Privacy Policy
Effective November 2, 2026
Superday Room is run by Sami Enterprises LLC, a Florida limited liability company in the United States ("we", "us"). Contact: support@superdayroom.com.
In short: you need a free account to practice. Speech-to-text, grading and camera analysis run on your device, and your voice recordings aren't uploaded to us. We don't sell your data or show ads. We count page visits with Cloudflare Web Analytics, and we use Microsoft Clarity to see how people use the site so we can improve it.
What we collect and why
- Account. You need a free account to answer questions. You sign up with your email address and a password or, where offered, continue with Google, which tells us your name and email address. We store your email, a hashed password we can't read (if you set one), an account ID and an optional display name, to sign you in and send account emails like the confirmation link and password resets. We keep emails you send us.
- Practice data. Answer transcripts, scores, feedback, what you practiced and when, questions you add and notes on grades. It's kept in your browser and your account to sync progress, fix problems and improve grading. Our server also records which questions your account has opened, because each account gets 5 free questions.
- Voice. Your recorded answers are turned into text on your device, by a speech model that runs in your browser. The audio isn't sent to us or to any speech-to-text service of ours. Your last 10 recordings stay in your browser (never uploaded) unless you turn that off in Settings → Data. You can always type instead.
- Browser speech recognition. Chrome, Edge and some other browsers also run built-in speech recognition while you record; their makers (like Google or Microsoft) may process that audio under their own policies.
- Camera (mock interviews only). Video is analyzed on your device for eye contact, expression, steadiness and framing, and is never uploaded, recorded or saved. Only summary numbers come out, treated like other practice results. We never use your face or voice to identify you.
- Payments. Stripe runs checkout and billing, and Link, a Stripe service, sells Pro to you as the merchant of record; we never see your full card number. We give Stripe your account ID and email to link the payment, and store your Stripe customer and subscription IDs, plan and end date. If a payment can't be linked to an account right away, we keep the email used at checkout with that purchase until it's linked to your account or refunded.
- Error reports. If the app hits an error, your browser sends us a short report: the error message (with anything like an email address removed), a code fingerprint of where it happened, the part of the app you were on, the app version, your browser type and, if you're signed in, your account ID. Reports never include your answers, recordings or email address. To stop floods of reports, our server briefly keeps a one-way code made from your IP address, never the address itself.
- Page analytics. Cloudflare Web Analytics counts visits to our pages: which page, the site that sent you, your country, your browser and device type, and how fast the page loaded. It sets no cookies, stores nothing in your browser and doesn't follow you to other sites.
- Usage and interactions. Microsoft Clarity records how you use our pages, such as clicks, taps, scrolling and the pages you visit, as session replays and heatmaps, plus a few events we name (for example "answer graded" or "checkout clicked") with labels like your plan and a score range. We send it no email addresses, names or answers, and we hide answer text and email addresses from its recordings. Clarity sets its own cookies to recognize repeat visits. Microsoft processes this data under the Microsoft Privacy Statement.
- Technical data. Our providers log IP addresses, browser type and request times (including sign-ins) to run and secure the service.
Stored on your device
We use browser storage to keep you signed in and hold your settings, progress, saved recordings, downloaded models, and which error reports were already sent. You can clear it in your browser settings. Microsoft Clarity sets cookies to tell visits apart (see above). Stripe's checkout pages may set their own fraud-prevention cookies.
Who we share data with
Only providers that help us run Superday Room: Supabase (database, sign-in, error reports and server functions, in the US), Stripe and Link (payments), Cloudflare (website hosting and page analytics), Microsoft (Clarity usage analytics), Resend (account emails), Google (only if you choose to continue with Google) and our email provider (when you write to us).
Your browser also loads files directly from Google Fonts, jsDelivr, Cloudflare (the analytics script) and Microsoft Clarity and, for the camera or on-device speech, from Google Cloud Storage and Hugging Face. These services see your IP address, never your answers, audio or video.
We may also disclose data when the law requires it, to protect safety or our rights, or to a buyer of Superday Room who keeps this policy. We don't sell your personal information.
How long we keep it
- Account and practice data: until you delete your account (Reset all progress in Settings → Data clears practice history sooner).
- Audio: never stored by us.
- Error reports: 30 days, or until you delete your account if that's sooner.
- Payment records: Stripe keeps its own records of your payments, which we can still use for tax and accounting, even after you delete your account. Our copy of your purchase records is deleted with your account.
- Logs and backups: kept for a limited time by each provider.
Your choices and rights
- Export: Settings → Data → Export downloads your practice log. Email us for anything else.
- Correct: change your name or password in your account, or email us.
- Delete: Delete account in Settings permanently removes your account and its data from our database, including your free-answer count and error reports. If you have a monthly subscription, deleting your account also cancels it, so you won't be charged again.
- California: you can ask what personal information we collect, use and disclose, and have it corrected or deleted. We collect identifiers (email, account ID, IP address), commercial information (purchases) and internet activity (logs, error reports, page analytics and usage recordings). We don't sell or share personal information or treat you differently for using your rights.
- EU and UK: you can access, correct, delete or export your data, restrict or object to processing, withdraw consent, and complain to your data protection authority. Our legal bases: contract (your account, the service and your purchases), legitimate interests (security, abuse prevention, fixing errors, page analytics and improvement), consent (microphone and camera; switch them off anytime) and legal obligation (tax records). Your data is processed in the US.
Send requests from your account's email address. We may need to confirm it's you, and we'll reply within 30 days.
Children
Superday Room is for people 16 and older. If someone younger has given us personal data, email us and we'll delete it.
Security
Data is encrypted in transit, and each account can read only its own data.
Changes
We'll post updates here with a new effective date and tell you in the app or by email about significant changes.