Privacy Policy
Last updated: September 7, 2026
Attribute LLC ("we", "us", "our") operates the Prelude mobile application and the website at prelude.coach. This policy explains what data we collect, why, and how we protect it.
1. Information We Collect
Account Information
When you create an account, we collect your email address and a password. If you sign up via the waitlist, we collect only your email address.
Practice Session Data
When you use Prelude to practice conversations, your messages and session data are processed to provide coaching feedback. Voice input uses Apple speech recognition after microphone and speech permission. Recognition may use Apple servers; it is not guaranteed to stay on your device. You can review and edit the resulting text before submitting it for coaching. Prelude does not save microphone recordings as practice history.
Usage Data
We collect anonymous, aggregated usage analytics (pages visited, features used) via Umami, a cookieless, GDPR-compliant analytics service. This data cannot be used to identify you personally.
Prelude also records account-owned activation telemetry when a saved practice session and its saved next action meet the app's completion rules. These records store identifiers, source qualification, completion evidence version, completion status and server receipt times; they do not store email, transcript text, draft text or inferred personal traits. Activation telemetry helps us understand whether accounts reach first value and return within the first week. It is app telemetry, not independent proof that a distinct person completed or used a skill in real life.
Device Information
We may collect basic device information (device type, operating system version) to ensure app compatibility and troubleshoot issues.
2. How We Use Your Information
- To provide and improve the Prelude coaching experience
- To send you emails you've opted into (waitlist updates, drip sequences)
- To analyze aggregate usage patterns and improve the product
- To respond to support requests
3. AI Permission and Your Data
Personal AI coaching is optional. Before sending your information to third-party AI providers, Prelude asks you to allow AI coaching. Signing in, accepting general terms or completing onboarding does not grant this permission. You can keep AI off and still read saved material, use local scripted practice and the local message scanner, or save your original reflections.
- Anthropic, Google and MiniMax: the text needed for the requested coaching, including practice messages, reflections, profile details, relevant practice history and coaching instructions. These providers generate conversation responses, preparation, coaching briefs, scorecards and notebook observations. A request may use an approved fallback provider from this list.
- ElevenLabs: text selected for generated voice, the selected voice identifier and service settings. Generated audio may be cached in your account's local device storage for replay.
- Apple: speech and related recognition data when you use voice input with native permission. Apple may process recognition on its servers. See Apple's speech recognition documentation.
In Settings, use AI coaching → Withdraw AI permission to stop new AI authorization. Withdrawal also stops active AI/audio work on this device where cancellation is possible. It cannot recall data already authorized or shared. If the account update cannot be confirmed, the app keeps AI off on this device, shows withdrawal as pending, and lets you retry after reconnecting. Previously saved words remain available.
Provider retention and permitted uses depend on the provider, API service, contract and settings. We do not promise that every request has zero retention or that every provider configuration excludes training. Avoid including information you do not want these recipients to process. The applicable provider policies include:
- Anthropic API data retention (generally 30 days, with exceptions and possible contractual arrangements).
- Google Gemini API terms (data handling differs between paid and unpaid services).
- MiniMax privacy policy.
- ElevenLabs retention options and model-improvement settings.
Prelude stores account-owned consent choices and revisions, session reservations, request identifiers and request outcomes to enforce permission and finite AI allowances. These access records do not contain prompts, transcripts or generated responses. They are retained until account deletion. Your original practice content and feedback are stored separately as account data. Permission withdrawal alone does not delete saved practice or provider-held records.
4. Data Sharing
We do not sell, rent, or trade your personal information. We share data only with:
- Service providers who help us operate the service (email delivery via Resend, hosting via Cloudflare, AI processing, payment processing via RevenueCat/Apple)
- Legal compliance if required by law or to protect our rights
5. Data Storage and Security
Your data is stored securely using Supabase (hosted on AWS) with row-level security policies. Practice session data is associated with your account. We use encryption in transit (TLS) and at rest.
6. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Unsubscribe from marketing emails at any time
- Export your data in a portable format
You can export your account data and request account deletion in Settings. Export includes available originals, drafts, reflections, consent choices, AI usage metadata and activation classifications; it identifies resources that could not be read. Unassigned material from older app versions may remain on the device until you remove it.
To exercise any of these rights, email us at [email protected].
7. Cookies
The Prelude website does not use cookies. Our analytics provider (Umami) is cookieless and does not track you across sites.
8. Children's Privacy
Prelude is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.
9. Changes to This Policy
We may update this policy from time to time. We'll notify you of significant changes via email or an in-app notice. The "last updated" date at the top reflects the most recent revision.
10. Contact
Questions about this policy? Reach us at [email protected].