Auditio logo

Privacy Policy

Auditio is committed to your privacy. We strictly comply with GDPR (EU), UK GDPR (United Kingdom), and the new DPA (Switzerland) to ensure a perfectly secure training environment.

1. Data Collection

  • Account: Your email for authentication and score tracking.
  • Voice & Audio: Your recordings are transmitted via secure streams for real-time technical and semantic analysis. They are never stored on our servers and are destroyed immediately after processing: only the feedback, the scores and the written transcript of the exchange are retained.
  • Imported courses (PDFs & photos): The text from your PDFs and the photos of your notes are transmitted securely to extract their content and generate flashcards, quizzes and summaries. The files and photos are never retained: only the extracted text and the generated study content are stored.
  • Security: A pseudonymous technical identifier of your device, computed locally in your browser, and a salted hash of your IP address are linked to your account, solely to prevent abuse and fraudulent multi-account creation (legitimate interest, Art. 6(1)(f) GDPR).
  • Reviews: If you post a review, it is shown on the Auditio website after moderation, with the first name or nickname you chose, or anonymously. We may quote its text without your name in our content and ads, without changing its meaning (legitimate interest, Art. 6(1)(f) GDPR); you can object at info@auditio.app. Its use in advertising with your first name relies solely on your consent, given through a separate checkbox and withdrawable at any time by editing your review. You can delete your review at any time from the form.
  • Lio coach memory: To ensure coaching continuity and follow-up on your goals, Lio remembers up to your 5 most recent practice commitments or deadlines stated during your chats. These notes are kept until automatically replaced, manually cleared at any time via the "Clear what Lio remembers" button in the coach panel, or upon permanent deletion of your account.
  • Team messages: If the Auditio team writes to you in the app, the conversation, your replies and read indicators are kept until you delete your account, then deleted with it.

2. Partners and Processors

We only collaborate with trusted third parties guaranteeing a high level of protection:

  • Supabase (Hosting)
  • Hosting of user data (AWS), physically located in Sweden (European Union).
  • Netlify (website hosting)
  • Hosts the website and some server functions. It processes the technical connection data (such as your IP address) needed to deliver pages.
  • Google Gemini (artificial intelligence)
  • Analysis of your orals, the live exchange with the jury, the Lio coach, and text extraction from your imported documents and photos, via Google's Gemini models. Data travels via secure channels and Google is contractually committed not to use it to train its models.
  • Anti-fraud signal
  • A device identifier is computed locally in your browser by an open-source library and stored with your account to detect fraudulent multi-account creation. It is pseudonymous, non-biometric and never shared with third parties.
  • Cloudflare Turnstile (anti-bot)
  • Checks that sign-up and sign-in are performed by a human, without an image puzzle. For this purpose only, it processes technical signals from your browser and your IP address.
  • Sentry (error monitoring)
  • Limited collection of production technical errors to detect and fix malfunctions. Course content, audio recordings and answers are not intentionally sent to Sentry.
  • Stripe (payments)
  • Processes subscription payments and receives the data required for that purpose. Auditio never stores nor sees your card details.
  • Brevo (emails)
  • European provider (France) that sends our verification and service emails and, with your consent, our reminders and offers, each with an unsubscribe link. It only receives your email address and first name.
  • PostHog & Google Analytics (audience)
  • Loaded only after your consent in the cookie banner. PostHog is hosted in the EU and may replay a masked sample of sessions (text, inputs and images hidden) to improve the product.

3. International Data Flows

  • Given our international presence, your data may flow between the EU, Switzerland, and the UK. These regions mutually benefit from adequacy decisions. For transfers to third countries (such as the United States), we rely on the Data Privacy Framework (DPF) or Standard Contractual Clauses to ensure an equivalent level of protection.

