Who this notice covers
This notice explains how StationReady collects, uses, stores and shares personal information when you visit the website, create an account or complete a practice station. StationReady is responsible for the personal information described here.
Information we collect
We collect the name and email address you provide, authentication and account records, plan and usage information, promotion or access-code redemption status, Stripe customer, Checkout Session and Payment Intent identifiers, payment status and access dates, practice transcripts, selected scenario, timing, scores, feedback, marker confidence, limited delivery measures such as estimated pace and captured filler count, technical request records and any privacy preferences you set.
If you submit a spoken response, the recording is transmitted for transcription and marking. StationReady stores the resulting transcript and report, not the raw audio file, in your account record. StationReady does not receive or store your full card number or card security code. StationReady stores mock access codes as one-way hashes rather than retaining their readable value.
Why we use it
We use account information to authenticate you and provide the service. We use practice information to transcribe and mark the response, display feedback, maintain your progress history, manage usage limits, investigate errors, protect the service and meet legal obligations. We use only the information reasonably needed for these purposes.
Optional future model improvement
If you opt in, eligible transcripts, scores, feedback, marker reviews and delivery measures may be selected to test, evaluate, calibrate or train future StationReady markers. This can include comparing a marker’s score with a later human review. Direct account identifiers will be removed where reasonably practical before records are selected.
Consent is off unless you choose it. You can change the setting in your dashboard. Withdrawal applies to new use from that point forward and does not affect normal account access.
Service providers and overseas processing
StationReady uses service providers to operate the platform. Supabase provides authentication and database services. OpenAI API services provide transcription and AI-assisted marking. Stripe processes payments and manages billing. Website hosting and security providers deliver the application. These providers may process information outside New Zealand and are permitted to use it only for the services and protections described in their agreements with StationReady.
Storage and retention
Practice records are kept while your account remains active so that your dashboard and progress history work. Security and usage records may be kept for a shorter operational period. We will delete or anonymise personal information when it is no longer reasonably required, subject to legal, fraud-prevention, dispute and backup requirements.
You may request deletion of your account and practice records. A deletion request will not necessarily remove information that has already been lawfully de-identified or incorporated into an aggregated evaluation or trained model following your prior consent.
Your choices and rights
You may ask for access to personal information StationReady holds about you, ask for a correction, request account deletion, or withdraw future model-improvement consent. We may need to verify your identity before acting on a request. If a correction is not made, you may ask us to attach a statement of correction to the relevant information.
Security and safe practice content
We use access controls, row-level database policies, authenticated server functions and transport encryption to protect account records. No internet service can guarantee absolute security. Please use fictional or generalised practice examples and never submit patient-identifiable, confidential, placement or recalled interview information.
Changes and contact
We may update this notice when the service, providers or legal requirements change. The current effective date will appear at the top. Material changes will be communicated reasonably before they take effect when practical.
For access, correction, deletion or privacy questions, contact the StationReady privacy contact at mentoratutoring@gmail.com. You may also raise a concern with the Office of the Privacy Commissioner in New Zealand.