Privacy Policy

This Privacy Policy explains how Near Mint ("we", "us") collects, uses, and protects your personal data when you use Foxey (the "Service"). We handle personal data in accordance with the Hong Kong Personal Data (Privacy) Ordinance (PDPO). By using the Service you consent to this Policy.

The headline: your voice recordings are used to transcribe and score your speech and are then deleted immediately — they are never stored, never sold, and never used to train AI models. Section 2 covers this in detail.

1. Data we collect

• Account data — only if you create an account: your name, email address, and profile photo from your sign-in provider (Apple, Google, or email magic link).
• Profile data you provide — display name, @handle, avatar, and your leaderboard visibility setting.
• Voice recordings — transmitted securely for transcription and scoring and NOT retained after processing (see section 2).
• Speech data we keep — transcripts, per-dimension scores, overall scores, acoustic metrics (pace, pausing, filler counts, pitch and volume variation), language, topic, timestamps, and your streak and points.
• Leaderboard participation — your display name, avatar, weekly points, and current streak, if you enable the leaderboard.
• Push notification token for your device, if you allow notifications.
• Limited technical data needed to operate the app and keep it reliable — basic device/log information and crash and performance diagnostics (such as error reports, device model, OS version, and app version).

We do not collect payment card details. Payments are processed by Apple (App Store subscriptions) or Stripe (web subscriptions); we receive only your subscription status.

2. Voice recordings — the short version

• Your recording is used only to transcribe and score that speech — nothing else.
• It is processed transiently and deleted immediately after analysis completes. It is never written to our database and never saved in backups.
• It is never sold, never shared with advertisers, and never used to train AI models — ours or anyone else's.
• It reaches only the processing providers named in section 5, solely to perform the transcription and scoring, under terms that prohibit them from keeping or learning from it.

Because recordings are not kept, we cannot replay or recover them after analysis — you can always re-record. If an analysis fails mid-way, any temporary audio data is discarded.

3. How we use your data

To provide and operate the Service (topics, transcription, scoring, history, streaks, leaderboard); to maintain safety and prevent abuse and score manipulation; to respond to support requests and feedback; and to improve the Service — including improving our scoring rubrics using de-identified, aggregated text metrics, never your voice. We use your data only as needed to provide and protect the Service.

4. What others can see

If you join the leaderboard, other users see only your display name, avatar, weekly points, and current streak. Nobody else can see your transcripts, score breakdowns, topics, or history. You can hide yourself from the leaderboard at any time in Settings, and your entries are removed. Guests never appear on the leaderboard.

5. Service providers

We use trusted third-party providers to run the Service. Each one receives only what it needs:

• Cloud backend and database (Supabase, servers in Singapore) — stores your account, profile, transcripts, scores, streaks, and settings on our behalf.
• Speech-to-text (Groq, servers in the United States; fallback: OpenAI) — receives your recording transiently to produce the transcript, under API terms that prohibit training on your data; we enable zero-retention options wherever offered.
• AI scoring (a large-language-model API, such as OpenAI or Moonshot AI) — receives the transcript and metrics for that speech, never your audio, under terms that prohibit training on your data.
• Push notifications (Expo, operated by 650 Industries, and Apple's Push Notification service) — receives your device push token and short notification text such as "Today's topic is live". No transcripts or scores are included.
• Crash reporting and performance monitoring (Sentry, servers in the United States) — receives diagnostic data such as error reports, device model, OS version and app version when something goes wrong. We keep personal identifiers, transcripts, and audio out of these reports.
• Payments (Apple for App Store subscriptions, Stripe for web subscriptions) — payment data is processed by them under their own privacy terms; we never see your card details.

These providers process data on our instructions and/or under their own privacy terms. We do not sell your personal data.

6. Data retention

Voice recordings: not retained — deleted immediately after analysis. Transcripts, scores, and history: kept while your account is active, and you can delete any individual speech in History at any time. Account deletion: when you delete your account it is deactivated immediately and permanently erased within 30 days, including your profile, transcripts, scores, streaks, and leaderboard entries; we keep it longer only where retention is required by law or while an abuse investigation is open. Once erased, any data that must be kept is anonymised. Guest data lives only on your device and is removed when you delete the app.

7. Your rights

Under the PDPO you may request access to, and correction of, your personal data, and you may withdraw consent or ask us to delete your data. You can edit your profile in-app, delete individual speeches in History, opt out of the leaderboard in Settings, and delete your account in Settings — or contact us to exercise your rights. We may need to verify your identity before acting on a request.

8. Security

We use reasonable technical and organisational measures to protect your data, including encryption in transit (TLS) and access controls on stored records. No system is perfectly secure; we cannot guarantee absolute security, and you use the Service at your own risk.

9. Children

The Service is for users 13 and older; users under 18 require the consent of a parent or legal guardian. We do not knowingly collect data from anyone under 13. If you believe a child under 13 has provided us data, contact us and we will remove it.

10. International transfers

Your data is stored and processed on servers located outside Hong Kong by the service providers named in section 5 — principally Singapore (database) and the United States (transcription, scoring, diagnostics, push). Voice recordings pass through these providers transiently and are not stored. Where this happens, we take reasonable steps so your data remains protected consistent with this Policy.

11. Changes

We may update this Policy from time to time. Material changes will be notified through the Service or by other reasonable means.

12. Contact

Near Mint — contact@nearmint.tech