Your privacy matters. Here's exactly what we collect, why, and how we protect it.
This Privacy Policy describes how Third Degree ("we," "us," or "our") collects, uses, and protects information when you use our Web application, website at thirddegreeprep.com, and upcoming native mobile applications (collectively, the "Service"). By using Third Degree, you agree to the practices described in this policy.
What you say in a session is yours. Third Degree is built so that the substance of your sessions — your voice, your words, and the material you practice on — is never stored on our servers or by our voice infrastructure:
When you create an account, we collect your email address and a securely hashed password (managed by Firebase Authentication). We do not collect your name, phone number, or any other personally identifying information unless you voluntarily provide it.
We store the numeric results of your sessions: scores, progress graph data, deception-cue counts and categories, session timestamps, and durations. We do not store session transcripts — not the text of your answers, and not the AI's questions — on any plan. Your session history and replay features are built entirely from these numbers.
When you paste or upload material for a session, it is transmitted in real time to power the session — to our backend and from there to our AI model providers to generate questioning grounded in your material. It is never written to our database; after the session, we hold only its character count. If you want your material to persist, it persists where you keep it: on your device. You can also use the built-in Anonymize step before a session, which rewrites your material with personal names replaced by role labels and identifiers removed — you review and approve the rewrite before it is used.
Third Degree does not record or store your audio, and neither does the voice infrastructure we run on. Your voice is processed in real time solely to run the live conversation — speech recognition, turn-taking, and the AI's voice — and our voice provider is configured to retain basic call attributes only: no recordings and no transcripts. The only session recording that can ever exist is the one you explicitly opt to create, which is captured on and saved to your own device. We never receive it, and no retrieval mechanism exists on our side.
We collect anonymized, aggregated usage data (e.g., session start counts, feature usage) through Firebase Analytics to improve the app. This data does not identify you personally and cannot be linked back to your account.
We may collect standard technical information such as browser version, operating system, device model, and app version for crash reporting and debugging purposes (via Firebase Crashlytics). This is used solely for app stability purposes.
Fraud prevention: to keep the free 3rd Degree fair (one daily allowance per person, not per throwaway account), we use Fingerprint (FingerprintJS Pro) to generate a device identifier when you start a session. It identifies your browser or device — never you personally, and never anything you say or upload — and we use it exclusively to enforce free-tier limits and detect multi-account abuse. It is not used for advertising or cross-site tracking, and it is never linked to session substance (which, per our zero-retention commitment, does not exist server-side).
We do not sell your personal information to third parties. We do not use your data for advertising or share it with advertising networks.
Third Degree integrates the following third-party services. Each operates under their own privacy policy:
Session substance — your audio, your words, the AI's words, and your practice material — is not retained anywhere on our side. It exists in transit during a live session and then it is gone; what remains on our servers is numeric (scores, graph data, cue counts, durations).
Account data is retained for as long as your account is active. If you delete your account, your personal data and numeric session history are deleted within 30 days. Anonymized, aggregated analytics data may be retained indefinitely as it cannot be linked to you.
We take reasonable technical and organizational measures to protect your data against unauthorized access, loss, or disclosure. These include Firebase's industry-standard security infrastructure, encrypted data transmission (HTTPS/TLS), and server-side API key management (your device never holds an API key). No system is perfectly secure — if you become aware of any security issue, please contact us immediately at security@thirddegreeprep.com.
Third Degree is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly. If you are a parent or guardian and believe your child has used Third Degree, please contact us at support@thirddegreeprep.com.
Depending on your jurisdiction, you may have the right to:
To exercise any of these rights, contact us at privacy@thirddegreeprep.com. We will respond within 30 days.
If you are a California resident, you have additional rights under the California Consumer Privacy Act. We do not sell personal information. You have the right to know what personal information is collected, to delete personal information, and to opt out of any future sale (which we do not conduct). To exercise these rights, contact privacy@thirddegreeprep.com.
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last Updated" date at the top of this page and, where appropriate, by sending a notification through the app. Continued use of Third Degree after changes take effect constitutes acceptance of the updated policy.
For questions about this Privacy Policy or your personal data, contact us at:
Third Degree
Email: privacy@thirddegreeprep.com
Website: thirddegreeprep.com