Privacy policy
Delivery Notes (rehear.se) is a speech delivery coaching demo. This policy describes what we collect, why, who processes it, and how you can delete your data.
Who we are
The site operator is Alex Neill. For privacy questions or requests, email privacy@rehear.se.
What we collect
- Account data: email address and a hashed password when you sign up.
- Audio recordings: files you record in the browser or upload for analysis.
- Derived data: transcripts, filler-word counts, words-per-minute estimates, and AI-generated coaching notes stored with each recording.
- Session data: a signed session cookie, plus optional IP address and user agent stored with your login session.
We do not use advertising cookies or Google Analytics on this site.
Why we use it
We process your data only to run the demo: authenticate you, store your recordings, transcribe audio, analyze delivery metrics, and generate coaching feedback. We do not sell your data.
Processors and hosting
Your data is handled by these services under our instructions:
- Hatchbox - application hosting and PostgreSQL databases.
- Cloudflare R2 - encrypted storage for uploaded audio files (via Active Storage).
- OpenAI - Whisper transcription and GPT-4o-mini coaching generation. Audio and transcript text are sent to OpenAI when you process a recording.
- Sentry - error monitoring (may include technical request metadata if enabled in production).
- Skylight - application performance monitoring (metadata only, if enabled in production).
OpenAI retention
OpenAI processes audio and text according to its API data usage policies. OpenAI does not offer a per-customer API to delete individual requests after submission. When you delete your account, we remove copies stored in our database and in Cloudflare R2. Content already submitted to OpenAI may be retained by OpenAI for a limited period under their policies. We do not currently store OpenAI response IDs on recordings; if that changes, this page will be updated.
Retention
We keep account and recording data until you delete your account or remove individual recordings by deleting your account (recordings are tied to your user account). Inactive accounts may be removed after a reasonable period at our discretion. Application logs on the server are rotated and are not kept as a long-term archive of your content.
Your rights and account deletion
If you are in the UK, EEA, or another region with data protection laws, you may have rights to access, correct, or erase personal data.
The primary way to erase your data on this site is to sign in, open
Account,
and use Delete my account permanently. You must type DELETE or your account email to confirm.
That hard-deletes your user record, sessions, recordings, transcripts, coaching notes, and audio files from our systems.
You can also email privacy@rehear.se if you cannot access your account.
Security
Passwords are stored using one-way hashing. Traffic is served over HTTPS in production. Access to production infrastructure is limited to the operator and hosting providers listed above.
Changes
We may update this policy. The current version is always published on this page.