Privacy Policy

Last updated: 25 September 2026 | ICO Registration Number: ZC147338

1. Introduction

Climber Mountain Ltd (‘we’, ‘us’, ‘our’) is committed to protecting your personal data. This Privacy Policy explains what information we collect when you use the Climber Mountain platform, how we use it, who we share it with, how long we keep it, and the rights you have over it.

We are registered with the Information Commissioner’s Office (ICO) under registration number ZC147338 and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

Data Controller: Climber Mountain Ltd

Registered Address: 167-169 Great Portland Street, London, W1W 5PF

Company Number: 17175239

Contact: admin@climbermountain.com

3. What Data We Collect

3.1 Data You Give Us

  • Account details: your name, email address and password (passwords are stored securely hashed; we never see them).
  • Onboarding and profile: job role, career goals, experience level, confidence level, target companies, and an optional profile photo.
  • Interview and training activity: your typed answers, the text transcripts of your spoken answers, Fill the Gap responses, games, streaks, XP and session history.
  • Scores and feedback: the scores and written feedback generated from your sessions, including the five-skill rubric (Communication, Technical, Problem Solving, Leadership, Structure).
  • Your CV: the verified CV built from your Real Interview and Take a Zoom Meeting sessions, and any CV file you choose to upload.
  • Payments: your plan, purchase history, credit balance and any access code you redeem. Card payments are handled by Stripe; we never see or store your full card details.
  • Support: anything you send us by email or through in-app bug reports.

3.2 Voice Data

When you use spoken practice, your microphone audio is streamed live to our speech-to-text provider (OpenAI) to be turned into text. Our AI interviewers’ voices are generated by ElevenLabs and streamed back to you; ElevenLabs receives only the text of our interviewers’ lines, never your voice. Climber Mountain does not record or store your audio. Only the resulting text transcript is saved to your account. OpenAI may keep request data for a limited period for security and abuse monitoring, under its own terms.

3.3 Data We Collect Automatically

  • Login times and basic session information needed to keep you signed in.
  • Anonymous, aggregated page-view statistics through Vercel Web Analytics (see Section 10).
  • Technical error reports (for example, browser type and the page where an error occurred) so we can fix bugs. Session replay is switched off, so these reports never include recordings of your screen or your interviews.

4. How We Use Your Data

We use your personal data to:

  • Create and manage your account.
  • Run your mock interviews, Real Interviews and training sessions, and generate your scores and feedback.
  • Personalise George’s coaching and your interviews to your role, level and target companies.
  • Build your CV and, if you choose, show you on the Global Leaderboard (see Section 5).
  • Process payments and manage your plan, credits and any access code.
  • Send service emails, such as password resets, receipts, CV verification emails and important account notices.
  • Keep the platform secure, fix errors and understand, in aggregate, how the platform is used so we can improve it.
  • Comply with our legal obligations.

We do not sell your personal data, and we do not use your interview answers or transcripts to train third-party AI models.

5. The Leaderboard and Your CV

Anyone can browse the Global Leaderboard. You only appear on it as a ranked climber if you are on Summit, have completed at least one Real Interview, and have chosen to be visible.

When you are visible, employers and other visitors can see your name or initials, your profile photo (if you have chosen to share it), your five skill scores and the CV built from your Real Interviews. Your training scores, practice history, mock interview transcripts and contact details are never shown.

You can hide your profile from the leaderboard at any time in Settings, and it will stop appearing straight away. Individual candidate profile pages and public CV pages are not indexed by search engines.

6. AI-Generated Scores

Your scores and feedback are generated automatically by AI, based on your answers. They are for training purposes only. We do not use them to make decisions that have legal or similarly significant effects on you. If you think a score is wrong, contact us at admin@climbermountain.com and a person will review it.

7. Legal Basis for Processing

  • Contract: to provide the services you have signed up for, including sessions, scores, your CV and payments.
  • Consent: to show your profile, photo, scores and CV on the leaderboard, and for any marketing emails. You can withdraw consent at any time in Settings.
  • Legitimate interests: to keep the platform secure, fix errors, understand aggregate usage and improve our services.
  • Legal obligation: to keep financial records and meet other legal requirements.

8. Who We Share Data With

We use trusted service providers who process data on our behalf, under data processing agreements, only to deliver our services:

  • Supabase: database, file storage and sign-in.
  • Vercel: hosting and anonymous page-view analytics.
  • OpenAI: speech-to-text for your spoken answers.
  • ElevenLabs: AI voices for our interviewers and coach.
  • Anthropic (Claude): the AI that runs interview conversations and generates feedback and scores.
  • Stripe: payment processing.
  • Resend: sending account and service emails.
  • Sentry: error monitoring.
  • Wix: hosting for our marketing website (subject to Wix’s own privacy policy).

Under their business terms, OpenAI and Anthropic do not use data sent to them through their APIs to train their AI models.

Access codes: if you join using a code paid for by an employer, university or other organisation, we will tell that organisation how many of its seats have been used. We may also share overall, anonymised usage figures, such as the total number of sessions completed. We will not share your individual training data, scores or transcripts with them unless you agree.

We may also disclose data where the law requires it, or to a buyer if our business is sold, in which case this policy will continue to apply.

9. International Data Transfers

Some of our providers process data outside the United Kingdom, including in the United States. Where this happens, we make sure your data is protected by appropriate safeguards, such as the UK Extension to the EU–US Data Privacy Framework, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.

10. Cookies and Similar Technologies

We keep this to the minimum:

  • Essential cookies: set by our sign-in system (Supabase) to keep you logged in. The platform cannot work without them.
  • Local storage: one setting in your browser that remembers which Training tab you last had open. It contains no personal information.
  • Vercel Web Analytics: counts page views in aggregate without using cookies and without identifying you personally.

We do not use advertising cookies or tracking pixels, and we do not load fonts from third-party servers. Because we only use what is strictly necessary, we do not show a cookie banner. If we ever add non-essential cookies or analytics that identify you, we will update this policy and ask for your consent first.

11. How Long We Keep Your Data

  • Active accounts: we keep your data while your account is open.
  • Deleting your account: you can delete your account at any time in Settings. Your profile, transcripts, scores, CV and any uploaded files are removed from our live systems straight away. Copies in our encrypted backups are overwritten within 7 days.
  • Voice audio: never stored by Climber Mountain (see Section 3.2).
  • Payment records: kept for 6 years, as UK tax law requires.

12. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Have your data deleted.
  • Restrict or object to certain processing.
  • Receive your data in a structured, machine-readable format (data portability).
  • Withdraw consent at any time, where we rely on consent.

To use any of these rights, email admin@climbermountain.com. We will respond within one month.

13. Data Security

We protect your data with encryption in transit (HTTPS) and at rest, row-level access controls on every database table, private file storage that can only be reached through secure, time-limited links, daily backups, and access restricted to authorised people only.

14. Age

Climber Mountain is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe we have, please contact us and we will delete it.

15. Complaints

If you are unhappy with how we handle your personal data, you can complain to the Information Commissioner’s Office (ICO):

We would appreciate the chance to put things right first, so please contact us at admin@climbermountain.com.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will tell you about significant changes by email, and the latest version will always be available on the platform.

17. Contact

For any privacy question: