Privacy Policy

This policy explains what data is processed when you use the Final Take mobile app (iOS and Android) and the finaltakeapp.com website, why, and what your rights are. We designed Final Take to collect as little as possible: your texts stay on your phone and audio is never stored.

1. Data controller

The data controller is [TO COMPLETE: name or company name], [TO COMPLETE: legal form, postal address].

Contact: contact@finaltakeapp.com

2. The finaltakeapp.com website

The word counter

The text analyzer runs entirely in your browser. The text you paste or type is never sent to our servers, stored or analysed by any third party. A draft is kept only in your browser’s local storage so you do not lose your work; the “Clear” button deletes it.

Online teleprompter and camera mode

The teleprompter runs entirely in your browser. If you turn on camera mode, your browser asks for camera and microphone access: picture and sound are shown and, if you choose to record, recorded only on your device. The video is never sent to our servers; it disappears when you close the page unless you download it.

Preferences

• Language: a functional cookie (NEXT_LOCALE) remembers the language you choose, for 12 months.
• Light/dark theme and speaking pace: saved in your browser’s local storage.

These are strictly necessary for the features you use and are not used for tracking (details in our cookie policy). The website uses no advertising cookies and no audience-measurement tools.

Hosting

The website is hosted by Vercel Inc. Like any web server, the host keeps technical logs (IP address, browser type, requested page, date) for security and reliability, for a limited period. The country associated with your IP address is used, without being stored, to choose the site’s default language.

3. The Final Take app

Anonymous identifier

Final Take does not ask for an email address or password. On first launch, a random anonymous identifier is created (Firebase Authentication) to link your subscription and usage quotas.

Your texts and rehearsals

The texts you add, your rehearsals, results and preferences are stored locally on your device. They are not synced to our servers. The first name you may enter during onboarding also stays on the device.

Microphone and speech recognition

The microphone is used only during a rehearsal, after you grant permission. To follow your reading, the app uses your system’s speech recognition service (Apple on iOS, Google on Android), on the device whenever possible. When on-device recognition is unavailable, audio may be processed by Apple or Google under their own privacy policies. We never receive or store audio: it is analysed and discarded; only the measurements (duration, pace, time gap) are kept on your device.

Assistance features

Some features (trim suggestions, practice questions) require server-side processing. In that case the relevant text is sent to our server (Google Cloud Functions for Firebase) solely to produce the response. It is neither logged nor kept after processing. [TO COMPLETE if an AI provider is used: provider name and link to its policy.]

Server-side technical profile

Our database (Google Cloud Firestore) holds only a technical profile linked to your anonymous identifier: subscription status, usage quotas for assistance features and related technical data. It contains no name, text, transcript or audio.

Subscriptions

Payments are handled exclusively by Apple (App Store) or Google (Google Play). We never see your payment details. Subscription status is managed by RevenueCat, which receives your anonymous identifier and the purchase information provided by the store.

Usage analytics

With your consent where the law requires it (European Union, EEA, United Kingdom, Switzerland), the app sends pseudonymous usage events to PostHog: screens viewed, steps completed, durations and settings (theme, language, version). These events never include your texts, first name, audio, transcripts or email address. You can turn analytics off at any time in the app’s Settings.

Crash reports and security

• Firebase Crashlytics collects technical information when the app crashes (device model, OS and app version, stack trace) so we can fix bugs.
• Firebase App Check verifies that requests come from a genuine copy of the app, to protect the service from abuse.

Notifications

Reminders (such as the daily rehearsal reminder) are local notifications scheduled on your device; you can turn them off at any time.

4. Legal bases

• Performance of a contract: running the app, managing your subscription, assistance features you trigger.
• Consent: microphone access, usage analytics in countries where consent is required. You can withdraw it at any time.
• Legitimate interest: service security, abuse prevention, crash fixing.

5. Recipients and processors

Your data is never sold. It is only shared with the providers needed to run the service:

Provider	Role
Google (Firebase: Authentication, Firestore, Cloud Functions, Crashlytics, App Check)	Infrastructure, anonymous identifier, crash reports, security
Apple, Google	App distribution, payments, system speech recognition
RevenueCat	Subscription status management
PostHog	Pseudonymous usage analytics (with consent)
Vercel	Website hosting

Some of these providers are located in the United States. Transfers rely on GDPR safeguards (European Commission Standard Contractual Clauses and/or the EU–US Data Privacy Framework).

6. Retention

• Data on your device: until you delete it or uninstall the app.
• Server-side technical profile: while you use the app, then deleted when you use “Delete all my data” or on request.
• Crash reports: per Firebase Crashlytics retention (90 days).
• Usage analytics: [TO COMPLETE: retention configured in PostHog].
• Website technical logs: limited period set by the host.

7. Your rights

Depending on where you live (including under the GDPR and US state privacy laws such as the CCPA), you have the right to access, correct, delete, restrict, object to and port your data, and to withdraw consent at any time. We do not sell or share your personal information for cross-context behavioural advertising.

• In the app: Settings → Delete all my data erases local data, cancels reminders and deletes your server-side profile.
• By email: write to contact@finaltakeapp.com for any request, including deletion of usage analytics linked to your device.

You may also lodge a complaint with your local data protection authority.

8. Children

Final Take is not intended for children under 13 and we do not knowingly collect data from them. Depending on your country, parental consent may be required up to age 15 or 16.

9. Security

Communications with our servers are encrypted (HTTPS). Database access is restricted by strict rules: a user can only read their own profile and no writes are possible from the app.

10. Changes

We may update this policy to reflect changes to the app or the law. The last-updated date is shown at the top of this page. For significant changes, we will let you know in the app.

See also our terms of use.