4. Cookies and Local Storage

  • Auditio uses local storage strictly necessary for technical operation: maintaining your session, display preferences, and fraud prevention. Analytics or marketing services are only activated after your consent through the preferences banner.
  • A first party audience measure works without cookies or storage on your device and independently of your choice for optional analytics. On public pages, it estimates one visitor per day from your IP address and browser with a secret key. Only a fingerprint that changes daily is stored, along with the first visit time, country, approximate city, device category and where the visit came from: the source type (search engine, AI assistant, social network, direct link), the domain name of the referring site and the landing page, never the full address of the link followed. Raw IP addresses are not saved in this database. Known bots and administrators are excluded. Data is deleted after 30 days. This measure is used only for internal audience statistics under our legitimate interest. You may object by contacting info@auditio.app.

5. Retention Period

  • Your account data is kept as long as your account is active. Your oral history (scores, feedback and transcripts) is kept as long as your account is active, and is deleted with it. To measure service activity and retention operationally, Auditio keeps only authenticated-opening timestamps grouped into 3-hour buckets, without URLs, content, IP addresses or device data; this first-party data is deleted after 120 days and does not depend on consent to optional analytics tools. Audio files, as well as imported PDFs and photos, are destroyed immediately after processing: only the extracted text and generated content are retained. To prevent fraud, a hashed, irreversible fingerprint of your email address is retained after account deletion, pursuant to Art. 6(1)(f) GDPR (legitimate interest, fraud prevention).

6. Your Rights

  • You have the right to access, rectify, restrict and erase your data (right to be forgotten), as well as the right to data portability and the right to object to processing based on our legitimate interest. To exercise these rights, contact us at info@auditio.app. You may also lodge a complaint with the data protection authority of your country of residence. You can also withdraw any consent you have given at any time, without affecting processing carried out before.
  • Direct Action: You can delete your account and all associated data instantly from your Dashboard. This action is irreversible.

7. Ownership of your content and AI no-training commitment

  • You retain full ownership of your content (audio recordings, transcripts, oral answers, imported documents and photos). Auditio firmly commits never to use your data to train, fine-tune or evaluate any artificial intelligence model, whether internal, third-party or operated by our subprocessors. Our AI partners operate contractually under a "no-training" tier: your content transits only to produce your analysis, through encrypted channels, without leaving regions benefiting from an adequate level of protection (EU, DPF).
  • Usage licence: To execute the service you request, you grant us a strictly operational licence over your content. The full details (duration, scope, warranties) are set out in articles 6 and 9 of the General Terms of Use.

8. Data Controller and Legal Bases

  • The data controller is the publisher of Auditio (contact: info@auditio.app). Processing relies on the following legal bases: performance of the contract (providing the service you request), your consent (audience measurement and marketing cookies, revocable at any time), and our legitimate interest (fraud prevention, service security and error monitoring). The legal bases for emails are detailed in section 9.

9. Emails

  • Service emails: verifying your address, welcome email, account security, payments and receipts. They are necessary to perform the contract (Art. 6(1)(b) GDPR) and contain no advertising.
  • Tips, follow-up and offers: emails that support your preparation (tips, reminders, a check-in after your oral) and Auditio offers are only sent with your consent. It is asked separately for tips and for offers: at the exam date step, at the end of an oral or in your profile, and is never preselected (Art. 6(1)(a) GDPR, Art. XII.13 of the Belgian Code of Economic Law). If you have bought a subscription or a pack, we may also write to you about similar Auditio services without prior consent unless you object: you are told about this at payment (Belgian Royal Decree of 4 April 2003). These emails are only sent to a verified address.
  • Proof and retention: we keep the date, origin and text version of your consent, and the date you unsubscribed, for as long as your account exists, so we can respect your choice and demonstrate it. Links in our emails carry campaign parameters (utm) that show which email brought you to the site.
  • Newsletter: if you sign up from the site footer, your address is added to our mailing list at Brevo, based on your consent (Art. 6(1)(a) GDPR). Every issue contains an unsubscribe link, and unsubscribing from an Auditio email also removes you from this list.
  • Your right to object: you can withdraw your consent or object to these emails at any time, free of charge and without giving a reason: with the "Unsubscribe" link in each of them, from your profile, or by writing to info@auditio.app. Your choice takes effect immediately and an email confirms it.

Auditio is committed to total transparency regarding your data.