you can opt out at any time)
- Improve our prompts and grading systems using your interview transcripts (only where you have separately opted in to this, see section 3.1)
- Prevent fraud, enforce our terms, and maintain platform security
- Comply with legal obligations
3.1 Use of Transcripts for Product Improvement
If you opt in during onboarding (or later via your account settings), we may review your interview transcripts to improve Mockly's question prompts and grading rubrics. This helps us make the feedback more accurate and useful for all users.
Important: only transcripts are used for this purpose, never your video or audio recordings. Video and audio are stored solely for your own replay benefit. You can change your opt-in preference at any time in your account settings, and withdrawing consent means your transcripts will no longer be used for improvement going forward.
Users under 18: the transcript improvement opt-in is not offered to users under the age of 18. We do not use minors' transcripts for product improvement.
4. Data Sharing
We do not sell your personal data. We share data only with the following categories of service providers, strictly for the purposes of delivering and operating Mockly:
| Provider | Purpose |
|---|---|
| Anthropic | Processes your interview transcripts for AI-powered grading, feedback generation, and question generation |
| Deepgram | Transcribes your interview audio into text |
| Amazon Web Services (AWS) | Stores your interview video and audio recordings, and hosts infrastructure |
| Supabase | Provides authentication, database, and backend services |
| Stripe | Processes subscription payments |
| Resend | Sends transactional emails, account verification links, and marketing communications (where opted in) |
| PostHog | Collects anonymised usage analytics, session recordings, and page interaction data to help us understand how users interact with the platform and improve the user experience |
| Sentry (error tracking) | We use Sentry to monitor errors and exceptions in our service. When something goes wrong, Sentry receives information about the error including: the error type and message, the page or feature where it occurred, browser type and version, and an anonymised user ID (if you are signed in). Sentry does NOT receive: your email address, your name, your IP address, your password, your payment details, or the content of your interview answers. This processing is necessary for the integrity and security of our service and is based on legitimate interest under UK GDPR Article 6(1)(f). Error tracking does not require your consent because it does not involve profiling, advertising, or behavioural analysis. Sentry is operated by Functional Software, Inc., based in the United States. Data is transferred internationally under appropriate safeguards. Sentry's privacy policy: https://sentry.io/privacy/ |
We may also share your data:
- With legal authorities, if required by law or in response to a valid legal process
- In aggregated, anonymised form that cannot identify you, for research or public reporting
We will not share your identifiable interview recordings with any third party without your explicit consent.
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Video and audio recordings | 1 year from the date of the interview, then automatically deleted from storage. You can also delete any interview yourself at any time via the dashboard. |
| Transcripts and AI feedback | Retained as part of your interview record for as long as the interview exists, i.e. until you delete the interview, delete your account, or your account is closed. |
| Account data (profile, preferences) | Retained while your account is active. Deleted within 90 days of account closure. |
| Payment records | 7 years after the transaction, as required for UK tax compliance. |
| Support correspondence | 2 years from the date of the inquiry. |
When you delete an individual interview via the dashboard, or delete your account entirely, we delete the associated video, audio, transcripts, and AI feedback from our systems, including from cloud storage. Some data may persist in encrypted backups for a limited period before being purged.
6. Data Security
We take reasonable measures to protect your data, including:
- TLS 1.2+ encryption for data in transit
- AES-256 encryption for data at rest
- Access controls and authentication on all systems
- Webhook signature verification on payment events
- Rate limiting on public-facing endpoints
No system is perfectly secure. If we become aware of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours as required by UK GDPR, and will inform affected users without undue delay.
7. Users Under 18
Mockly is available to users aged 16 and over. We recognise that many of our users, particularly those applying for apprenticeships, may be aged 16 or 17.
For users under 18:
- Marketing communications: the marketing opt-in is not offered to users who indicate they are under 18. We do not send marketing emails to minors.
- Transcript improvement: the opt-in to allow transcript use for product improvement is not offered to users under 18. We do not use minors' transcripts for this purpose.
- Data handling: we handle all users' data with care, and apply additional caution to data belonging to users under 18, in line with the UK Information Commissioner's Age Appropriate Design Code.
- Deletion: users under 18 can delete their own interviews and account data at any time via the dashboard, without needing to contact us.
8. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access: request a copy of the data we hold about you
- Right to rectification: request correction of inaccurate data
- Right to erasure: request deletion of your data (you can also delete interviews and your account directly via the dashboard)
- Right to restrict processing: request that we limit how we use your data
- Right to data portability: request your data in a portable format
- Right to object: object to processing based on legitimate interest
- Right to withdraw consent: withdraw consent for marketing or transcript improvement at any time via your account settings or by contacting us
- Right to lodge a complaint: you can complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data rights have been violated
To exercise any of these rights, contact us at contact@mocklyai.co.uk. We aim to respond within one month, as required by UK GDPR.
9. International Data Transfers
Your data may be processed by our service providers in countries outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner, to protect your data to a standard equivalent to UK GDPR.
10. Cookies
We use cookies and similar tracking technologies to operate and improve our platform. Cookies are small data files stored on your device when you visit a website.
Types of Cookies We Use
| Cookie Category | Purpose & Providers | Legal Basis |
|---|---|---|
| Essential Cookies | Authentication (via Supabase) and security session tracking. These are strictly necessary to let you log in and practice interviews. | Strictly necessary for the performance of our contract with you (UK GDPR Art 6(1)(b)). |
| Analytics Cookies | Anonymised analytics and interaction tracking (via PostHog). Helps us optimize dashboard features and performance. | Your active consent (PECR compliant opt-in, UK GDPR Art 6(1)(a)). |
We do not use third-party advertising cookies, trackers, or dynamic pixels for behavioural targeting.
Your Consent and Right to Withdraw
Non-essential analytics cookies are only set if you click "Accept all cookies" on our cookie consent banner. You have the right to withdraw your consent at any time.
To withdraw consent and stop analytics tracking, you can:
- Go to your Privacy Settings page while logged in, and click "Reset Cookie Preferences". This will clear your choice and prompt the banner again.
- Alternatively, clear your browser's cookies and local storage for mocklyai.co.uk.
- You can also configure your browser to block all cookies, though disabling essential cookies will prevent you from signing in to your Mockly account.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice on the platform. Your continued use of Mockly after a change constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or want to exercise your data rights:
Email: contact@mocklyai.co.uk
Data Controller: MocklyAI Ltd
Document Version: 3.0 | Last Reviewed: June 2026