LeadRight

Privacy Policy

Last updated: September 9, 2026

LeadRight is a practice simulator for difficult workplace conversations, available as a web app at getleadright.com and as an iOS app. This policy explains what data we process, why, and what your rights are. The data controller is Nicola Guglielmi (Italy). Contact: hello@getleadright.com.

What the simulator does with what you type

When you practice a live conversation, the text you type — and the conversation transcript it belongs to — is sent to our server and, from there, to Google Gemini, a third-party AI service operated by Google LLC, which generates the counterpart's replies and your debriefing. This is the core of the product and it cannot work without it. Google processes this data as our processor under the Gemini API terms; we do not use your conversations to train models of our own.

You are never required to use real names or confidential facts: the simulator works just as well with made-up details, and we recommend it. In the iOS app, scripted (offline) conversations are processed entirely on your device and send nothing anywhere.

What we collect

iOS app

  • No account. Your practice history (transcripts, scores, confidence ratings, your own saved situations) is stored only on your device. Deleting the app deletes it.
  • Live conversations are transmitted to our server and to Google Gemini as described above. Our server does not store them beyond what is needed to answer the request and to keep operational logs.
  • Purchases are handled by Apple and by RevenueCat (our subscription infrastructure provider), which receives an anonymous app identifier and purchase receipts — never your name or email.
  • Reports. If you report a reply as inappropriate, the report is stored on your device and you can send it to us at the contact address above.

Web app

  • Account data: email address, a hashed password, your name if you provide it, and your organisation membership when you join a team.
  • Practice data: the scenarios you attempted, your answers and scores, used to show your progress and, in teams, aggregated improvement (team admins never see raw scores or transcripts).
  • Waitlist: email address and the plan you indicated, if you signed up for early access.
  • Analytics: Google Analytics 4, only after you accept cookies (Consent Mode v2; nothing is collected before consent).

Legal basis and purposes

We process data to provide the service you asked for (contract), to keep it secure and prevent abuse (legitimate interest), and — for analytics cookies — on the basis of your consent, which you can withdraw at any time from the cookie banner.

Where data lives

Our servers run on Google Cloud in the European Union (Belgium, europe-west1). Google Gemini requests may be processed in other regions under Google's standard contractual safeguards.

Retention

Web account and practice data are kept while your account exists and deleted within 30 days of a deletion request. Operational server logs are kept for up to 30 days. Waitlist entries are deleted when the waitlist closes or on request.

Your rights

Under the GDPR you can access, correct, export or delete your data, object to or restrict processing, and lodge a complaint with your supervisory authority (in Italy, the Garante per la protezione dei dati personali). Write to hello@getleadright.com; we answer within 30 days.

Children

LeadRight is made for people who manage teams at work and is not directed to anyone under 16.

Changes

We will post any change on this page and update the date above. Material changes to how conversations are processed will be announced in the app before they take effect.