← Back to practice

Your practice, your privacy

Chromite is an early-access tool for practicing workplace conversations. An AI plays your counterpart and generates coaching. Sign in with Google or with your email and password. Your first practice starts a 14-day trial; payments are deferred and there is no automatic charge.

Sign-in information

Supabase manages account authentication. If you choose Google, we request your email address and basic profile to create or link your account. This information is stored with your authentication account. We do not request access to your Gmail messages, Google Drive files, or calendar. If you use email and password, Supabase manages your password and sends confirmation and password-reset emails through Resend.

Saved conversations — the default

Context, transcripts, feedback, and behavior evidence are stored in your account. The founder can review saved conversations and optional follow-up notes for product research and improving coaching. This is disclosed before practice. Saved practice also uses a browser recovery copy while a session is active. We do not record raw audio. Delete a practice or your account anytime.

Real conversation context

Notes, transcripts, message excerpts, and reflections you upload or paste in Your coach are saved separately from practice and sent to OpenAI for interpretation. We retain your original notes and corrections. Coaching memory is derived from your current interpretations; rejecting, correcting, or deleting context updates that memory. Delete a conversation from its review or from History → Conversations. Existing saved practice sessions remain in history and can be deleted separately. Context-based exercises use saved practice. Dates are optional; real-world comparisons require a date after completed practice and do not establish that practice caused improvement.

Choose Private conversation

Your conversation and setup stay in your open browser tab and are sent to our server and OpenAI when needed to run practice and produce feedback. We do not save private transcripts, quotes, workplace details, or answer-specific feedback in our database or browser recovery storage. The founder cannot inspect that content. Closing or refreshing the tab loses it.

We retain session metadata, categorical usage signals, and five behavior indicators without quotes or explanations from your conversation. Optional real-world follow-ups for private practice retain only predefined behavior and outcome indicators; free-text notes are not accepted for storage. Existing private conversations remain private.

AI processing

OpenAI processes voice and text to deliver the service. We request no application-state storage from OpenAI, but separate provider abuse-monitoring retention rules can apply. Private practice is not a promise of zero retention by every provider. See OpenAI’s data controls. We do not submit your conversations to model fine-tuning jobs. Our automated evaluation examples are synthetic.

Usage measurement

We record landing visits, sign-in milestones, optional role/tenure/goal categories, situation categories, stakes, feedback ratings, and events such as starting, finishing, retrying, viewing feedback, and encountering errors. Usage events contain account or visit IDs, timestamps, and predefined categories, not conversation text. We do not use advertising trackers or session-replay recording. Operational analytics are retained for up to 60 days. Behavior assessments are AI observations; real-world outcomes are self-reported, not proof that practice caused a change.

Account and data controls

Delete individual sessions in History → Practice sessions, follow-ups and check-ins in History → Progress, or your account and app data from Settings. Session deletion removes linked follow-ups and analytics from active app storage. Account deletion also removes your trial and account-linked acquisition events. Provider backups and security logs expire on their own schedules. Trial expiry pauses new practice while keeping your history and deletion controls available.

Essential sign-in cookies, a session-scoped visit cookie connecting entry-funnel events, keyed IP rate-limit records, and usage caps keep the service usable. Raw IP addresses are not stored in app usage events. Follow-up dates create in-app prompts only; they do not send email reminders.