Privacy Policy

This policy explains what CueRoom collects, why we collect it, how we use it, and what rights you have over your data. We wrote it in plain language on purpose. If something is unclear, email hello@cueroom.io and we will clarify.

1. Who we are

"CueRoom" refers to the mobile application and website operated by CueRoom Inc. ("we", "our", "us"). You can reach us at hello@cueroom.io or by writing to the address at the bottom of this page.

2. What we collect

Account information

When you create a CueRoom account we collect your email address, first name, and timezone. If you sign in with Apple or Google, we receive the email address and name those services provide. We do not receive your password.

Meeting information

With your permission, CueRoom reads events from your Apple Calendar or Google Calendar to show your upcoming meetings. We store the meeting title, time, duration, and your selected state (anxious, high-stakes, unprepared, not there yet, or custom) so we can generate a script for each one. We do not store attendee lists, meeting locations, meeting descriptions, or video conferencing links.

You can also add meetings manually inside the app. For manual meetings we store only what you type in.

Script content and context

When you ask CueRoom to prepare you for a meeting, we store the context you provide (an optional one-line description of what you want to focus on), the generated script text, and metadata about the script (its opening phrase, sensory anchor, and metaphor) so that future scripts do not repeat them.

Chat messages

Messages you send to our in-app chat coach are stored so that the coach can reference them in later responses. You can delete your chat history anytime from inside the app.

Usage data

We collect anonymized data about how you use the app: which screens you visit, which features you use, how often you complete a prep session. This data is tied to a randomized device identifier, not your name or email.

Device information

We collect your device model, operating system version, app version, and language settings to diagnose crashes and compatibility issues.

Payment information

Subscriptions are processed by Apple through the App Store. Apple handles your payment method. We receive confirmation of your subscription status but we never see your card number or billing details.

3. What we do NOT collect

• We do not collect your contacts
• We do not collect your location
• We do not collect your microphone or camera data
• We do not collect data from any apps outside CueRoom
• We do not collect photos from your camera roll
• We do not read, store, or process meeting descriptions, locations, or attendee lists

4. Third parties we work with

CueRoom relies on a small number of carefully chosen third-party services to operate. Each one receives only the data it needs to do its job.

OpenAI

We send your meeting title, selected state, optional context, and recent script history to OpenAI so it can generate your sixty-second alignment script and respond to chat messages. OpenAI processes this data under their API terms, which forbid them from using it to train their models. The data is encrypted in transit and deleted from OpenAI's servers within 30 days.

Supabase

We store your account, meeting records, script history, and chat messages in a database hosted by Supabase. Supabase operates servers in the United States. Data is encrypted at rest.

Apple

If you sign in with Apple, Apple provides us your email and name. If you use Sign in with Apple's "Hide My Email" feature, we receive a private relay email that forwards to you. If you subscribe, Apple handles payment.

Google

If you sign in with Google, Google provides us your email and name. If you connect Google Calendar, Google provides us access to read your calendar events under the scope you approve.

Sentry

Crash reports and error logs are sent to Sentry so we can diagnose bugs. Sentry receives your device model, operating system version, and the error details. Personal information is scrubbed before transmission.

5. How we use your data

We use your data only to operate CueRoom and improve it. Specifically:

• To generate alignment scripts tailored to your meetings and selected state
• To remember your preferences (chosen room, voice settings, calendar connections)
• To prevent script repetition across sessions
• To respond to your questions in the chat coach
• To send you product updates and account notifications (you can opt out of marketing emails anytime)
• To diagnose crashes and fix bugs
• To understand aggregate usage patterns and improve the product

6. What we do NOT do with your data

• We do not sell your data to anyone, ever
• We do not share your data with advertisers
• We do not use your data to train AI models (ours or anyone else's)
• We do not share identifiable data with any party other than the service providers listed above
• We do not track you across other apps or websites

7. How long we keep your data

We keep your account data for as long as your account is active. If you delete your account, we delete all personal data within 30 days, except where retention is required by law (for example, tax records of your payments).

Script history and chat messages can be individually deleted from inside the app at any time. If you want everything deleted at once, go to Settings and tap "Delete all data."

8. Your rights

You have the right to:

• Access your data. Email hello@cueroom.io and we will send you a copy within 30 days.
• Correct inaccurate data. Most data you can edit yourself inside the app.
• Delete your data. Use the "Delete all data" option in Settings, or email us.
• Export your script history as a text file.
• Object to how we process your data. Email us with your objection and we will respond within 30 days.
• Withdraw consent for calendar access, notifications, or marketing emails at any time.

If you are in the European Economic Area, the United Kingdom, or California, you may have additional rights under GDPR, UK GDPR, or CCPA. Email us to exercise them.

9. Children

CueRoom is intended for people 17 years old and above. We do not knowingly collect data from children under 17. If we learn we have collected data from a child under 17, we will delete it. If you believe your child has created an account, email us.

10. Data security

We use industry-standard security to protect your data: encrypted connections (TLS 1.3), encrypted storage (AES-256), access controls limiting who on our team can view data, and regular security audits. No system is perfectly secure. If we discover a breach, we will notify affected users within 72 hours.

11. International transfers

Your data is processed in the United States. If you are located outside the US, your data will be transferred to and stored in the US. We rely on standard contractual clauses with our service providers to ensure your data receives equivalent protection.

12. Changes to this policy

If we materially change this policy, we will notify you by email and inside the app at least 30 days before the changes take effect. For minor changes, we will update the "last updated" date at the top of this page.

13. Contact

Questions, requests, or concerns about privacy can go to:

Email: hello@cueroom.io
Mail: CueRoom Inc., [Your mailing address here]
Response time: We reply to privacy requests within 7 business days.

This policy is written to comply with GDPR, UK GDPR, CCPA, and PIPEDA. It is not a substitute for professional legal advice, which you should obtain if you have specific legal questions.