Privacy Policy

1. Who we are

DemoTime is a brand operated by an independent individual in Singapore (“DemoTime,” “we,” “us,” or “our”). DemoTime provides AI-powered workplace English voice practice, practice feedback, and related account and billing features.

For questions, privacy requests, or complaints, contact our Data Protection Officer at support@demotime.app.

2. Scope

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal data when you visit the DemoTime website, create or use a DemoTime account, take part in a voice practice session, purchase a subscription or Credits, contact support, or otherwise use DemoTime.

DemoTime is intended for people aged 18 or older and is not offered to users in mainland China. If you are under 18 or located in mainland China, do not create an account or use the service.

3. Personal data we collect

3.1 Account and sign-in information

When you sign in with Google or GitHub, we may receive information that the provider makes available with your permission, such as your name, email address, profile image, provider identifier, and sign-in status. We do not receive or store your Google or GitHub password.

3.2 Profile and preference information

We collect information you provide during onboarding or in settings, including your work role, English speaking level, improvement goals, interface language, preferred practice difficulty, preferred duration, and preferred AI accent.

3.3 Practice content

When you use voice practice, we process:

• Your live audio and speech during the session.
• The text transcript created from the conversation.
• Your chosen scenario, roles, goals, difficulty, duration, and accent.
• AI responses, feedback, suggested phrases, and phrases you choose to save.
• Session timing, completion status, and Credits used.

DemoTime processes raw audio only as needed to provide the live conversation and transcription. DemoTime does not retain raw audio after that real-time processing is complete. Service providers involved in live voice processing may handle audio transiently on our behalf under their applicable safeguards and retention controls.

3.4 Billing and transaction information

If you make a purchase, our payment provider processes your payment card and billing details. We receive transaction information such as the purchased plan or package, amount, currency, payment status, billing period, and transaction reference. We do not receive or store your full payment card number or card security code.

3.5 Device and service usage information

We may collect limited operational information needed to run and secure the service, such as browser type, device type, language, approximate location derived from an IP address, sign-in and session timestamps, pages or features used, crash information, security events, and diagnostic logs.

We do not use advertising trackers, cross-site behavioural advertising cookies, or third-party marketing pixels at launch.

3.6 Communications

If you contact us, we collect the content of your message, your contact details, and information needed to investigate and respond to your request.

4. How we collect personal data

We collect personal data:

• Directly from you when you configure or use DemoTime.
• From Google or GitHub when you choose one of those sign-in methods.
• From payment providers when you make or manage a purchase.
• Automatically when necessary to keep the service available, secure, and reliable.
• From service providers acting on our behalf, such as voice, AI, hosting, monitoring, and customer-support providers.

5. How we use personal data

We use personal data only for purposes a reasonable person would consider appropriate in the circumstances, including to:

• Create, authenticate, secure, and manage your account.
• Personalise scenario recommendations and default practice settings.
• Run real-time voice conversations, generate transcripts, and prepare feedback.
• Save your practice history and phrases at your request.
• Display, issue, deduct, and explain Credits.
• Process purchases, subscriptions, cancellations, refunds when applicable, and billing support.
• Respond to questions, privacy requests, complaints, and support issues.
• Detect abuse, fraud, security incidents, and violations of our Terms of Use.
• Diagnose failures and improve the safety, accessibility, reliability, and quality of DemoTime.
• Comply with law, enforce agreements, and protect our users, DemoTime, and others.

We do not use your voice, transcripts, practice content, or feedback to train DemoTime’s or a third party’s general-purpose AI models unless you separately and expressly opt in to such use. We do not sell or rent personal data.

6. Consent and your choices

We notify you of the relevant purposes when we collect personal data and obtain consent where required. In some cases, consent may be deemed from your voluntary provision of information for an evident purpose, or processing may be permitted or required by applicable law.

You may withdraw consent for optional processing by contacting support@demotime.app. Withdrawal does not affect processing already carried out lawfully. If information is necessary to provide or secure DemoTime, withdrawing consent may mean that we cannot continue providing some or all of the service to you. We will explain the likely consequence before completing the request.

7. How we disclose personal data

We may disclose only the personal data reasonably needed to the following categories of recipients:

• Sign-in providers, to authenticate your Google or GitHub account.
• Voice and AI service providers, to recognise speech, generate voice responses, conduct the conversation, and prepare feedback.
• Payment and billing providers, to process purchases and manage subscriptions.
• Hosting, storage, security, monitoring, and support providers, to operate and protect DemoTime.
• Professional advisers and authorities, when reasonably necessary to obtain advice, comply with law, respond to lawful requests, prevent harm, or protect legal rights.
• A successor or transaction participant, if DemoTime is reorganised, transferred, financed, sold, or combined with another service, subject to appropriate confidentiality and legal protections.

Service providers may process personal data only for the services they provide to us and under applicable contractual, confidentiality, security, and data-protection obligations.

8. International transfers

DemoTime is operated from Singapore, while some service providers may process personal data in other countries. Privacy laws in those countries may differ from those where you live.

When personal data is transferred outside Singapore, we take reasonable steps to ensure that the recipient provides a standard of protection comparable to the protection required under Singapore’s Personal Data Protection Act 2012, unless an applicable legal exception applies. These steps may include contractual protections, provider assessments, and other recognised safeguards.

9. Retention and deletion

We keep personal data only for as long as it is reasonably needed for the purposes described in this Policy or for a legal or business purpose.

• Raw voice audio: processed for the live session and not retained by DemoTime after real-time processing is complete.
• Transcripts, practice settings, feedback, saved phrases, and practice history: retained while your account remains active, unless you delete an individual practice or your account.
• Deleted practice or account content: removed from active systems within 30 days after a valid deletion request is completed.
• Backups: residual copies may remain in protected backups for up to 90 days and are not restored for ordinary product use.
• Billing, fraud-prevention, dispute, and legal records: retained for the period reasonably required by applicable law and legitimate record-keeping needs.
• Support records: retained for as long as needed to resolve the request, document the outcome, and meet security or legal obligations.

We may retain anonymised or aggregated information that no longer identifies you.

10. Security

We use reasonable administrative, organisational, and technical safeguards designed to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, loss, or disposal. Access is limited to people and providers who reasonably need it for their work.

No online service is completely secure. You are responsible for protecting access to your Google or GitHub account and for signing out of shared devices. If you believe your DemoTime account or data may have been compromised, contact support@demotime.app promptly.

If a data breach is notifiable under applicable law, we will assess it and notify the relevant authority and affected individuals as soon as practicable as required.

11. Cookies and similar technologies

At launch, DemoTime uses only cookies and similar local technologies reasonably necessary to:

• Keep you signed in and protect your session.
• Prevent fraud and maintain service security.
• Remember language and essential product preferences.
• Complete and verify payment-related flows.

We do not use advertising cookies or cross-site behavioural tracking. If we later introduce non-essential analytics or marketing technologies, we will update this Policy and provide any notice or choice required by law before using them.

12. Product and service messages

We may send messages needed to operate your account, such as sign-in or security notices, purchase receipts, subscription changes, service updates, support replies, and material changes to our terms or privacy practices. These are service messages, not marketing.

We do not send marketing email at launch. If we introduce marketing communications later, they will be optional and will include a way to unsubscribe.

13. Your rights

Subject to applicable law and any permitted exceptions, you may ask us to:

• Confirm whether we hold personal data about you.
• Provide access to personal data in our possession or control and information about how it was used or disclosed.
• Correct inaccurate or incomplete personal data.
• Provide a portable copy of relevant personal data where available and required.
• Delete an individual practice or your account data.
• Withdraw consent for optional processing.
• Object to or restrict certain processing where your local law provides that right.
• Receive information about an eligible data breach.
• Make a complaint to us or to an applicable data-protection authority.

You can use available account controls or email support@demotime.app. We may need to verify your identity before completing a request. We will respond within the period required by applicable law. We may refuse or limit a request where the law permits or requires us to do so, and will explain the basis when appropriate.

14. Children

DemoTime is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a person under 18 has provided personal data to DemoTime, contact us and we will take reasonable steps to delete it.

15. Third-party links and services

DemoTime may link to or interoperate with services operated by others, including sign-in and payment providers. Their handling of information outside DemoTime is governed by their own terms and privacy notices. Review those notices before using the relevant third-party service.

16. Changes to this Policy

We may update this Privacy Policy to reflect changes to DemoTime, our practices, or applicable law. We will publish the revised Policy and update the effective date. If a change materially affects how we use personal data, we will provide additional notice through DemoTime or by an appropriate account communication before the change takes effect when required.

17. Contact us

For privacy questions, access or correction requests, consent withdrawal, deletion requests, or complaints, contact:

DemoTime Data Protection Officer Independent operator of the DemoTime brand, Singapore Email: support@demotime.app