Privacy notice

Last updated 2 October 2026.

Who we are

Level6 runs DA Prep and is the controller of your personal data under UK GDPR. Contact us at support@level6.uk about anything in this notice or to use your rights.

Who this is for

DA Prep is for people aged 16 and over. Many users are under 18, so we collect as little as we can, do not show advertising, do not track you across other sites, do not use analytics, and never make your content public. You must be 16 or over to create an account.

What we store, and why

• In your browser only (no account): your tracker, stories, practice scores and interview history. We never receive this.
• If you create an account: your email address, and the same tracker, stories, practice and interview data so it syncs between devices. We use this to provide the service you asked for (contract).
• If you subscribe to Pro: a Stripe customer ID and your plan. Stripe holds your payment details.
• Usage counts: how many interviews and AI requests your account has made, to apply fair-use limits and control costs (our legitimate interest in keeping the service available and affordable).
• Technical data: your IP address is used briefly to limit abuse. We do not store it with your profile.

What is sent to AI services

Job adverts, CV or statement text, STAR notes and your interview answers are sent to OpenAI to generate questions and feedback. Text you write is first checked by OpenAI's moderation service so we can stop harmful content and point you to support if you seem to be struggling. We ask OpenAI not to store this data for training, but OpenAI may keep API requests for a limited period for abuse monitoring.

Please don't include names, addresses, phone numbers or other personal details about yourself or anyone else in what you type or say.

Voice, speech and camera

In video-style interviews your voice is recorded by your browser while you answer and sent to OpenAI to be transcribed. We do not keep the recording; only the transcript you confirm is used. The microphone test runs on your device. Text-mode dictation uses your browser's own speech recognition, which may send audio to your browser provider. The camera self-view stays on your device and is never recorded or uploaded. You can refuse or revoke microphone and camera access in your browser at any time.

Cookies and local storage

We use only what is strictly necessary: browser storage that keeps you signed in and holds your data on your device. We do not use advertising or analytics cookies, so there is no cookie banner. You can clear this in your browser settings, which signs you out and removes local copies.

Who else handles your data

Where data goes outside the UK we rely on the UK's approved transfer safeguards. We do not sell your data or share it with employers.

How long we keep it

Cloud data is kept until you delete it or your account. Usage counts are deleted with your account. Payment records are kept by Stripe and by us as long as the law requires for accounting.

Your rights

You can ask to see, correct, export or delete your data, object to how we use it, or withdraw consent. Signed-in users can delete their account and all cloud data themselves on the Sign in page (Account section); this also cancels any subscription. You can download a copy of your data with the Backup tool in the tracker. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk, 0303 123 1113.

If you are struggling

Applications can be stressful. If things feel like too much, Childline (0800 1111, under 19s), Samaritans (116 123) and Shout (text SHOUT to 85258) are free and confidential.