Privacy policy

Last updated October 7, 2026

Whyloop is an AI mock interview service run by Hero Momoh ("we"). This policy explains what we collect, why, who processes it for us, and the choices you have. Contact us any time at hm@heromomoh.com.

What we collect

• Your Google account basics: name, email address and profile picture, when you sign in with Google.
• What you give us for an interview: the role you are practising for, your level, the focus and length you choose, any job description you paste, your answers, and the scores, hints, feedback and weak spots that come out of it.
• Your CV: an uploaded file is read in memory to extract its text, and the file itself is never stored. The text is kept with that interview so questions can be written as you go. It is saved to your profile for future interviews only if you tick "Remember my CV for next time", and unticking it removes the saved copy.
• Your audio lessons: which lessons are in your library and whether you have listened to them.
• Preferences: a cookie keeps you signed in, a cookie remembers your language, and your browser stores your light or dark theme choice. We use no advertising cookies.
• Analytics: which pages you visit, what you click, and interview events such as starting, finishing, hints used and scores, so we can see what helps and fix what does not. If you accept analytics cookies, a cookie links your visits together and, once you sign in, to your account id, and some visits may be recorded as a replay of clicks and scrolling with every input and all interview, CV and report text hidden. If you say no, we count visits without cookies and record nothing else. Your CV, job descriptions, answers and email address are never sent to analytics. Change your choice any time with Cookie settings at the bottom of the page.

How we use it

Only to run Whyloop: to plan and conduct your interviews, grade your answers, teach you what you missed, show your results, and bring missed topics back in later sessions. We do not sell your data, and we do not use it for advertising.

Who processes it for us

• Supabase stores your account and interview data, in the United Kingdom (London region).
• Vercel hosts the website.
• PostHog provides our analytics, stored in the United States.
• Google handles sign-in.
• Stripe and Paystack take payments for paid plans. Your card or bank details go to them directly; we only keep your plan, its dates, the amount and their reference for it.
• AI providers. Your role, CV text, job description and answers are sent to the provider behind the interviewer you choose (Anthropic for Ada, OpenAI for Nova, xAI for Rex and DeepSeek for Kai) to write questions, follow-ups and hints. Every answer is graded by Anthropic, whichever interviewer you pick. Under their API terms at the time of writing, Anthropic and OpenAI do not train their models on API data by default. DeepSeek processes data in China, so pick another interviewer if that matters to you.
• Audio lessons. Lessons are written about a concept, not about you, and are shared between everyone who needs that concept. Their text is turned into speech by OpenAI. None of your answers or CV goes into a lesson.

How long we keep it

We keep your account and interview history until you delete it. A CV you did not choose to remember stays only with the interview it was used for. You can delete your account and everything linked to it from your dashboard, or email us to do it or to get a copy of your data.

Your rights

Depending on where you live, including under UK GDPR and the Nigeria Data Protection Act, you can ask to access, correct, delete or export your data, and object to how we use it. Email us and we will respond within one month. In the UK you can also complain to the Information Commissioner's Office.

Security

Data is encrypted in transit and at rest by our providers. Database rules mean each account can only read its own interviews, and only our server can write them.

Children

Whyloop is not meant for anyone under 16.

Changes

If we change this policy in a meaningful way, we will update the date above and tell signed-in users.