Approach

Privacy

Last updated 19 October 2026

Approach is a voice practice app for a short café conversation with Maya. This page is the privacy policy for the iPhone app and the matching website.

What we collect

Microphone and conversation

Microphone audio is sent live so Maya can hear you. During a session, your live audio and what you say are processed by third-party AI services: OpenAI and Google (speech and language models), ElevenLabs (voice), Anam (avatar), and LiveKit (audio transport). Approach does not claim to read emotion or biometrics.

We record the audio of each practice session and keep it on our servers so we can reproduce errors, fix bugs, and improve how the conversation works. The recording is audio only — your camera is not recorded — and it covers the practice session itself, not the rest of the app. Recordings are stored separately from your account and purchase records, but each one is linked to the practice session it came from and so to your account, which is how we find the right session when something goes wrong. They are kept for the period described under Retention and deletion below. A trial conversation on our website (approachpractice.app/trial) is recorded the same way.

Session traces may keep a transcript for debugging failed or incomplete runs. Those traces follow the same cleanup schedule. Neither recordings nor transcripts are used to advertise to you. We do not sell personal data or use it for targeted advertising.

App analytics

We use PostHog to understand first opens, onboarding taps, practice starts and completions, time engaged in live practice, paywall views, and verified purchases. Events use a pseudonymous device identifier and may include app version and device information. PostHog also records how the app's screens are used (session replay); live captions and anything you type are masked, and your camera and audio are not part of it. The app does not send conversation audio, transcripts, or email addresses to PostHog. This data helps us improve Approach and is not used for targeted advertising.

Service providers

We use service providers to operate Approach, including Apple for sign-in and in-app purchases, Stripe for web pre-orders, Resend for email, and LiveKit, OpenAI, Google, ElevenLabs, and Anam to run the live conversation. They process data only as needed to provide their services and under their own privacy terms. Infrastructure providers may process limited technical data such as IP addresses and request logs to deliver and secure the service.

Purchases

Practice session packs are sold as Apple In-App Purchases. Apple processes payment. We keep Apple transaction identifiers so we can credit, restore, and honor refunds. We do not receive your full Apple ID email unless you choose to share it during Sign in with Apple.

Early access packs bought on our website are processed by Stripe. Stripe collects your card details, name, email address, and billing country directly; we never see your card number. Stripe shares with us the email address you paid with, the amount, the currency, and its own identifiers for the payment, which we keep so we can credit the minutes to your account, send your receipt, and honor refunds and disputes. We store a one-way hash of that email address rather than the address itself alongside the purchase, and we keep the campaign tags from the ad or link that brought you to the page with it so we can tell which ads work. When a pack is bought, the address you paid with, the pack size, and the campaign tags are posted to our team's internal chat workspace, the way early access sign-ups are. To link the pack to your account you sign in with Apple on the web; that uses the same Apple identifier the app uses, so the minutes appear when you sign in to the app with the same Apple ID. After linking, you can answer two optional multiple-choice questions and leave an optional note about what you want to practise; the answers are stored with the purchase, posted once to the same internal chat workspace, and used to decide what we build first. We also send one email confirming the link. Stripe processes payment data under its own privacy policy. To limit how many checkouts can be started at once, we keep a keyed one-way digest of your IP address, separately from the purchase, and delete it within a day.

Retention and deletion

You can sign out or delete your account in the app. Deleting an account forfeits unspent session credits. Purchase records are kept in a detached form for Apple’s audit and refund requirements and cannot be claimed again. Signing in later with the same Apple ID starts a new empty account.

Session audio recordings and operational session traces, including any transcript they contain, become eligible for deletion after 30 days and are removed by the next daily cleanup, normally within 31 days of the session start. Service interruptions may delay cleanup. Both are stored separately from account and purchase records, and both are keyed to the practice session they came from, which is linked to your account while that account exists. Deleting your account unlinks your practice sessions from it, which detaches the recordings and traces along with them. It does not delete them early — they expire on the schedule above.

If you send a bug report from the app, we keep your message, any email address you choose to include, and basic app and device details (app version, iOS version, and device model) so we can investigate and reply. The report is also linked to the app’s install identifier and, if you are signed in, to your account. A copy is posted to our team’s internal chat workspace. The stored report is deleted after 90 days, or sooner if you delete your account. To limit how many reports can be sent at once, we also keep a keyed one-way digest of your IP address, separately from the report, and delete it within a day.

If you join the early access list on our website, we keep your email address, when you joined, and which ad or link brought you there (campaign tags and the referring site, not the page you came from). We use it to send one confirmation and to tell you when Approach is available, and Resend delivers those emails. Your address and the campaign tags are also posted to our team's internal chat workspace when you join. Reply to any of them, or email us, and we will remove your address. To limit how many sign-ups can be sent at once, we keep a keyed one-way digest of your IP address, separately from your email address, and delete it within a day.

The confirmation email asks a question you can answer by replying. Replies, and anything else you write to us, arrive by email at our support address and are forwarded to our team's inbox, where our email providers store them. We read them to understand what people want from Approach and to shape what we build; they are not used for advertising and are not shared outside the team. Ask and we will delete your replies along with your address.

When you join, you get your own invite link. If someone joins the list with it, we record that they came from your link, move you up the invite order, and may email you that you moved up. We never tell you who joined, and we never tell them anything about you beyond the link they followed.

If an email to you bounces because your address is permanently undeliverable (a hard bounce), or you mark one as spam, Resend tells us and we stop emailing that address for good. To make sure of that, we keep a keyed one-way fingerprint of the address (not the address itself) and the reason on a do-not-email list. It stays there even if you ask us to delete your address, so you are never mailed again, and it cannot be turned back into your address.

The early access and pre-order pages use the Meta Pixel to measure our ads. When you visit them, Meta receives that page view along with Meta's own cookies, your IP address, and browser details. When you join the list, start a checkout, or complete a purchase, we tell Meta about it, including a one-way hash of your email address and, for purchases, the amount, so Meta can match it to the ad you saw. If you are in the United Kingdom or the European Economic Area, the pixel stays off until you accept it on the page. Meta processes this under its own privacy policy and may use it to measure and improve ads. Blocking third-party cookies or trackers in your browser stops the pixel. The Approach app does not use the Meta Pixel.

The early access and pre-order pages also use PostHog to count visits and see how people use them: which ad or link brought you there, whether the demo video played, how far you scrolled, whether the sign-up form was submitted, and which pack you chose, started paying for, or linked to your account. PostHog also records how you use the early access, try and trial pages themselves (session replay): what is on screen, scrolling, and taps, including the captions of a trial conversation, so we can see how the experience goes. Anything you type is masked; your microphone and the video of the character are not part of the recording, and it stops when you leave the page. When you join the list, we also send your email address to PostHog so that visit and its recording are filed under your sign-up. It sets no cookies and stores nothing in your browser.

Your choices

You can deny microphone access, though live practice will not work without it. You can delete your account from the Account screen. To ask about, correct, or request a copy of your personal data, contact us using the email below.

Children

Approach is not directed to children under 13, and we do not knowingly collect personal data from children under 13.

Changes

We may update this policy as the app changes. The date at the top shows when it was last revised.

Contact

Questions or privacy requests can be sent to support@approachpractice.app. You can also visit the Approach support page.