Legal
Privacy Policy.
Your privacy matters. Here’s exactly what we collect, why, and how we protect it — starting with what we never keep: your voice, your words, and the material you practice on.
Your privacy matters. Here’s exactly what we collect, why, and how we protect it — starting with what we never keep: your voice, your words, and the material you practice on.
This Privacy Policy describes how Third Degree ("we," "us," or "our") collects, uses, and protects information when you use our Web application, website at thirddegreeprep.com, and upcoming native mobile applications (collectively, the "Service"). By using Third Degree, you agree to the practices described in this policy.
What you say in a session is yours. Third Degree is built so that the substance of your sessions — your voice, your words, and the material you practice on — is never stored on our servers or by our voice infrastructure:
When you create an account, we collect your email address and a securely hashed password (managed by Firebase Authentication). We do not collect your name, phone number, or any other personally identifying information unless you voluntarily provide it.
We store the numeric results of your sessions: scores, progress graph data, deception-cue counts and categories, session timestamps, and durations. We do not store session transcripts — not the text of your answers, and not the AI's questions — on any plan. Your session history and replay features are built entirely from these numbers.
When you paste or upload material for a session, it is transmitted in real time to power the session — to our backend and from there to our AI model providers to generate questioning grounded in your material. It is never written to our database; after the session, we hold only its character count. If you want your material to persist, it persists where you keep it: on your device. You can also use the built-in Anonymize step before a session, which rewrites your material with personal names replaced by role labels and identifiers removed — you review and approve the rewrite before it is used.
Third Degree does not record or store your audio, and neither does the voice infrastructure we run on. Your voice is processed in real time solely to run the live conversation — speech recognition, turn-taking, and the AI's voice — and our voice provider is configured to retain basic call attributes only: no recordings and no transcripts. The only session recording that can ever exist is the one you explicitly opt to create, which is captured on and saved to your own device. We never receive it, and no retrieval mechanism exists on our side.
On our website and web application we collect anonymized, aggregated traffic data through Google Analytics, and only if you accept analytics cookies. It does not identify you personally and cannot be linked back to your account. The iOS and Android apps contain no analytics or crash-reporting SDK at all — they collect no usage telemetry and no device data beyond what is needed to run a session.
Fraud prevention (web only): to keep the free 3rd Degree Challenge fair (one daily allowance per person, not per throwaway account), we use Fingerprint (FingerprintJS Pro) to generate a device identifier when you start a session on the web. It identifies your browser or device — never you personally, and never anything you say or upload — and we use it exclusively to enforce free-tier limits and detect multi-account abuse. It is not used for advertising or cross-site tracking, and it is never linked to session substance (which, per our zero-retention commitment, does not exist server-side).
We do not sell your personal information to third parties. We do not use your data for advertising or share it with advertising networks.
Running a live AI cross-examination is not something we do alone. Below is every company that receives your data, what each one receives, and why. We name them rather than describe them: you should never have to ask who is on the other end of your voice.
We share personal data with these companies only to provide the Service. Each is bound by a written agreement requiring protections equivalent to those described in this policy, each is contractually barred from using your content to train its models, and our accounts are configured so that no recordings and no transcripts are retained. We do not sell your personal data, and we share it with no one else.
These receive the substance of a session. They are used only while a session is live.
These never receive session substance — not your audio, not your words, not your practice material.
These are used on thirddegreeprep.com and the web application. They are not present in the iOS or Android apps.
Because this list governs what happens to your voice, the mobile app presents it directly on screen and asks for your agreement before your first session — before anything is sent. You can read the same list at any time under Settings → Support & Safety → AI & data sharing. If the list of recipients changes, we ask again rather than assuming your earlier answer still covers it.
Session substance — your audio, your words, the AI's words, and your practice material — is not retained anywhere on our side. It exists in transit during a live session and then it is gone; what remains on our servers is numeric (scores, graph data, cue counts, durations).
Account data is retained for as long as your account is active. If you delete your account, your personal data and numeric session history are deleted within 30 days. Anonymized, aggregated analytics data may be retained indefinitely as it cannot be linked to you.
We take reasonable technical and organizational measures to protect your data against unauthorized access, loss, or disclosure. These include Firebase's industry-standard security infrastructure, encrypted data transmission (HTTPS/TLS), and server-side API key management (your device never holds an API key). No system is perfectly secure — if you become aware of any security issue, please contact us immediately at security@thirddegreeprep.com.
Third Degree is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly. If you are a parent or guardian and believe your child has used Third Degree, please contact us at support@thirddegreeprep.com.
Depending on your jurisdiction, you may have the right to:
To exercise any of these rights, contact us at privacy@thirddegreeprep.com. We will respond within 30 days.
If you are a California resident, you have additional rights under the California Consumer Privacy Act. We do not sell personal information. You have the right to know what personal information is collected, to delete personal information, and to opt out of any future sale (which we do not conduct). To exercise these rights, contact privacy@thirddegreeprep.com.
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last Updated" date at the top of this page and, where appropriate, by sending a notification through the app. Continued use of Third Degree after changes take effect constitutes acceptance of the updated policy.
For questions about this Privacy Policy or your personal data, contact us at:
Third Degree
Email: privacy@thirddegreeprep.com
Website: thirddegreeprep.com