What we collect and where it goes

The short version

To use Practice Mode you sign in with Google. We store your email and name so we can save your sessions to your account. When you type an answer during a practice case, that answer is sent to Anthropic (the company behind Claude) so the AI interviewer can respond. That is the only third-party model provider we use. We do not sell data, do not run ad trackers, and do not email you unless you email us first.

What we store

• Your Google account email and display name, so you can log in and see your own past sessions.
• Your practice sessions— the case you picked, the questions the AI asked, the answers you typed, the AI’s feedback, and timestamps.
• A weekly session count, so we can enforce the 5-per-week cap. This resets 7 days after each session, per session.
• Standard server logs from our hosting provider (Vercel): IP address, request path, response code, user agent. Kept short-term for debugging and abuse prevention.

We do notcollect: your Google contacts, your Drive files, your calendar, your location, your phone number, or anything from other Google services. The Google sign-in only asks for email and profile — Google’s consent screen shows you exactly what’s being requested.

Where your typed answers go

Practice Mode is a live conversation with Claude, an AI model made by Anthropic. When you type an answer, the message plus the current case context is sent to Anthropic’s API so the model can generate a reply. Anthropic’s handling of that data is governed by their own terms — see Anthropic’s commercial terms and privacy policy. Per their commercial API terms at the time of writing, inputs sent through the API are not used to train their models.

We also store a copy of the transcript on our side so you can review it later on your dashboard. That copy is scoped to your account and only you (and the maintainer, for debugging if you ask for help) can see it.

Guided Cases and other pages

Everything outside Practice Mode — Guided Cases, Frameworks, Interview Playbook — works without an account. Those pages don’t send anything you type to an AI, and don’t require sign-in.

Who can see your data

• You, when you log in.
• The maintainerof CaseKit, when investigating a bug or a report of abuse. We don’t read sessions for fun.
• Anthropic, at the moment you send a practice answer, so Claude can respond. Bound by their terms above.
• Our hosting and database providers(Vercel for hosting, Supabase for the Postgres database and auth tables) as processors — they run the servers but don’t look at the content.

We do not share your data with advertisers or data brokers. There are none in the stack.

How long it’s kept

• Account and sessions: until you delete them or ask us to delete your account.
• Weekly session counter: rolls off automatically 7 days after each session.
• Server logs: short-term (typically 30 days), then rotated out by the hosting provider.

Deleting your data

Email hello@casekit.appfrom the Google address you signed up with and we’ll delete your account and all associated sessions. No forms, no retention tricks. We’ll confirm by reply within a few days.

You can also revoke CaseKit’s access to your Google account at any time from your Google account permissions page.

Cookies and tracking

We set the essential sign-in cookies that NextAuth needs (a session token, a CSRF token, and a short-lived callback URL). That’s it. No Google Analytics, no Meta pixels, no ad networks, no third-party session-replay tools.

Kids

CaseKit is built for undergraduates recruiting for consulting. It is not directed at children under 13, and we don’t knowingly create accounts for anyone under 13. If you believe a child has signed up, email us and we’ll delete the account.

Changes to this notice

If we change anything material — a new data recipient, a new category of data — we’ll update the “last updated” date at the top of this page. For a significant change we’ll show a one-time banner the next time you sign in.

Contact

Questions, deletion requests, or anything else: hello@casekit.app.