Privacy Policy

1. Information We Collect

Information you provide directly

• Account information: name, email address, username, and password when you register.
• Profile information: headline, bio, goals, profile image, skills, languages, social links, and experience level.
• Session participation: attendance records, battle votes, round entries, and challenge interactions.
• Practice recordings: audio (and, if you choose to record with your camera, video) submitted voluntarily through Practice Studio for AI-powered speaking feedback. Recording with video is always your choice, made before each practice; audio-only remains the default.
• Survey responses: answers to onboarding and feedback surveys.
• Prospective-member information: if you submit a contact form, join a waitlist, or express interest in Exprea, we collect your name, email, and any details you provide, and may enrich this with publicly available professional information (see Section 6).

Information collected automatically

• Usage data: pages visited, features used, timestamps of activity, and session duration.
• Product usage record: while you are signed in, we keep our own first-party record of which screens you open and which actions you take inside Exprea — for example submitting a practice take, registering for a session, or posting to the feed — so we can see which parts of the product help and which do not. It records what you did and when, never what you wrote or said: no message text, no transcripts, nothing you typed. It is ours alone and is shared with nobody. This record uses no cookie and no browser storage of its own; it rides the sign-in session you already have, so there is nothing here to accept or decline. We keep it for 180 days, and if your account is deleted the entries stay only as anonymous counts with no link to you.
• Funnel measurement: our own first-party record of how people get from a first visit to signing up and becoming members. It records which kind of page was visited (never its full address), when a form was started, completed or left unfinished (never anything typed into it), when the checkout was opened, and the outcome our payment processor Stripe reports for it (completed, expired or failed, with the plan and amount, never card details). Each entry also carries the campaign tags in the link that brought you here, the website that referred you (its domain only) and your device type (phone, tablet or computer). We do not record your IP address or your browser's identifying details for this. If you are signed in, entries are linked to your account; we rely on our legitimate interest in understanding how people find and join Exprea. If you are not signed in, a visit is identified only by a random number held in your browser's memory for that tab, which disappears when you close it, unless you have accepted Analytics cookies, in which case a first-party cookie (exprea_aid, see Section 8) lets us recognise the same browser across visits. If you then create an account, the visit in which you signed up, and the earlier visits from that browser if you accepted Analytics cookies, are linked to your new account. We also use this record to compare different ways of presenting our plans and prices; which version you see is decided from your account, and nothing is stored on your device for it. This record is ours alone and is shared with nobody.
• Device information: browser type, operating system, and device identifiers.
• Speaking analytics: words per minute, filler word rate, hedging rate, and speaking time derived from session transcripts.
• XP and progress data: experience points earned, achievements unlocked, and milestone completion.
• Analytics and advertising identifiers: where you have consented (see Section 8, Cookies), we collect data via Google Analytics, Amplitude, Google Ads, the Meta Pixel, and the LinkedIn Insight Tag to understand site usage and measure marketing performance.

Information collected at in-person sessions

• Video and audio recording: in-person sessions may be recorded using recording devices operated by Exprea facilitators, capturing audio of your speech and general body-language/movement data (e.g. posture, gesture) for the purpose of generating personalised feedback and dashboard insights.
• This data is processed by our recording technology partner as part of the recording pipeline, and results are transmitted to Exprea's systems for storage and analysis.
• In-person sessions are clearly signposted as recorded. Attendees, including guests who are not Exprea members, will be notified before a session begins and may decline to be recorded by opting out of the recorded area or informing the session facilitator; participation in recorded activity is voluntary.
• Video footage itself is not retained after processing; we retain the derived analytics (e.g. speaking pace, movement patterns) linked to your account, not raw video, unless you are specifically notified otherwise for a given session.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Exprea platform.
• Deliver AI-powered speaking coaching and personalised feedback, including feedback derived from in-person session recordings.
• Track your progress through speaking analytics and XP systems.
• Facilitate Speaker Battles, Impromptu Rounds, and community features.
• Generate leaderboards, achievements, and community recognition.
• Send session reminders, progress reports, and platform notifications via email and, where you have provided a phone number, WhatsApp.
• Follow up with prospective members about joining Exprea.
• Send product news and tips by email, only if you opted in (the box at sign-up, never pre-ticked, or the switch in Settings → Notifications). We record that you said yes and when. Our legal basis is your consent; you can withdraw it at any time in Settings or with the unsubscribe link in any such email, and it does not affect your use of Exprea.
• Improve and optimise the platform based on usage patterns, including measuring the effectiveness of our marketing (where you have consented to analytics/advertising cookies).
• Understand where people stop on the way to joining, and test different ways of presenting our plans and prices, using our own funnel measurement (Section 1).
• Ensure platform security and prevent abuse, including automated error monitoring.

