Privacy Policy

Last updated: 31 August 2026

What we collect

Account data: the name you choose to display, your email address, the career track you pick, and the short background you write at signup. There is no password, you sign in with a six-digit code sent to your email, and we store only a one-time record of that code until it is used or expires.
Simulation data: your messages in the workspace, your task submissions, progress, milestones and scores. This IS the product, so it's stored for you.
Billing data: handled by Stripe. We never see or store your card number; we store only your Stripe customer reference and plan status.
Usage counts: daily message counts, for plan limits.
Campaign and funnel data: if you arrive through a campaign link, we may record its source, medium, campaign and creative labels, along with aggregate events such as landing-page view, signup, first started day and purchase. We do not put your messages, task answers, uploaded files, name or email address into marketing reports.

How your messages are processed

To generate the characters' replies, the messages you write in the workspace, and a short summary of any file you attach, are sent to a third-party AI model provider as conversation context. That provider may process them outside the United Kingdom. They are used to produce the reply and are subject to that provider's own data policies. We will tell you which provider we currently use if you ask.

Please don't put sensitive personal information into the simulation chat. The characters don't need it, and it is the one part of the product that leaves our systems.

What we don't do

We don't sell your data or share it with advertisers.
We don't send marketing email unless you opt in. Transactional email only: your sign-in codes and, if you buy, the receipt Stripe sends.

Who else handles your data

We use a small number of service providers to run the product: hosting and the database, email delivery for your sign-in codes, payment processing, and the AI model provider described above. Each handles only what it needs to. We don't sell your data and we don't share it with advertisers.

Retention and deletion

Your account and simulation data are kept while your account is active. Sign-in codes are deleted once used or after 15 minutes. Email support from your account address to delete your account; we remove your personal data without undue delay and within one month, except records we must keep for tax and accounting, which we keep for six years.

Cookies and storage

We use a Secure, HttpOnly, SameSite session cookie that browser scripts cannot read. We do not load advertising pixels or third-party advertising trackers.

For service-improvement analytics, campaign labels are passed from the landing page to signup in the page URL, without an analytics cookie or device identifier. Anonymous page events are stored as daily totals. Account-linked campaign labels are retained for up to 90 days so we can understand whether a campaign reaches activation or purchase; event deduplication records are retained for up to 180 days. Aggregate reports are kept for up to two years.

You can opt out by using this analytics-off link. We also honour the browser Global Privacy Control signal and Do Not Track. Opting out does not affect signup, the simulation, billing or any other product feature.

Your rights

You may request a copy, correction, or deletion of your personal data at any time via support. If you're in the UK/EU, you also have the right to complain to your data-protection authority.

Contact

The data controller for firstjobpractice.me is the operator of Meridian Job Simulation, based in Hyderabad, India, outside the UK and EEA. Your data is therefore processed outside the UK, in addition to the third-party providers described above.

Email: support@firstjobpractice.me

If you are in the UK you can also complain to the Information Commissioner's Office at ico.org.uk.