Privacy Policy

Version 1.0. This policy covers the Tessa mobile app for iPhone, iPad and Android, and the service behind it at api.urhired.ie.

1. Who we are

Tessa is built and run by URHired Limited, a company registered in Ireland under number 722170, with its registered office at 6 Fern Road, Sandyford, Dublin, D18 FP98, Ireland.

We are the data controller for the information described here.

• General contact: support@urhired.ie
• Privacy and data protection requests: privacy@urhired.ie
• Phone: +353 83 804 6428

2. The short version

• You sign in with Apple or Google. We never see or hold your password.
• We keep what the app needs to coach you: your CV text, your practice interviews and their feedback, your answers to the six setup questions, and your subscription status.
• The five setup answers about how you think and work (ADHD, autism, dyslexia, anxiety, or none) count as health data under EU law. We ask for your explicit consent before we use them, and the app works without them.
• We do not sell your data. We do not share it with advertisers. There is no advertising, analytics or tracking software in the app. No data is used to build a profile of you for marketing, and nothing is shared with recruiters, employers or job boards.
• Your spoken interview audio streams from your phone to our voice provider so Tessa can hear you and answer. We do not store the audio ourselves.
• Deleting your account in the app deletes your data straight away. There is no waiting period and no archive copy.

3. What we collect, and why

3.1 Account information

When you sign in with Apple or Google we receive, through Firebase Authentication:

We never receive your Apple or Google password, and we do not offer a password of our own.

3.2 Your setup answers

The six onboarding questions and the comfort sheet:

• How you think and work: ADHD, autism, dyslexia, anxiety, or none of these. See section 4, this is health data.
• Career stage, job-search timeline, preferred communication style, and what you find hardest about interviews.
• Comfort settings: reduced motion, spoken prompts on or off, numbers on or off.

Every one of these is optional and you can change or clear them in Profile.

3.3 Your CV

• The file you upload is not stored. It is streamed straight to our text model provider, which returns a structured record, and the file itself is then discarded. We keep no document store and no file bucket.
• We do keep the text of your CV and the structured record built from it, so the app can tailor questions, run CV checks and rebuild exports without asking you to upload the file again.
• We keep the file name, file type and size for display in your CV list.
• If you paste your CV instead, or build one in the app, we keep exactly the same thing: the text and the structured record.
• Job adverts you paste in for a CV check or a tailored interview are kept with that check or interview.

3.4 Practice interviews

For each session: the company and role you set up, the interview type, the questions and your answers as recovered text, how long it ran, how many turns there were, the scores (confidence, clarity, detail), the strengths and improvements list, and the closing tip.

A raw turn-by-turn transcript is written when a session ends and is cleared again once the analysed version replaces it. It only stays where an analysis failed or nobody spoke.

3.5 Audio from the spoken interview

The microphone is used only while a practice interview is running, and only after you allow it on the system prompt.

Audio streams directly from your phone to ElevenLabs, the company that runs the voice side of the interview. It does not pass through our servers and we do not record or store it. ElevenLabs holds the conversation audio and transcript on its own systems under our account, tagged with your internal user ID and no other identifier. That material is deleted within 30 days of the session. ElevenLabs may retain limited data briefly for security and abuse-prevention purposes in line with its data processing terms.

We never use the microphone outside a session you started, and the app has no camera feature at all.

3.6 Subscription and payment

• Payment is taken by Apple or Google, not by us. We never see your card number, billing address or full purchase receipt.
• We store an anonymous subscription ID (a keyed hash of the identifier your sign-in provider gives us), whether your access is active, which plan is running, when it expires, and whether it is set to renew.
• If an organisation gave you access, we store that grant and its end date.

3.7 Support messages

If you write to us through Profile, Help, we store the message and who sent it, so staff can read it and reply to the email address on your account.

3.8 Service and security records

• Per-day counts of how many practice sessions you started and how many seconds of voice they used, so fair use limits can be applied.
• Server logs holding request paths, response codes, timestamps and error details, kept for 30 days.
• A record of every time a staff member opens account data that includes health answers. This audit trail is required of us by law and, as explained in section 11, it outlives your account without holding anything that identifies you.

3.9 What stays on your phone

Your comfort settings, whether you have finished onboarding, any downloaded session audio, and any interview reminders you scheduled. All of it goes when you delete the app.

3.10 What we do not collect

No location data. No contacts. No photos or camera access. No advertising ID. No device fingerprinting. No third-party analytics or crash-reporting software. No tracking across other companies' apps or websites.

4. Health data, and your explicit consent

Telling us you have ADHD, autism, dyslexia or anxiety is information about your health under Article 9 of the GDPR. That has three consequences, and we hold ourselves to all of them.

1. We ask before we use it. During setup, a sheet explains what Tessa does with your answers and you confirm it. We record the date you agreed and the version of the wording you agreed to. If we change that wording materially, we ask again rather than treating an old yes as covering new text.
2. Without that consent, the answers do nothing. They are not sent into the interview prompt, and they do not shape the questions.
3. No diagnosis ever leaves our server. When consent is in place, the answers are translated into plain interview behaviour (for example, more patience after a pause, or shorter questions) before anything is sent to a model provider. The provider is never told that you have any condition.

You can withdraw consent at any time in Profile, or by clearing the answers. Withdrawal stops future use. It does not undo interviews that already happened.

