Exprea ("we", "us", or "our") operates the platform at exprea.io. Exprea is a global community, currently focused on members in the European Union, the United Kingdom, and the United States. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, attend our sessions (online or in person), or otherwise interact with us (including as a prospective member).

By accessing or using Exprea, you agree to this Privacy Policy. If you do not agree with the terms of this policy, please do not access the platform.

1. Information We Collect

Information you provide directly

Account information: name, email address, username, and password when you register.
Profile information: headline, bio, goals, profile image, skills, languages, social links, and experience level.
Session participation: attendance records, battle votes, round entries, and challenge interactions.
Practice recordings: audio (and, if you choose to record with your camera, video) submitted voluntarily through Practice Studio for AI-powered speaking feedback. Recording with video is always your choice, made before each practice; audio-only remains the default.
Survey responses: answers to onboarding and feedback surveys.
Prospective-member information: if you submit a contact form, join a waitlist, or express interest in Exprea, we collect your name, email, and any details you provide, and may enrich this with publicly available professional information (see Section 6).

Information collected automatically

Usage data: pages visited, features used, timestamps of activity, and session duration.
Product usage record: while you are signed in, we keep our own first-party record of which screens you open and which actions you take inside Exprea — for example submitting a practice take, registering for a session, or posting to the feed — so we can see which parts of the product help and which do not. It records what you did and when, never what you wrote or said: no message text, no transcripts, nothing you typed. It is ours alone and is shared with nobody. This record uses no cookie and no browser storage of its own; it rides the sign-in session you already have, so there is nothing here to accept or decline. We keep it for 180 days, and if your account is deleted the entries stay only as anonymous counts with no link to you.
Device information: browser type, operating system, and device identifiers.
Speaking analytics: words per minute, filler word rate, hedging rate, and speaking time derived from session transcripts.
XP and progress data: experience points earned, achievements unlocked, and milestone completion.
Analytics and advertising identifiers: where you have consented (see Section 8, Cookies), we collect data via Google Analytics, Google Ads, the Meta Pixel, and the LinkedIn Insight Tag to understand site usage and measure marketing performance.

Information collected at in-person sessions

Video and audio recording: in-person sessions may be recorded using wearable smart-glasses devices operated by Exprea facilitators, capturing audio of your speech and general body-language/movement data (e.g. posture, gesture) for the purpose of generating personalised feedback and dashboard insights.
This data is processed by our hardware and SDK partner as part of the recording pipeline, and results are transmitted to Exprea's systems for storage and analysis.
In-person sessions are clearly signposted as recorded. Attendees, including guests who are not Exprea members, will be notified before a session begins and may decline to be recorded by opting out of the recorded area or informing the session facilitator; participation in recorded activity is voluntary.
Video footage itself is not retained after processing; we retain the derived analytics (e.g. speaking pace, movement patterns) linked to your account, not raw video, unless you are specifically notified otherwise for a given session.

2. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Exprea platform.
Deliver AI-powered speaking coaching and personalised feedback, including feedback derived from in-person session recordings.
Track your progress through speaking analytics and XP systems.
Facilitate Speaker Battles, Impromptu Rounds, and community features.
Generate leaderboards, achievements, and community recognition.
Send session reminders, progress reports, and platform notifications via email and, where you have provided a phone number, WhatsApp.
Follow up with prospective members about joining Exprea.
Improve and optimise the platform based on usage patterns, including measuring the effectiveness of our marketing (where you have consented to analytics/advertising cookies).
Ensure platform security and prevent abuse, including automated error monitoring.

3. AI Processing

Exprea uses AI services to provide speaking feedback, coaching, and support functions:

Session transcripts and audio are sent to Google Gemini for analysis. AI processing is performed in real-time and data is not retained by the AI provider beyond the request.
Practice Studio recordings are stored privately so you can play them back from your practice history: audio for 30 days, video for 7 days, after which they are deleted automatically. Your very first recording, the one made when you joined and the one your progress is measured against, is kept for as long as you are a member so you can always hear where you started. You can delete any recording yourself at any time from your practice history (including deleting just the video of a take and keeping its audio), and all recordings are deleted when your account is deleted. They are never publicly accessible: playback is served only over short-lived signed links. Where enabled, Practice Studio uses a hybrid pipeline (Google Gemini for audio and video understanding, OpenAI for written coaching language) to generate feedback.
If you record with video, the on-camera presence analysis looks only at your camera framing and distance, lighting, what is visible behind you, whether your clothing choice works on camera, your posture and hand gestures, and where you are looking. It is explicitly instructed never to comment on, infer, or score physical characteristics you cannot change, including body shape, weight, height, skin, age, gender, ethnicity, perceived attractiveness, disability, or religious dress.
In-person session audio/movement data captured via wearable devices is processed as described in Section 1 and is retained in derived, analytical form only.
AI feedback is stored in your account to enable progress tracking over time.
Internally, Exprea staff may use GROQ-powered AI drafting tools to prepare (but not automatically send) suggested replies to member/prospect messages; a human reviews and approves every message before it is sent.
We do not use your recordings, transcripts or AI feedback to train any model of our own, and we instruct our speech-recognition provider on every request not to use them to train theirs. You can choose otherwise: Settings → Privacy & data → “AI model training” is off unless you turn it on, and turning it on or off makes no difference to the coaching you receive.

Google Workspace API Data

Exprea's use and transfer of information received from Google APIs (including the Google Calendar API) will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Calendar data obtained through the Google Calendar API is used solely to create, update, and delete calendar events on your behalf, and to display a read-only overlay of your own calendar events within Exprea. This data is never used to train any AI/ML model and is never processed by any AI/ML model.

4. Data Storage and Security

Your data is stored in EU-region data centres (AWS eu-west-1, Ireland), regardless of where in the world you access Exprea from.
All data is encrypted with AES-256 at rest and TLS 1.3 in transit.
Access to personal data is restricted by role-based access controls.
Authentication uses secure HttpOnly cookies with JWT tokens.
Admin accounts are protected with mandatory two-factor authentication (TOTP).
We use automated error-monitoring tooling (Sentry) to detect and diagnose technical issues; this may incidentally capture technical error data, not intentionally targeted personal data.
We conduct regular security reviews and maintain audit logs.
Because our members and data centres may be located in different countries, your data may be transferred across borders. Where we transfer personal data out of the UK or EU, we rely on appropriate safeguards such as Standard Contractual Clauses.

5. Data Retention

Account data: retained while your membership is active and for 30 days after deletion request.
Session recordings (video/audio from online sessions): automatically deleted after 90 days.
In-person wearable-device recordings: raw audio/video is not retained beyond processing; derived analytics are retained for the duration of your membership.
Practice Studio recordings: audio is kept for 30 days and video for 7 days, then deleted automatically. The exception is your first recording, made when you joined: it is kept for as long as you are a member, because it is what everything after it is compared against. You can delete any recording yourself at any time, including deleting just the video of a take and keeping its audio, and all recordings are deleted with your account. The written AI feedback is kept separately, for the duration of your membership, so you can track your progress.
Speaking analytics: retained for the duration of your membership to enable progress tracking.
XP and activity logs: retained for the duration of your membership.
Product usage record: deleted automatically after 180 days. Deleting your account removes your name from it immediately; what is left is a count nobody can trace back to you.
Prospective-member (lead) data: retained until you ask us to delete it, opt out of further contact, or convert to a member, whichever comes first, and periodically reviewed for relevance.

7. Your Rights

Depending on where you live, you may have some or all of the following rights:

EU/UK residents (under GDPR / UK GDPR)

Access: request a copy of the personal data we hold about you.
Rectification: correct inaccurate or incomplete data via your profile settings.
Erasure: request deletion of your account and associated data.
Restriction: request that we limit processing of your data in certain circumstances.
Portability: receive your data in a structured, machine-readable format.
Objection: object to processing based on legitimate interests.
Withdraw consent: withdraw consent for optional processing (e.g., AI model training, analytics/advertising cookies) at any time from Settings → Privacy & data or our cookie consent tool. Optional processing is off until you switch it on, so there is nothing to withdraw unless you chose it.

US residents

Depending on your state of residence, you may have the right to know what personal information we collect, request deletion of your data, correct inaccurate data, and opt out of certain types of processing (including targeted advertising). We do not sell personal information.

To exercise any of these rights, contact us at [email protected]. We will respond in accordance with applicable law.

8. Cookies and Tracking Technologies

Exprea uses the following categories of cookies/tracking technology:

Essential: an HttpOnly authentication cookie that keeps you signed in, and a first-party exprea_consent cookie that remembers this choice for six months. Neither can be disabled and neither requires consent.
Not a cookie at all: our own product-usage record (Section 2) stores nothing on your device — no cookie, no local storage — so it is not covered by the choices below and there is nothing to switch off. It applies only while you are signed in.
Analytics: Google Analytics 4 (gtag.js), so we can see which parts of the site people use.
Advertising: Google Ads, the Meta (Facebook/Instagram) Pixel and the LinkedIn Insight Tag, so we can measure which campaigns bring people here. The Meta and LinkedIn tags are not loaded at all unless you accept this category.

Consent is managed by our own tool, built into this site. There is no third-party consent vendor. In the EEA, the UK and Switzerland nothing in the analytics or advertising categories runs until you accept it. Elsewhere those cookies are set by default and you can turn them off at any time. We determine which applies from the country your connection resolves to, and treat anything we cannot determine as requiring your consent first.

You can change or withdraw your choice at any time from the Cookies link in the site footer, or from Settings → Privacy & data if you have an account. We keep a record of each choice you make (the decision, its time, and the country your connection resolved to) so we can demonstrate that consent was given. We do not store your IP address for this purpose.

We do not use these tools to sell your personal data, and you may use the platform's core features without accepting analytics or advertising cookies.

9. Children's Privacy

Exprea is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that information.

10. International Operations

Exprea welcomes members globally. Our current chapters and focus markets include the European Union, the United Kingdom, and the United States, with further regions expected to follow. Regardless of where you are located, your data is processed as described in this Policy, and you are entitled to the rights applicable in your jurisdiction as described in Section 7.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of Exprea after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

Exprea

Email: [email protected]