Encrypted on the way.
Every page and every call runs over HTTPS, so data between your browser and MockAllies is encrypted. Your password is stored only as a secure hash, never in plain text.
Where your data lives.
The app, its database and its file storage are hosted in the EU. During a call or an Assistant message, the content is sent to our AI model providers to be processed. Some of them are outside the EU, under the safeguards described in the Privacy Policy.
We work with a small number of providers, each under a data processing agreement and each doing one job: hosting, AI models, payments and email. Card details go straight to our payment provider. We never see your full card number.
Only what each part needs.
Each account can reach only its own data. Every request is checked for who owns what, and the parts of the service only have access to what they need.
Practice evidence. Not identity.
Your voice is used to run the practice call and produce feedback on it. We don't use it to identify you or build a voiceprint, and we don't analyse it psychologically or medically.
Keep real customers' names and details out of practice calls. A made-up scenario works just as well.
Transcripts expire. On purpose.
Call transcripts are deleted automatically after 30 days. If a deletion fails, it is retried until it succeeds. Backups are overwritten within 14 days. Audio uploads and recording playback are planned after launch. Do not upload recordings of real people. The full list is in the Privacy Policy.
Found a problem? Tell us.
If you think you've found a security issue in MockAllies, please report it to us before you tell anyone else.
Tell us the page or feature and what you found. Don't send passwords, other people's data or working exploit code by email; we'll arrange a safe way to share details. Please don't access or change data that isn't yours.
Where we stand.
MockAllies is a young product, and we don't hold a formal security certification such as SOC 2 or ISO 27001. We would rather say so plainly than claim something we don't have.