3. AI Processing

Exprea uses AI services to provide speaking feedback, coaching, and support functions:

• We ask first. Before your first recording, we ask your permission to send what you record and write to the services that coach you: Deepgram turns your speech into text; Google Gemini listens to your recording and transcript, and writes your feedback; OpenAI helps write that feedback and reads it aloud in the coach's voice; and Groq reads your onboarding answers to build your path. Nothing goes to them for your coaching until you agree. You can turn this off at any time in Settings → Privacy & data → “AI coaching”; while it is off, you can't record or get feedback.
• Session transcripts and audio are sent to Google Gemini for analysis. AI processing is performed in real-time and data is not retained by the AI provider beyond the request.
• Practice Studio recordings are stored privately so you can play them back from your practice history: audio for 30 days, video for 7 days, after which they are deleted automatically. Your very first recording, the one made when you joined and the one your progress is measured against, is kept for as long as you are a member so you can always hear where you started. You can delete any recording yourself at any time from your practice history (including deleting just the video of a take and keeping its audio), and all recordings are deleted when your account is deleted. They are never publicly accessible: playback is served only over short-lived signed links. Where enabled, Practice Studio uses a hybrid pipeline (Google Gemini for audio and video understanding, OpenAI for written coaching language) to generate feedback.
• The games in Activity → Games that listen to you (for example Plainly, Mood and Tower) stream your voice to our server only while you speak, to be transcribed live; that audio is not stored. The one exception is Tower’s “Replay your tower”: only if you switch it on, the recording of each part of your answer is stored privately so you can hear it again from your results, kept for 30 days and then deleted automatically. You can switch it off and delete what is kept at any time, and it is deleted with your account. Say It and Twister use your camera on your device only; the picture is never sent to us. Mood uses your camera only if you switch on “Use my camera”: then a few small still frames of each mood you say are sent to our server and to Google Gemini once, to judge how well your face carried the feeling, and are not kept; only that judgement (a score and one line) is saved with your round. A clip you make in any game stays on your device unless you share it yourself.
• If you record with video, the on-camera presence analysis looks only at your camera framing and distance, lighting, what is visible behind you, whether your clothing choice works on camera, your posture and hand gestures, and where you are looking. It is explicitly instructed never to comment on, infer, or score physical characteristics you cannot change, including body shape, weight, height, skin, age, gender, ethnicity, perceived attractiveness, disability, or religious dress.
• In-person session audio/movement data captured via recording devices is processed as described in Section 1 and is retained in derived, analytical form only.
• AI feedback is stored in your account to enable progress tracking over time.
• Internally, Exprea staff may use GROQ-powered AI drafting tools to prepare (but not automatically send) suggested replies to member/prospect messages; a human reviews and approves every message before it is sent.
• We do not use your recordings, transcripts or AI feedback to train any model of our own, and we instruct our speech-recognition provider (Deepgram) on every request not to use them to train theirs. You can choose otherwise: Settings → Privacy & data → “AI model training” is off unless you turn it on, and turning it on or off makes no difference to the coaching you receive.

Google Workspace API Data

Exprea's use and transfer of information received from Google APIs (including the Google Calendar API) will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Calendar data obtained through the Google Calendar API is used solely to create, update, and delete calendar events on your behalf, and to display a read-only overlay of your own calendar events within Exprea. This data is never used to train any AI/ML model and is never processed by any AI/ML model.

4. Data Storage and Security

• Your data is stored in EU-region data centres (AWS eu-west-1, Ireland), regardless of where in the world you access Exprea from.
• All data is encrypted with AES-256 at rest and TLS 1.3 in transit.
• Access to personal data is restricted by role-based access controls.
• Authentication uses secure HttpOnly cookies with JWT tokens.
• Admin accounts are protected with mandatory two-factor authentication (TOTP).
• We use automated error-monitoring tooling (Sentry) to detect and diagnose technical issues; this may incidentally capture technical error data, not intentionally targeted personal data.
• We conduct regular security reviews and maintain audit logs.
• Because our members and data centres may be located in different countries, your data may be transferred across borders. Where we transfer personal data out of the UK or EU, we rely on appropriate safeguards such as Standard Contractual Clauses.

5. Data Retention

• Account data: retained while your membership is active, and deleted within 10 days of a deletion request.
• Session recordings (video/audio from online sessions): automatically deleted after 90 days.
• In-person device recordings: raw audio/video is not retained beyond processing; derived analytics are retained for the duration of your membership.
• Practice Studio recordings: audio is kept for 30 days and video for 7 days, then deleted automatically. The exception is your first recording, made when you joined: it is kept for as long as you are a member, because it is what everything after it is compared against. You can delete any recording yourself at any time, including deleting just the video of a take and keeping its audio, and all recordings are deleted with your account. The written AI feedback is kept separately, for the duration of your membership, so you can track your progress.
• Tower replay recordings: kept only if you switch replay on, for 30 days, then deleted automatically; deleted at once if you switch it off and ask, and with your account.
• Speaking analytics: retained for the duration of your membership to enable progress tracking.
• XP and activity logs: retained for the duration of your membership.
• Product usage record: deleted automatically after 180 days. Deleting your account removes your name from it immediately; what is left is a count nobody can trace back to you.
• Funnel measurement: deleted automatically after 14 months, so a month can be compared with the same month a year earlier. Deleting your account removes the link to you immediately. Turning Analytics cookies off deletes the exprea_aid cookie at once and stops its use; entries recorded before that are kept until the 14 months run out.
• Prospective-member (lead) data: retained until you ask us to delete it, opt out of further contact, or convert to a member, whichever comes first, and periodically reviewed for relevance.

6. Data Sharing

We do not sell your personal data. We may share information with:

• Service providers: companies that run parts of Exprea for us, each given only what its task needs and only as necessary to provide our services:
  • Amazon Web Services (AWS): hosting, our database and file storage, in the EU (Ireland).
  • Deepgram: speech-to-text. It turns the speech in your recordings into text.
  • Google Gemini: AI feedback. It listens to your recordings and reads their transcripts to write your feedback.
  • OpenAI: AI feedback and the coach's voice. It helps write your feedback and reads it aloud.
  • Groq: it reads your onboarding answers to build your path, and runs the internal drafting tool described in Section 3.
  • LiveKit: live video and audio for Live Battles.
  • Brevo: email delivery.
  • Sentry: error monitoring, so we can find and fix technical problems.
  • Amplitude: product analytics, only if you accept Analytics cookies. It receives an anonymous device identifier, the pages you open, the buttons and links you click, and the name of an action, such as a practice report being ready. For a sample of visits it also records a replay of how the screen was used, with all text and form fields masked, so we can see where people get stuck. It does not receive your name, email or your voice or video recordings, and it stores data in the United States. In the Exprea mobile apps Amplitude is off until you switch on usage analytics in Settings, and it receives only the name of an action, such as a practice report being ready, with an anonymous device identifier; you can switch it off again at any time.
  • Cloudflare: delivers our files and pages quickly and protects the service from attacks.
  • Apple Push Notification service and Web Push: deliver the notifications you choose to turn on.
  • Stripe: payments and subscriptions.
  • Zoom: online sessions.
  • WhatsApp Business (Meta): session reminders and messages, where you have given us a phone number.
  • Apple and Google sign-in: if you choose to sign in with Apple or Google, they confirm who you are and share your name and email address with us (Apple may share a private relay address instead).
  • Calendar providers (Google Calendar, Microsoft Outlook and Apple iCloud): only if you connect a calendar, to add your Exprea sessions to it and to show your own events beside them.
  • Recall.ai: session transcription, being phased out and currently still in limited use.
  • Our in-person recording technology partner, as described in Section 1.
• Lead-enrichment providers: if you submit a contact/interest form, we may use People Data Labs or Apollo.io to supplement your submission with publicly available professional information (e.g. job title, company), to help our team follow up appropriately.
• Community features: your username, profile, XP, and battle results are visible to other Exprea members as part of the platform's social features.
• Legal requirements: when required by law, regulation, or legal process.

We do not share your data with third parties for advertising or marketing purposes beyond the analytics/advertising platforms disclosed in Section 8, which you can decline via our cookie consent tool.

7. Your Rights

Depending on where you live, you may have some or all of the following rights:

EU/UK residents (under GDPR / UK GDPR)

• Access: request a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete data via your profile settings.
• Erasure: request deletion of your account and associated data, from Settings → Privacy & data or by email; we complete it within 10 days.
• Restriction: request that we limit processing of your data in certain circumstances.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: withdraw consent for optional processing (e.g., AI coaching, AI model training, analytics/advertising cookies) at any time from Settings → Privacy & data or our cookie consent tool. Optional processing is off until you switch it on, so there is nothing to withdraw unless you chose it.

US residents

Depending on your state of residence, you may have the right to know what personal information we collect, request deletion of your data, correct inaccurate data, and opt out of certain types of processing (including targeted advertising). We do not sell personal information.

To exercise any of these rights, contact us at [email protected]. We will respond in accordance with applicable law.

8. Cookies and Tracking Technologies

Exprea uses the following categories of cookies/tracking technology:

• Essential: an HttpOnly authentication cookie that keeps you signed in, and a first-party exprea_consent cookie that remembers this choice for six months. Neither can be disabled and neither requires consent.
• Not a cookie at all: our own product-usage record (Section 1) stores nothing on your device — no cookie, no local storage — so it is not covered by the choices below and there is nothing to switch off. It applies only while you are signed in. Our funnel measurement (Section 1) likewise stores nothing on your device unless you accept Analytics: without it, a visit is counted using a random number kept in memory for the open tab only.
• Where you came from: when you first arrive through a link, we keep the campaign tags in it (for example utm_source and utm_campaign), any ad click identifier it carries, and the website that referred you, in your browser's local storage under psc-attribution for up to 90 days. It is never sent anywhere on its own. It goes to us only with a form you choose to submit, such as signing up or asking to be contacted, so we know which campaign brought you. It is first-party, read only by Exprea and shared with nobody, and we rely on our legitimate interest in knowing which of our campaigns work, so it is kept whatever you choose below. You can remove it at any time by clearing this site's data in your browser.
• Analytics: Google Analytics 4 (gtag.js), so we can see which parts of the site people use; Amplitude, which counts which features are used, records masked replays of a sample of visits, and sets its own identifier in your browser, and is not started at all unless you accept this category; and exprea_aid, Exprea's own first-party cookie, which holds a random identifier so we can recognise the same browser across visits and see which visits lead to joining. It lasts six months, is read only by Exprea, is never shared, and is deleted as soon as you turn Analytics off.
• Advertising: Google Ads, the Meta (Facebook/Instagram) Pixel and the LinkedIn Insight Tag, so we can measure which campaigns bring people here. The Meta and LinkedIn tags are not loaded at all unless you accept this category.

Consent is managed by our own tool, built into this site. There is no third-party consent vendor. In the EEA, the UK and Switzerland nothing in the analytics or advertising categories runs until you accept it. Elsewhere those cookies are set by default and you can turn them off at any time. We determine which applies from the country your connection resolves to, and treat anything we cannot determine as requiring your consent first.

You can change or withdraw your choice at any time from the Cookies link in the site footer, or from Settings → Privacy & data if you have an account. We keep a record of each choice you make (the decision, its time, and the country your connection resolved to) so we can demonstrate that consent was given. We do not store your IP address for this purpose.

We do not use these tools to sell your personal data, and you may use the platform's core features without accepting analytics or advertising cookies.

9. Children's Privacy

Exprea is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that information.

10. International Operations

Exprea welcomes members globally. Our current chapters and focus markets include the European Union, the United Kingdom, and the United States, with further regions expected to follow. Regardless of where you are located, your data is processed as described in this Policy, and you are entitled to the rights applicable in your jurisdiction as described in Section 7.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of Exprea after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at: