Privacy Policy

ForensicPrep is a professional training product owned and operated by Waypoint Psychology, led by Zackery A. Tedder, PsyD, located in Austin, Texas. This Privacy Policy describes how we collect, use, store, and share information when you use ForensicPrep at forensicprep.app.

ForensicPrep is designed exclusively for licensed and training mental health professionals. We take seriously the sensitivity of the professional context in which this product is used and have built our data practices accordingly.

By creating an account and using ForensicPrep, you agree to the practices described in this policy. If you do not agree, please do not use the service.

We collect the following categories of information:

• ◆Account information: your email address and name, provided through Google OAuth at sign-in.
• ◆Professional context: your stated professional role (e.g., forensic psychologist, custody evaluator) and proceeding type, which you select when configuring a session.
• ◆Session content: the text of simulation exchanges you participate in, including both attorney questions generated by the AI and your typed responses.
• ◆Analysis reports: FTCI scores, domain-level scoring rationale, feedback reports, and annotated transcript intelligence generated from your sessions.
• ◆Payment information: billing details processed by Stripe. This includes subscription billing and one-time session pack purchases. We do not store credit card numbers or payment credentials on our servers.
• ◆Usage data: session dates, session counts, and technical logs used for system operation and improvement.

We do not collect actual client records, patient identifying information, or any protected health information. The case context you enter when configuring sessions should not include real client names, identifying details, or confidential case information. Use anonymized or hypothetical scenarios.

We use the information we collect to:

• ◆Provide and operate the ForensicPrep simulation service.
• ◆Generate AI-powered attorney simulations, FTCI scoring, feedback reports, and transcript annotations.
• ◆Save your session history and analysis reports so you can access them across sessions.
• ◆Process subscription payments and manage billing through Stripe.
• ◆Communicate with you about your account, subscription, and product updates.
• ◆Improve the quality of simulations, scoring, and feedback over time.
• ◆Comply with legal obligations.

We do not sell your personal information. We do not use your session content for advertising purposes. We do not share your information with third parties except as described in this policy.

ForensicPrep uses the following third-party services to operate. Each processes certain user data as described:

• ◆Anthropic: AI model provider. Your session messages and case context are transmitted to Anthropic's API to generate attorney simulations, scoring, feedback, and transcript analysis. Anthropic's privacy policy governs their handling of API data. As of the effective date of this policy, Anthropic does not use API inputs to train their models by default.
• ◆Supabase: Database and authentication infrastructure. Your account data, session transcripts, scores, and reports are stored in Supabase's hosted PostgreSQL database. Supabase is SOC 2 Type II certified.
• ◆Stripe: Payment processing. Stripe handles all subscription billing and stores payment credentials. We receive only a customer ID and subscription status from Stripe. Stripe is PCI DSS Level 1 certified.
• ◆Vercel: Application hosting. ForensicPrep runs on Vercel's infrastructure. Vercel processes request logs and serves application content.
• ◆CourtListener / Free Law Project: Federal case law search. When you use the case research feature, your search queries are transmitted to CourtListener's API. CourtListener's privacy policy governs their handling of search data.
• ◆Google: Authentication provider. Sign-in is handled through Google OAuth. Google's privacy policy governs the authentication process.

Your data is stored in Supabase's hosted database infrastructure. Row-level security policies ensure that each user can only access their own session data. API keys and credentials are stored as environment variables and never exposed in client-side code.

Session content, including your typed responses and the AI-generated attorney questions, is stored in your account and is accessible only to you through your authenticated session. We do not share session content with other users, third parties, or opposing counsel. We do not use session content to train AI models. Staff do not review individual sessions unless you contact support with a specific issue and consent to review.

All data transmission between your browser and ForensicPrep occurs over HTTPS. We follow industry-standard security practices appropriate to a professional training platform.

No security system is impenetrable. While we take reasonable measures to protect your information, we cannot guarantee absolute security and are not liable for unauthorized access beyond our reasonable control.

We retain your account information and session data for as long as your account is active. If you cancel your subscription, your data remains accessible for 90 days, after which it may be deleted.

You may request deletion of your account and associated data at any time by contacting us at the address below. We will process deletion requests within 30 days.

Depending on your jurisdiction, you may have the right to:

• ◆Access the personal information we hold about you.
• ◆Correct inaccurate information.
• ◆Request deletion of your account and associated data.
• ◆Export your session transcripts and reports.
• ◆Withdraw consent to data processing (note: this may require account termination).

To exercise any of these rights, contact us at privacy@forensicprep.app or through the contact information below.

ForensicPrep is intended for professional training purposes only. Users are responsible for ensuring that any case context they enter does not include confidential client information, protected health information, or identifying details about real individuals.

ForensicPrep is not a HIPAA-covered entity and does not provide HIPAA-compliant data processing. Do not enter actual patient or client information into the platform.

Session content is transmitted to Anthropic's API for processing. If your professional role involves confidentiality obligations (which it does), use anonymized, hypothetical, or composite scenarios only.

ForensicPrep uses cookies and browser storage for authentication session management only. We do not use tracking cookies, advertising pixels, or third-party analytics scripts. We do not track your activity across other websites.

ForensicPrep is intended for licensed professionals and graduate students in supervised training programs. It is not directed at individuals under 18 years of age. We do not knowingly collect information from minors.

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page and, for material changes, notify users by email. Continued use of ForensicPrep after changes constitutes acceptance of the updated policy.

Questions, requests, or concerns about this Privacy Policy should be directed to: