Privacy Policy

Impromptu Practice & Rodano Labs Apps  ·  Effective Date: March 18, 2026

Rodano Labs ("we," "our," or "us") operates a suite of applications (each, an "App"). This Privacy Policy explains what information we collect across our Apps, how we use it, and your rights. We are committed to minimizing data collection, not selling your data, and not using your information for advertising or tracking purposes.

1. Information We Collect

Account Information

When you create an account, we collect and store the following information in our secure database:

For Google Sign-In and Apple Sign-In, we receive only your email address and user ID. We do not receive your name, profile picture, or any additional profile data from these providers.

Authentication Methods

The App supports the following ways to sign in: email and password, magic link (a one-time login link sent to your email address), Google Sign-In, and Apple Sign-In. All authentication is handled through Supabase, our backend infrastructure provider. We do not store passwords in plain text — they are securely hashed by Supabase.

Guest Usage

You may use a limited number of practice sessions without creating an account. In this case, we store a session counter locally on your device only — nothing is sent to our servers. No personal information is collected during guest usage.

Local Storage (On Your Device)

The App stores the following data locally on your device. This data never leaves your device and is not accessible to us: guest session counter, timer preferences (your custom preparation and speech timer settings), and saved tournaments (any tournament practice sessions you have saved).

Microphone Access

The App requests access to your device's microphone solely to capture your voice during practice sessions. Audio is processed locally on your device by your browser's built-in Web Speech API and converted to text. Under normal operation, audio is not transmitted to our servers or any third party, except as necessary to provide the App's functionality. Only the resulting text transcript is sent for AI feedback processing. You can revoke microphone access at any time in your device settings, though this will prevent the core practice feature from working.

Speech & Practice Data

When you practice, the text transcript of your speech is sent to Anthropic's API to generate feedback. Anthropic processes the transcript and returns a response. We do not store transcripts on our servers. The transcript is displayed temporarily in the App and discarded when your session ends. According to Anthropic's published policies at the time of processing, API inputs are not used to train their models and are not retained beyond the scope of the API call.

Email Transcripts (Coming Soon)

We are planning a feature that will allow you to email yourself a copy of your speech transcript. If you choose to use this feature, your transcript will be sent to your email address via Resend, our email delivery provider. This is an opt-in action that costs one credit per use. Resend's privacy policy governs their handling of email data.

Payment & Credits

If you purchase credits, payments are processed by Stripe (web) or Apple's in-app purchase system via RevenueCat (mobile). We do not receive, store, or have access to your payment card details, bank information, or transaction history. These providers hold all payment data on their own secure systems. We only store the resulting credit count in your account.

Analytics & Tracking

We do not currently use third-party analytics services or advertising trackers. If we introduce such tools in the future, we will update this Privacy Policy and provide notice where required.

Technical & Diagnostic Data

We may collect limited technical information such as error logs or system diagnostics solely for the purpose of maintaining and improving the App's functionality and security. This data is limited to what is necessary for system performance and security and is not used to identify you personally.

Do Not Track

The App does not respond to "Do Not Track" signals, as we do not engage in cross-site tracking or targeted advertising.

2. How We Use Your Information

We use the information we collect only for the following purposes:

We do not use your information for advertising, profiling, or any purpose beyond operating the App.

We process your information as necessary to provide the App's services, to comply with legal obligations, and to protect our legitimate interests, including maintaining the security and integrity of the App.

You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account. Please notify us immediately at hello@rodanolabs.com if you believe your account has been compromised.

3. Disclosures

Law Enforcement & Legal Requests

We may disclose your information if required to do so by law or in response to valid legal requests by public authorities, including to meet national security or law enforcement requirements. Where permitted by law, we will attempt to notify you of such requests before disclosing your information.

Business Transfers

In the event of a merger, acquisition, financing, or sale of all or a portion of our business or assets, your information may be transferred as part of that transaction. We will notify you via email or an in-app notice before your information is transferred and becomes subject to a different privacy policy.

4. Third-Party Services

The App works with the following third-party services. Each has its own privacy policy governing how they handle data:

We do not sell your data to any of these providers or any other third party. We are not responsible for the privacy or security practices of these third-party services, and we encourage you to review their individual privacy policies.

International Data Transfers

Your information may be processed and stored in the United States or other jurisdictions where our service providers operate. Data protection laws in these jurisdictions may differ from those in your home country. By using the App, you consent to the transfer of your information to these jurisdictions. Where required, we rely on appropriate safeguards such as standard contractual clauses to protect transferred data.

5. Data Retention

We retain your account information (email address, user ID, credit balance, and credits used) for as long as your account is active. If you request deletion of your account, we will delete your data within 30 days.

Because we do not store audio recordings or speech transcripts on our servers, there is no session content to delete. Data stored locally on your device (timer preferences, saved tournaments, guest session counter) can be cleared by uninstalling the App.

6. Children's Privacy

The App is intended for users aged 13 and older. We do not permit children under 13 to create an account or use the App. During signup, users are required to confirm they are at least 13 years old.

We do not knowingly collect personal information from anyone under the age of 13. If we become aware that we have inadvertently collected personal information from a child under 13 without appropriate consent, we will take immediate steps to delete such information. If you are a parent or guardian and believe your child under 13 has bypassed our age gate and created an account, please contact us immediately at hello@rodanolabs.com.

If you are between 13 and 18 years old, you should review this Privacy Policy with a parent or guardian before using the App.

7. Your Rights

Depending on your location, you may have the right to:

To exercise any of these rights, contact us at hello@rodanolabs.com. We will respond within 30 days.

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR). Our legal basis for processing your data is the performance of a contract (providing you the App's services). You also have the right to lodge a complaint with your local data protection authority.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know what personal information we collect, the right to delete it, and the right to opt out of any sale of your personal information. We do not sell personal information. To submit a request, contact us at hello@rodanolabs.com.

Residents of other US states with applicable privacy laws (including Virginia, Colorado, Connecticut, and others) may have similar rights. We will honor verifiable requests regardless of your state of residence, to the extent required by applicable law.

8. Data Security

We use Supabase for our backend infrastructure, which employs industry-standard security practices including encryption in transit (TLS) and encryption at rest. We implement access controls to limit who can access user data.

No method of electronic transmission or storage is 100% secure. While we take reasonable measures to protect your information, we cannot guarantee absolute security.

In the event of a data breach that affects your personal information, we will notify you via email within a reasonable timeframe as required by applicable law, and will take prompt steps to assess and mitigate the impact.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the Effective Date at the top of this page. For significant changes, we will notify you via email or an in-app notice at least 14 days before changes take effect. Continued use of the App after changes take effect