Privacy Policy

Last updated: July 20, 2026

This policy explains what information AmberFox collects when you use the AmberFox desktop application and the amberfox.ai website, how we use it, and what controls you have over it. Questions? Email [email protected].

1. Who we are

AmberFox is a desktop AI interview assistant for macOS and Windows, available at amberfox.ai. References to "AmberFox", "we", "us", or "our" in this policy mean the operator of the AmberFox service. Contact us at [email protected] for any privacy-related enquiry or request.

2. What we collect

We collect only what is necessary to provide the service:

• Account information — your name, email address, and profile photo provided by Google when you sign in via Google OAuth (handled through Supabase).
• CV and job-post text — the CV text and job description you paste or upload inside the app, used to generate answer cues and CV rewrites.
• Interview and practice transcripts — text transcriptions of what is spoken during live interview sessions and AI mock interview sessions. We store transcripts, not audio recordings.
• Usage and subscription records — session counts, feature usage quotas, and subscription status (plan, billing cycle, renewal date).
• Payment data — billing is handled entirely by Stripe. AmberFox never sees or stores your card number or full payment details. We receive only a Stripe customer ID and subscription status.

3. Audio and transcription

During a live interview or mock interview session, AmberFox streams microphone audio and/or system audio in real time to Deepgram for speech-to-text transcription. This audio is streamed transiently — AmberFox does not record or store audio files. Only the resulting text transcript is stored. Text-to-speech audio for the AI interviewer in mock interview mode is generated by Deepgram's TTS service and played locally; it is not persisted.

The AmberFox desktop window is excluded from screen sharing at the operating-system level (NSWindowSharingNone on macOS). No third party on a video call can see the AmberFox overlay.

4. AI processing

To generate real-time answer cues, mock interview questions, post-interview feedback, and CV rewrites, AmberFox sends the following data to Anthropic's Claude API via AmberFox's own secure server-side proxy:

• Interview transcript excerpts (the most recent conversation context)
• Your CV text and the job description you provided
• Screenshots, only when you explicitly press the screen-capture hotkey inside the app

API keys for Anthropic and Deepgram are held server-side and are never exposed to the desktop client. Data sent to Anthropic is subject to Anthropic's Privacy Policy.

5. Service providers (subprocessors)

We use the following third-party services to operate AmberFox:

• Supabase — authentication, user database, and serverless edge functions (secure API proxy layer)
• Deepgram — real-time speech-to-text transcription and text-to-speech voice synthesis
• Anthropic — AI language model processing (Claude API) for answer cues, feedback, and CV rewrites
• Stripe — subscription billing and payment processing
• Cloudflare — website hosting and content delivery for amberfox.ai
• GitHub — app distribution and auto-update delivery via GitHub Releases

6. Local storage on your device

AmberFox caches your preferences (assist level, AI model selection, window style) and your CV text locally on your device using the browser's localStorage. This data stays on your device and is not transmitted to our servers unless you explicitly upload a new CV within the app.

7. Retention and deletion

We retain your account data, transcripts, and usage records for as long as your account is active. If you stop using AmberFox and wish to have your data deleted, email [email protected] and we will delete your account and associated data within 30 days.

8. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable timeframe and no later than required by applicable law.

• Access — request a copy of data we hold about you
• Correction — ask us to fix inaccurate data
• Deletion — ask us to delete your account and data
• Export — request your data in a portable format

9. Security

All data in transit between the app and our servers is encrypted using TLS. API keys for Anthropic and Deepgram are stored as server-side secrets and are never included in the desktop application binary or exposed to client-side code. The AmberFox overlay is hidden from screen recording locally at the OS level, so your usage of the app is not visible to anyone on the same video call.

10. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of AmberFox after changes are published constitutes acceptance of the revised policy. For material changes we will notify you via email where possible.

Questions about this policy? Contact [email protected].