5. Why we use your information, and our legal basis

Where we rely on legitimate interests, we have weighed them against your rights and use the least intrusive option that works. You can object, see section 12.

6. Automated processing

Scores, strengths, improvements and the closing tip are produced automatically from what you said in the session. They are practice feedback and nothing else.

• They are not a decision about you in the legal sense, they produce no legal or similarly significant effect, and nobody outside your account sees them.
• They are not a diagnosis, a clinical assessment or a psychometric test.
• They are not shared with employers, recruiters or your organisation.
• They can be wrong. Treat them as a coaching prompt, not a verdict.

You can ask a person to look at any score you think is unfair by writing to privacy@urhired.ie.

7. Who your information goes to

We use a small number of processors. Each one is bound by a written data processing agreement, each is limited to the purpose below, and none of them may use your data for their own purposes or for training their models on our account's terms.

OpenAI retains API content for up to 30 days for abuse monitoring under its enterprise terms and then deletes it, and does not train on it.

Our own staff can see account data through an internal panel, restricted by role, and every read of health data is logged.

We will also disclose information if the law requires it, to establish or defend legal claims, or to protect someone's safety. If our business is sold or reorganised, your data may move with it, and this policy continues to apply until you are told otherwise.

We never sell your data and we never share it for advertising.

8. Transfers outside the EEA

Some providers above process data in the United States. Those transfers rely on the European Commission's standard contractual clauses, and where the provider is certified, on the EU-US Data Privacy Framework. We have assessed each transfer and applied additional measures such as encryption in transit and the removal of direct identifiers before content is sent. Ask us at privacy@urhired.ie for a copy of the safeguards.

9. How long we keep things

10. Deleting your account

Profile, then Delete account. We ask you to sign in again first, so a mis-tap cannot do it.

When you confirm:

1. Your account row and everything hanging off it goes immediately: profile, health answers, every CV, every CV check, every interview, every practice session, your usage counts and your support messages.
2. Your sign-in credential is deleted, so the account cannot be reached again.
3. Any other device you were signed in on is cut off the next time it calls us and clears its local copy.
4. Your subscription record is deleted unless there is live billing attached to it, which we cannot cancel on your behalf.

There is no grace period and no recovery. Signing in again later starts a fresh, empty account.

Two things survive on purpose, and neither identifies you once your account is gone: the staff access audit trail (internal IDs only) and any record of an access grant your organisation bought.

Cancel your subscription yourself. Deleting your account does not cancel it. Only the App Store or Google Play can, in your device's subscription settings.

You can also ask us to delete your account by writing to privacy@urhired.ie from the address on the account.

11. Keeping it safe

• Everything travels over TLS.
• Provider API keys live only on our server. The app ships with no provider keys of any kind. Voice sessions use a single-use token minted per session.
• Firebase App Check gates the endpoint that mints those tokens.
• Every request is checked against a live credential, so a deleted or revoked account stops working straight away.
• Staff access is limited by role and, for health data, logged.
• The database is not reachable from the public internet.

No service can promise perfect security. If a breach puts your rights at risk we will tell you and the Data Protection Commission as the GDPR requires.

12. Your rights

Under the GDPR you can ask us to:

• Give you a copy of your data, and give it in a portable format.
• Correct anything wrong.
• Delete your data. The in-app delete does this immediately.
• Restrict or object to processing based on legitimate interests.
• Withdraw consent, for health answers, the microphone or reminders, at any time, without affecting what was lawful before you withdrew it.

Write to privacy@urhired.ie. We reply within one month. There is no charge unless a request is clearly excessive.

If you are unhappy with how we handled it, you can complain to the Irish Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, www.dataprotection.ie. If you live in another EEA country you can complain to your own supervisory authority instead.

13. Age

Tessa is for people aged 16 and over. We do not knowingly collect anything from under-16s. If you believe a child has an account, write to privacy@urhired.ie and we will delete it.

14. Access bought by a college or employer

If a college, employer or club paid for your access, they give us your email address so the grant can be applied. They are told whether the access was claimed and when it ends.

They are never shown your CV, your interviews, your scores or your health answers. Your practice stays yours.

15. Notifications

Interview reminders are scheduled on your phone, not sent from our servers. Turn them off in Profile or in your system settings.

16. Changes

If we change this policy we will update the version and date at the top and, where the change matters to you, tell you in the app before it takes effect. Material changes to how we use health answers always mean asking for your consent again.

17. Contact

URHired Limited, 6 Fern Road, Sandyford, Dublin, D18 FP98, Ireland
Privacy: privacy@urhired.ie · Support: support@urhired.ie

Appendix A. Apple App Store privacy label

For the "App Privacy" questionnaire in App Store Connect. Nothing below is used for tracking, and nothing is used for third-party advertising.

Data linked to you (collected and tied to your identity):

Data used to track you: none.
Data not linked to you: none.

Answer No to "Do you or your third-party partners use data for tracking?"

Note for review: audio is streamed for the live interview and is not stored by the developer. Declare it as User Content, App Functionality.

Appendix B. Google Play Data safety

Also declare: data is encrypted in transit, users can request data deletion, and give the in-app path (Profile, Delete account) plus the web URL https://urhired.ie/delete-account required by Play's account deletion policy.

Appendix C. Sub-processor list

Publish this list and update it before adding anyone new.