Privacy Policy
Last updated: 16/04/2026
Welcome to Stacked ("we," "us," or "our").
This Privacy Policy explains what information we collect, how we use it, and your choices.
We've written this in plain English; no hidden surprises.
If you have questions, contact us at info@stacked.coach.
0. Data Controller
The data controller responsible for the processing of your personal data under the GDPR is:
Legal entity: Stacked AI
Address: Theresienstr. 18 90403 Nürnberg
Contact email: info@stacked.coach
For data-protection inquiries, please use the contact email above.
1. Your Account
To use Stacked Coach, you must create an account. We use Replit as our authentication provider.
When you sign up, we receive:
Your email address
Your first and last name
A unique account ID provided by Replit
You do not create a password with us, authentication is handled by Replit.
Upon creating your account, you receive free credits managed on our servers.
We use this information to:
Save your coaching sessions
Let you access your history across devices
Manage your credits, purchases, and subscriptions
2. What Happens During a Coaching Session
When you record a session, the system analyzes your speech and presentation in several stages. Your audio and video are processed temporarily during analysis and are not stored permanently.
Audio Processing (Speech Transcription)
Your spoken audio is transcribed using Deepgram Nova-3.
This converts speech into text and extracts speaking metrics including:
Words per minute (speaking pace)
Pause count and duration
Filler word detection
These acoustic signals help generate coaching insights.
Audio is processed either:
Live (real-time streaming) while you speak, or
Batch mode after recording.
Body Language Analysis
Your camera feed is used to analyze body language and non-verbal communication.
During recording:
Frames are captured approximately every 3 seconds.
Frames are temporarily stored in memory in your browser.
Frames are compressed to JPEG (~70% quality) with a maximum width of 640px.
The system maintains a buffer of up to 40 frames using a sampling method that keeps frames representative of the full recording.
For visual analysis:
Up to 10 frames are analyzed for recordings under 3 minutes.
Up to 40 frames are analyzed for recordings longer than 3 minutes.
Frames are sent to Google Gemini 2.5 Flash (Vision) for body language analysis.
Raw video recordings and full video streams are not stored.
Coaching Feedback Generation
Your transcript, speech metrics, and body language observations are combined by Anthropic Claude Sonnet 4.6, which generates:
Performance scores
Coaching feedback
A personalized coaching script
Practice tips
Feedback is streamed to the interface as it is generated.
The system automatically detects the language spoken and generates feedback in the same language.
Optional Voice Playback
If you choose to listen to the coaching script, it may be converted to audio using OpenAI text-to-speech (tts-1, "echo" voice). This feature is optional.
2b. What Happens During an Interview Room Session
The Interview Room is a voice-based mock interview feature. When you use the Interview Room, the system collects and processes data at several stages.
Job Context Collection
Before the interview begins, you provide:
Your job title (the role you are interviewing for)
The company name
A job description (either pasted text or a brief description)
This job context is sent to Anthropic Haiku to generate a structured role analysis that tailors the interview questions to your specific role. The preprocessed context is stored with your session.
Real-Time Voice Interview
During the interview, you speak with an AI interviewer agent named Alex. The voice conversation involves:
Your voice is transcribed in real time using Deepgram live speech-to-text.
The AI interviewer's responses are generated by Anthropic Haiku.
The AI interviewer's voice is produced by OpenAI text-to-speech (tts-1).
The full conversation is transcribed and stored as part of your interview session record. Raw audio from the voice conversation is not permanently stored.
Post-Interview Debrief
After the interview ends, the full transcript is analyzed by Anthropic Haiku to produce a debrief assessment, which includes:
Performance scores (clarity, presence, specificity)
A narrative assessment of your interview performance
A question-by-question log with answer summaries
A focus area and practice drill for improvement
STAR method adherence analysis
Skill coverage and red flag assessments
3. What We Store About Your Coaching Sessions
After a session completes, we store:
The transcript of your speech
AI-generated scores and summaries
Coaching feedback and practice tips
Speech analysis metrics (pace, pauses, fillers)
Body language observations
Session topic, audience, and goal inputs
Session duration and performance metrics
Date and time of the session
Interview Sessions (Interview Room)
After an interview session completes, we additionally store:
The job title, company name, and job description you provided
The preprocessed role context (role summary, core skills, behavioral themes, challenges, red flags)
The full interview transcript (both your answers and the interviewer's questions)
Debrief scores (clarity, presence, specificity) and overall score
Narrative feedback and practice recommendations
Question-by-question log with answer summaries
STAR adherence analysis, skill coverage, theme coverage, and red flag assessments
Interview duration, question count, and session timestamps
What We Do Not Permanently Store
We do not permanently store:
Raw audio recordings (from either coaching or interview sessions)
Raw video recordings
Full video frames captured during analysis
Real-time voice audio from interview conversations
Audio, video, and frame data are processed temporarily and then discarded.
4. Payments
Payments are handled securely by Stripe.
While your account is active, we store:
Your email address
Stripe customer ID
Stripe subscription ID (if applicable)
Credit balance and tier
We never see or store your card details. Stripe handles all payment processing and card information.
If you delete your account, your subscriber profile — including your email, Stripe customer ID, and subscription ID — is permanently removed from our database. Stripe retains its own independent payment records as required by their terms and applicable law; to request deletion of those records, contact Stripe directly.
5. AI Services We Use
To provide coaching analysis, we use trusted third-party AI services:
Service | Purpose |
|---|---|
Deepgram Nova-3 | Speech transcription and speaking metrics (coaching sessions); live speech-to-text during interviews |
Google Gemini 2.5 Flash (Vision) | Body language and visual communication analysis (coaching sessions) |
Anthropic Claude Sonnet 4.6 & Haiku | Coaching feedback and scoring; interview job context preprocessing, AI interviewer agent, and post-interview debrief generation |
OpenAI TTS (tts-1) | Optional voice playback of coaching feedback; AI interviewer voice during interview sessions |
We do not attach account identifiers (your name, email address, or account ID) as metadata when sending data to these providers. Note, however, that transcripts and video frames are content you produce, and may themselves contain personal information that you choose to speak about or display during a session. That content is processed by the providers solely to generate the requested analysis.
The information shared may include:
Speech transcripts
Audio-derived metrics
Selected video frame images
Topic and audience context
Job titles, company names, and job descriptions (for interview sessions)
Interview conversation transcripts (for debrief generation)
These providers process the data only to generate the requested analysis.
We do not use your sessions to train our own AI models.
5b. How AI Providers Handle Your Data
In addition to our own commitment not to train models on your data, the external AI providers we use have their own no-training policies for the way we access them:
Anthropic (Claude): Anthropic does not use API inputs or outputs to train its models by default.
OpenAI: Since March 2023, OpenAI does not use data sent through its API to train its models by default.
Google Gemini: We access Gemini through Replit's paid proxy, which falls under Google's paid tier. Google does not use prompts or responses from paid services to train its models.
These commitments concern model training only. Providers may still process your data transiently to deliver the requested service and may retain limited operational logs as described in their own policies. This no-training guarantee is independent from the AI processing consent toggle on your Profile page: the toggle controls whether Stacked sends your data to AI providers at all, while this section describes what those providers do (and do not do) with the data once it reaches them.
6. Analytics
We use PostHog Analytics to understand overall app usage.
PostHog is privacy-focused:
No advertising cookies
No cross-site tracking
No personal profiling
Session cookies used for login are functional only.
6b. Sub-processors
We rely on the following sub-processors to operate the service. Each one acts on our instructions and only for the purposes listed below.
Sub-processor | Purpose |
|---|---|
Replit (authentication) | User authentication via OpenID Connect |
Managed Postgres database host | Primary data storage (user profiles, sessions, transcripts, billing records) |
Upstash Redis | Session storage and rate limiting |
Stripe | Payment processing and subscription billing |
Deepgram | Speech transcription |
Google (Gemini) | Body language / visual analysis |
Anthropic | Coaching feedback and interview generation |
OpenAI | Text-to-speech (voice playback and AI interviewer voice) |
PostHog | Product analytics (anonymous) |
6c. Legal Bases for Processing (GDPR Art. 6)
For users in the European Economic Area, we rely on the following legal bases:
Processing activity | Legal basis |
|---|---|
Account creation and authentication | Performance of a contract (Art. 6(1)(b)) |
Payments and subscription management | Performance of a contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)) for tax/accounting records |
AI coaching and interview analysis (transcripts, frames, feedback generation) | Consent (Art. 6(1)(a)) |
Product analytics (PostHog) | Consent (Art. 6(1)(a)) |
Security, rate limiting, and abuse prevention | Legitimate interest (Art. 6(1)(f)) — keeping the service available and protecting it from abuse |
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand.
7. Session Duration Rules
Sessions are categorized by recording length:
Tier | Duration |
|---|---|
Short | Up to 5 minutes |
Medium | 5–10 minutes |
Long | Over 10 minutes |
Free users are limited to 5 minutes per session.
Paid users can record sessions up to 20 minutes.
8. How Long We Keep Data
Coaching session results are stored until you delete your account.
Login sessions expire after 7 days.
Internal cost and revenue logs are retained for accounting purposes but are anonymized — they contain no name or email address.
When you delete your account, the following are permanently deleted: your user profile, all coaching sessions, your subscriber record (including Stripe IDs and credits), and your active login sessions.
What remains after deletion are anonymized internal records (cost logs and revenue totals) with all identifying fields removed. These are retained solely for financial reporting and contain no information that can be linked back to you.
9. Your Rights
Depending on where you live, you may have the right to:
Access your data
Correct your data
Delete your data
Export your data
Withdraw consent
To delete your account, use the Delete Account option in the user menu on the home screen. This immediately and permanently removes your profile, coaching history, and subscriber record from our systems.
To export your data, use the Download my data option on your profile page. This delivers a JSON file containing your profile, subscriber record, coaching history, and interview sessions — everything personal that we store about you.
For all other requests (access, correction, or withdrawal of consent), contact us at:
We aim to respond within 30 days.
10. Children's Privacy
Stacked is not intended for children under:
13 years old globally
16 years old within the European Union
If we learn that we have collected personal data from a child without appropriate consent, we will delete it.
11. Security
We take security seriously and use industry-standard safeguards including:
Encrypted HTTPS connections (encryption in transit)
Encryption at rest for stored data, provided by our managed database and session-storage hosts
Secure httpOnly session cookies
Server-side session storage
Payment processing through Stripe
Trusted cloud infrastructure
No system can guarantee absolute security, but we work continuously to protect your information.
12. International Data Processing
Our service relies on global infrastructure and AI providers.
Your data may be processed in countries outside your own, including the United States. We take steps to ensure appropriate safeguards are in place when data is transferred internationally.
13. Changes to This Policy
If we make significant changes to this Privacy Policy, we will update this page and revise the "Last updated" date.
14. Contact Us
Questions or concerns?
Email us at:
