Privacy Policy

Version 2026-10-10-draft · Draft, awaiting legal review before public launch.

Pitchy is built for high school students, many of whom are under 18. We collect as little as we can, keep everything private by default, and let you download or delete it whenever you want.

Who can use Pitchy

Accounts are for people 13 and older. If our age question shows you're under 13, we don't create an account and don't keep what you entered.

What we collect

• Email address: to send sign-in codes. We never show it to anyone, including teammates and friends.
• Beta survey answers (optional): after your 1st and 5th scored roleplays we may ask how fair the score felt, how useful the feedback was, and whether you'll practice again, plus an optional comment. The Pitchy team sees answers without your name or email. They're deleted with your account.
• If you sign in with Google or Facebook: we receive your email address and your account ID with that service, to recognize you next time. They also send your name and profile photo; we don't keep either (you choose your own display name), and we don't keep any access to your Google or Facebook account. You still answer the same age question first.
• Age range (13–15, 16–17, or 18+): we ask for your birth month and year but only keep the range.
• Display name, a random handle (also your friend code) and a generated avatar. A nickname is fine.
• Optional profile and goals: school name, experience, your event, competition date, weekly goal, judge appearance.
• Time zone from your browser, so streaks use your own calendar days. We don't collect your location.
• Practice: roleplay sessions (the case, your notes, what you and the judge said), Toolkit exercises, exam practice answers, and when you practiced.
• Spoken answers: if you choose voice, your audio is sent for transcription and then discarded. We keep the text and how long you spoke, never the audio. To keep voice working well, we also record timing numbers (like how long transcription took), your browser type and any technical problems, linked to a scrambled session code rather than your account. These have no audio or words and are deleted after 90 days.
• Feedback on your practice: practice scores, quotes from your own answers that support them, coaching notes, Replay Lab retries, and any transcript corrections you flag.
• Coach chats: the questions you ask the coach and its answers.
• Teams and friends: teams you join or lead, your role, assignments, friend requests and friendships, and your sharing choices.
• Achievements, your dashboard layout, and settings like motion and the Plus waitlist switch.
• Feedback you send us, with the page you were on (without anything after a “?” in the address).
• Agreements: which version of these documents you agreed to, and when.
• Sign-in and security records: active sessions (browser type and IP address) and events like sign-ins and deletions.
• AI usage records: which AI feature ran, when, how long it took and what it cost. These records don't include what you said.

How AI is used

To run the judge, scoring, coach, retries and voice features, we send the case and the relevant parts of your session (your words, the judge's questions, and scores) to AI model providers through Vercel AI Gateway. We don't send your email address or account details. Providers process this on our behalf to return a response.

Before public launch we will list each provider here and confirm their data-use terms. We will not allow your practice to be used to train their models.

What we don't collect

• Your birthday, real name, photos, phone number or location.
• Audio or video recordings. If recording is ever offered, it will be optional and will ask for permission first.
• No ads, and no selling or sharing of personal information.

Who sees your data

• You. Your profile and practice are private by default, and nothing becomes public on its own.
• Team leaders see which team assignments you've finished, and only if you turn on sharing for that team.
• Friends see your display name and, only if you turn it on, your current streak and badge count.
• The Pitchy team sees feedback you send and reviews practice content. We look at individual accounts only to keep the service safe or when you ask us to.
• Service providers (hosting, database, email delivery, AI models) process data only on our behalf.

How long we keep it

• Sign-in codes expire after 5 minutes and are stored only as a one-way hash. Expired codes and sessions are deleted daily.
• AI usage records are deleted after 180 days, and security records after a year. Feedback we've resolved is deleted after a year. Voice timing records are deleted after 90 days.
• Unfinished retries are deleted after a day.
• Everything else stays until you delete it or your account.
• When you delete your account, your data is removed immediately. A record that “an account was deleted” is kept with nothing that identifies you. If you led a team, it's deleted too, unless you hand it to someone else first.

Your choices

• Download everything we store about you from Settings → Account (a JSON file).
• Turn sharing with team leaders and friends on or off at any time.
• Flag transcription errors. Your original transcript is kept, and corrections only change scores if you choose to re-score.
• Edit your profile, sign out other devices, or permanently delete your account from Settings.

Affiliation

Pitchy is an independent practice tool. It is not affiliated with, endorsed by, or sponsored by DECA Inc. DECA is a registered trademark of DECA Inc.