Privacy
Privacy Policy
Effective 26 September 2026
This policy describes how personal data is processed when you use the Neverblank iPhone app and this website (neverblank.io). It covers both. It does not claim that data never leaves your phone, that nothing is retained, that you are anonymous, that data is never used for model training by any provider, or that there is no tracking of any kind.
1. Who operates Neverblank
Neverblank is the product name of the iPhone interview assistant and of this website. The registered legal name, company status, postal address, VAT number and publication director of the operator will be published on the Legal notice page as soon as they are confirmed. Until then, the operator can be reached at the privacy and support addresses below. Do not treat the product name alone as a company registration.
Privacy contact: privacy@neverblank.io. Support contact: support@neverblank.io.
2. What this policy covers
It covers: installing and using the app; microphone access and transcription; notes, files and extracted text; tapping Generate; local interview history; App Store purchases and subscription checks; visiting this website; and contacting us.
The app is intended for adults preparing professional interviews. It is not directed at children under 16.
3. Microphone and speech
After you grant permission, Neverblank uses the iPhone microphone to transcribe the interview you are in. Transcription is designed to run on the device using Apple speech facilities available on a compatible iPhone.
Neverblank does not capture another app’s in-call audio on the same device. It hears what the microphone can hear in the room or through whatever you point the microphone at.
The shipping design does not keep a raw audio recording of the interview as a playback file. The working artefact is the transcript (and the answers, notes and files you keep). If a given iOS version cannot complete on-device transcription, the app may be unable to transcribe rather than silently upload your voice to an undeclared service. We will update this section if a fallback speech service is actually shipped.
Granting the microphone is optional in the sense that you can refuse iOS permission — the live transcription features will not work without it.
4. What stays on your iPhone
Transcripts, generated answers, notes, and original attachments you import are stored locally in the app’s interview history on that iPhone, until you delete the interview, remove the attachment, or delete the app.
Deleting the app removes local history from that device. It does not cancel an Apple subscription, and it does not instantly erase every record held by Apple, RevenueCat, hosting or AI providers.
5. What is sent when you generate an answer
Answers are created only when you tap Generate (or an equivalent on-demand control). At that moment the app can send, to Neverblank’s backend, the portion of conversation text needed to draft the answer, plus notes and extracted file text you added, and an image if you attached one for context.
Raw microphone audio is not the payload for generation. Generation needs text (and, if you attached one, an image).
The backend is hosted on Fly.io. Generation is routed through OpenRouter to one or more model providers selected for the task. Those providers receive the prompt content required to return a draft. Their own terms also apply to that processing.
We do not describe this as “your data is never used for training.” Model providers’ terms govern their use of prompts. We do not currently publish a contractual guarantee that every routed provider forbids training on prompts.
6. Installation, subscription and entitlement data
To run the service, the app and backend may process: an installation or device-related credential, App Store transaction identifiers, RevenueCat subscriber identifiers, usage counters tied to preview or subscription limits, and entitlement checks (whether a feature is currently unlocked).
Purchases are processed by Apple. RevenueCat is used to verify and restore subscription status. We do not collect your full card number; Apple handles payment credentials.
7. Processors and infrastructure
Depending on the feature you use, personal data may be processed by:
- Apple — App Store distribution, In-App Purchases, restore, and related account identifiers.
- RevenueCat — subscription status, entitlements, restore.
- Fly.io — hosting of the Neverblank application backend.
- OpenRouter and the model providers it routes to — AI completion when you generate an answer.
- The website host, Vercel Inc. — serving neverblank.io.
8. This website
neverblank.io is a public information site. It does not require an account, does not run a cookie wall, and does not load advertising pixels or analytics tags.
The language you read is chosen in the URL (English or French). That choice is not stored as a tracking cookie. Server logs at the website host may include IP address, user-agent and requested URL for security and delivery, for a limited operational period.
If you email us, we process the content of your message and your email address to reply.
9. Diagnostics, support attachments, logs
The app may send limited operational signals needed to keep generation, preview counters and entitlements working. Those are not advertising profiles.
If you report a bug, you may optionally attach a screenshot or diagnostics. Strip names, transcript excerpts, API keys and anything you do not want us to see. We never ask for passwords or API keys.
Operational logs on the backend may include timestamps, installation or request identifiers, error codes and coarse usage counters. They are used to operate, secure and debug the service — not to sell ads.
10. Purposes and legal bases
Where the GDPR or UK GDPR applies, we rely on:
- Performance of a contract (Art. 6(1)(b)) — providing transcription in the app, on-demand generation, local history, and subscription features you requested.
- Legitimate interests (Art. 6(1)(f)) — securing the backend, preventing abuse of preview limits, debugging failures, and answering support mail.
- Consent (Art. 6(1)(a) and, where relevant, Art. 9 if you paste sensitive text yourself) — iOS microphone permission; you can also refuse to add files or tap Generate.
- Legal obligation (Art. 6(1)(c)) — responding to valid rights requests or lawful demands.
11. Retention
Local interview content remains on the iPhone until you delete it or delete the app.
Generation payloads are processed to return a draft. They are not offered as a cloud archive of your interviews. Short-lived technical copies, logs and backups can exist for operation and security; they are kept only as long as needed for those purposes, then deleted or aggregated. We do not claim zero retention.
Apple and RevenueCat keep purchase records according to their own periods and your Apple ID.
Support emails are kept as long as needed to handle the request and any follow-up, then reduced to what we must keep for legal or security reasons.
Website delivery logs follow the website host’s operational practice, limited to what is needed to serve and protect the site.
12. International processing
Several processors are established in the United States (including Apple, RevenueCat, Fly.io, Vercel, and typically OpenRouter and model providers). Using generation or subscription features can therefore transfer personal data outside the EEA, the United Kingdom or Switzerland.
Where required, such transfers rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, a UK equivalent, or a relevant adequacy decision. A copy of the relevant safeguard can be requested at the privacy address, within the limits of what we are allowed to share.
13. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to certain processing, to withdraw consent without affecting prior lawful processing, and to receive a portable copy of data you provided. You also have the right to complain to a supervisory authority — in France, the CNIL (cnil.fr); otherwise the authority of your country of residence or of your place of work.
14. How to make a request — four distinct actions
These are not the same gesture:
- Delete an interview locally: use the app’s delete control for that interview on your iPhone. That removes the local transcript, answers, notes and attachments for that interview on that device.
- Remove an attachment: use the app’s control to remove that file from the interview. Other items in the interview remain.
- Request deletion of server-side personal data: email privacy@neverblank.io from a mailbox we can reasonably associate with your use of the app, describe what you want deleted, and include the app version if you can. We will erase or anonymise backend identifiers, logs and residual generation records we control, except what we must keep (for example a record that a request was handled, or purchase data Apple still holds).
- Cancel a subscription: use Apple’s subscription settings. See Support. Cancelling stops future Apple renewal. It does not, by itself, delete local history or every processor record.
15. Children
Neverblank is aimed at adults in a professional setting. We do not knowingly collect personal data from children under 16. If you believe a child has used the app, write to the privacy address and we will delete what we control.
16. Changes
We will post updates on this page with a new effective date. If a change is material, we will also point to this page from the app’s settings or paywall when a software update ships.