Privacy Policy

Last updated: October 2026
This Privacy Policy is provided in German and English. In case of any discrepancy, the German version prevails.

1. Responsible Party

See Impressum for full contact information. Contact: Contact Form.

2. Data We Collect

Account data: your email address and a unique account identifier (signing in is required to use the app). For security and abuse prevention, Google Firebase Authentication also processes technical sign-in data such as your IP address and device type. We never see or store your password; authentication is handled securely by Google Firebase Authentication.

Email confirmation: after sign-up we send a confirmation link to your email address (via Google Firebase Authentication). The app can only be used with a confirmed email address.

Server logs and abuse protection: when the app contacts our servers (Google Cloud Functions), Google records technical request data such as the IP address and time in server logs. To protect the service against abuse, our server also counts the daily use of AI extraction and recording downloads per internet connection. For this, the IP address is first shortened (the last part is removed) and then converted into an irreversible code (hash). The full IP address is not stored for this purpose.

Content: voice recordings (stored locally on your device and, when you choose to share them, uploaded to Google Firebase Cloud Storage), display names, and script text sent to Google Cloud Vertex AI for analysis.

Free AI quota: the number of script characters processed by the AI, linked to a device identifier, to apply the free usage limit. No script content is stored for this.

Subscription status: whether you have an active subscription, as provided by Google Play or the App Store. We do not receive your payment details.

Microphone during rehearsal (optional): if you turn on auto-advance in rehearsal, the app uses your microphone only to measure the volume on your device and detect when you have finished speaking. This audio is not recorded, stored, or transmitted.

3. Purpose of Processing

Your account lets you sign in, save your projects to the cloud, and access them on any device or after reinstalling. Script text is processed by Google Cloud Vertex AI (Gemini model) to extract character dialogues. Voice recordings are stored locally on your device and, when you choose to share a project, uploaded to Google Firebase Cloud Storage so that members of your project can access them. Display names identify members in shared projects. The microphone level is used solely to advance the rehearsal automatically.

4. Legal Basis

Providing your account, cloud storage, and core app functionality is based on performance of a contract (GDPR Art. 6(1)(b)). Optional processing such as AI extraction and project sharing is based on your consent (GDPR Art. 6(1)(a)), given when you accept the consent popup on first launch. Auto-advance uses the microphone only after you turn it on and grant microphone permission (GDPR Art. 6(1)(a)). Server logs, usage limits per internet connection and the free-quota counter are based on our legitimate interest in operating the service securely and preventing abuse (GDPR Art. 6(1)(f)).

5. Data Transfer and Storage Location

Your projects, shared project data, and voice recordings are stored on Google Cloud servers in Europe (Google Firebase Realtime Database and Cloud Storage, region europe-west1, Belgium). Script text is sent through our server functions (Google Cloud Functions, europe-west1) and processed by Google Cloud Vertex AI within the European Union.

Account data (email address and sign-in information) is processed by Google Firebase Authentication, which runs exclusively in data centers in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has determined an adequate level of data protection; Google's data processing terms additionally include Standard Contractual Clauses.

Google acts as our data processor under its data processing terms (Firebase Data Processing and Security Terms and Google Cloud Data Processing Addendum).

Voice recordings: recordings stay on your device unless you upload them to a shared project. Uploaded recordings are stored in Google Cloud Storage in Europe (europe-west1, Belgium) and are available to the members of that project. Google stores them only on our behalf and according to our instructions (as our data processor). Google does not use them for its own purposes, such as advertising or training AI models, and does not sell them. Recordings are never sent to AI services. You can delete them at any time by deleting the project or your account.

6. Data Retention

Account data: until you delete your account. Sign-in IP addresses: kept by Firebase Authentication for a few weeks for security purposes. Local data: until you delete it. Shared project data and uploaded recordings: until the project owner deletes the project, or until you delete your own data. Server logs: kept by Google Cloud for about 30 days. Usage counters per internet connection (shortened, hashed IP address): deleted after 2 days at the latest.

When data is deleted, it is removed from our active systems immediately, including the associated recording files. Residual copies in Google's backup systems are erased automatically within 180 days.

Vertex AI: script text is not used to train AI models. Google may cache requests temporarily to provide the service, after which they are discarded.

7. Your Rights

You have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. You can withdraw consent at any time.

8. Data Deletion

You can delete your account and all your data anytime from Settings → Delete All My Data (you confirm with your password). This permanently deletes your account, all local data on that device, and your data from our servers, including any uploaded recordings. If you can't access the app, email support@rehearsaiapp.com and we'll delete your account within 30 days. Details: Data Deletion page.

9. Automated Decision-Making

The app uses AI (Google Cloud Vertex AI) to extract dialogues from scripts. This is a text processing function and does not involve profiling or automated decisions affecting your rights.

10. Subscriptions

Subscriptions are managed through Google Play (Android) and the App Store (iOS). You can cancel anytime in your device's subscription settings. Access continues until the end of the current billing period. Refund requests are handled by Google or Apple respectively. Deleting your account does not cancel a subscription; please cancel it in Google Play or the App Store.

11. Account and Device IDs

Account identifiers and device IDs of removed members may be retained to prevent unauthorized re-access to shared projects. The free-quota counter (a character count linked to a device identifier, without any script content) may be kept after account deletion to prevent abuse of the free tier.

12. Changes

We may update this policy. Changes take effect when published on this page.

13. Contact

For questions about your data, please use our Contact Form or email support@rehearsaiapp.com.

14. Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority.

← Back to RehearsAI