What the app touches, and what it never keeps.

Interview Assistant AI runs entirely on your machine. There is no account, no server of ours in the path, and no analytics build.

AT_REST
Data at rest
Three small JSON files under your user profile hold non-secret settings and window preferences. API keys sit in a fourth, sealed by the operating system's own credential encryption. Captured frames and recorded audio are never among them.
IN_FLIGHT
Data in flight
One HTTPS request per analysis to the provider you configured, and, only while listening is on, one request per audio chunk to the transcription endpoint. Nothing else leaves the machine.
ISOLATION
Process isolation
The interface layer runs sandboxed with no filesystem or network access of its own. Every privileged action crosses a narrow, validated bridge, and API keys never cross it in either direction.
LIMITS
Capture exclusion, honestly
Exclusion is an operating-system hint that capture APIs respect. It is best-effort, it needs Windows 10 build 2004 or later, and it covers only this app's own window. A camera pointed at your monitor still sees everything.

Reporting a vulnerability

Mail [email protected]. We reply within two business days and credit reporters in the release notes unless you would rather we did not.