Privacy Policy

Effective 14 September 2026

SideRunner is a rehearsal tool for actors. It reads other characters' lines aloud, listens for your line, and keeps the scene moving. This policy explains what we collect, why, who processes it on our behalf, and how long we keep it.

What we collect

• Account details - your email address and password. Your password is never stored in readable form; we keep only a salted cryptographic hash of it.
• Scripts and scenes you add - the script text you import or paste, the character you're rehearsing, your reader-voice choices, and any timing adjustments. We store these so your scenes are there when you come back.
• Custom scene-partner voices - if you design a custom reader voice, the text description you provide is sent to our speech vendor to generate it, and the resulting voice is saved to your account.
• Rehearsal performance data - when you rehearse we record a numeric trace of how the rehearsal went: when it started and finished (including rehearsals you start but don't finish), whether you used the web app or the iOS app and which version, which of your scenes it was (by an internal identifier, not its name), when the reader's lines played, and how the turn-taking engine behaved on each line (timing, silence lengths, confidence scores, and outcomes). We use this to diagnose and improve the engine and to understand how SideRunner is used over time. A limited amount of script dialogue and speech transcript may be attached to this trace for up to 7 days to investigate speech-recognition problems, after which it is permanently removed (see How long we keep it).
• Microphone audio - while you rehearse, your microphone audio is streamed to our speech-recognition vendor to detect when you finish a line. We do not store your microphone audio on our servers.
• Anonymous usage counts, before you have an account - in the web demo and in the iOS app's sample scenes, we count a few things that happen before anyone signs in: that the app was opened, that a sample scene was opened, that a rehearsal started, and how it ended. These are stored as daily totals with no account, no device identifier and no advertising identifier. They cannot be linked to you, to your device, or to one another - we cannot tell whether two of them came from the same person. We use them only to understand whether people who find SideRunner get as far as trying it. So that a single source cannot flood these counts, our server separately keeps a short-lived tally of how many have arrived from a given network address. That tally is kept under a one-way hashed form of the address and is discarded within the hour. The address itself is never stored, the tally is never attached to the counts, and the counts themselves contain no identifier of any kind.

We do not use advertising trackers, and we do not use tracking cookies. On our website we use Cloudflare Web Analytics to count visits and page views - it is cookieless, does not follow you across other sites, and does not build a profile of you. The iOS app does not use it.

How we use it

• To provide the service - parse your scripts, read reader lines aloud, run turn detection, and save your scenes across the web app and the iOS app.
• To improve turn-taking accuracy, using the numeric rehearsal trace described above.
• To operate your account and, for paid plans, to track how many scripts you've uploaded against your plan's allowance.
• To measure how SideRunner is performing overall - we look at patterns in the rehearsal records described above, such as how often people rehearse, how long they take to come back, how quickly the reader responds, and where people get stuck. This is used to improve the product. It is never sold or used for advertising.

Who processes data for us

SideRunner relies on a small number of service providers ("sub-processors") to run. Data is shared with them only to deliver the feature described:

• Cloudflare - hosting, application servers, and our database.
• Deepgram - real-time speech-to-text for your microphone audio during a rehearsal. We send a setting that opts your audio out of Deepgram's model-improvement program.
• ElevenLabs - text-to-speech for the reader lines, and generation of any custom voice you design. The reader line text (and your voice description, if any) is sent to ElevenLabs to produce audio. ElevenLabs processes and may retain this data under its own privacy terms.
• Anthropic - used only when you import certain PDFs (for example scanned or image-based PDFs) that require extra text extraction. In that case the PDF content is sent to Anthropic to read the text. Anthropic processes this data under its own terms.

API keys for these services are held on our servers and are never exposed to the app.

How long we keep it

• Scenes and account - kept until you delete them, or until you delete your account.
• Rehearsal dialogue and transcripts - the limited script dialogue and speech transcript attached to a rehearsal record are permanently removed after 7 days. This removal is enforced automatically on our servers.
• Rehearsal and usage history - the rehearsal performance data described above, and summaries of it such as how many rehearsals you completed each day and when you first imported a script, are kept for as long as your account exists. They contain no script text, no transcripts, no character names and no scene names. Deleting your account removes them.
• Rehearsing without an account - if you try a demo scene without signing in, the rehearsal is recorded and kept in the same way, but it is not linked to any account. Because we can't tell which of these records are yours, we can't delete them on request. The record of an individual rehearsal is removed automatically after 60 days.
• Anonymous usage counts - the daily totals described above (app opened, sample scene opened) are plain numbers with nothing identifying in them, so there is nothing to expire: we currently keep them indefinitely. For the same reason - they are not linked to you or to any device - they cannot be found or deleted on request.

Deleting your data

You are in control of your data:

• You can delete any individual scene from within the app.
• You can delete your entire account - on the web from Settings → Delete Account, and on iOS from your scene library.

Deleting your account permanently erases your account record, your scenes, and your rehearsal telemetry from our database, and requests deletion of any custom voices you created from ElevenLabs. Once your account record is removed, existing sign-ins can no longer be used.

Security

Passwords are stored only as salted PBKDF2 hashes. Traffic between the app and our servers is encrypted in transit. Vendor API keys are kept server-side and never shipped to the client.

Children

SideRunner is not directed to children under 13.

Changes to this policy

If we make material changes, we will update the effective date above and, where appropriate, provide a more prominent notice.

Contact

Questions about privacy or your data: [email protected].