Privacy

What we keep. What we never keep. In plain language.

Session and Mara are built for conversations that are sometimes sensitive. This page explains exactly what is stored, what is never stored, and what control you have. Last updated June 2026.

Who we are

Session is the trading name of Jade Matthew. Mara is our AI performance coaching platform. For anything on this page, contact hello@thesessionlab.com.

What we collect

Account details: your name, email address, and password, held securely by our database provider.
Profile details you choose to give: job title, organisation, native language, and your diagnostic answers. These exist so Mara can coach you, not generically.
Session content: the text of coaching sessions, your practice scores, and progress through courses.
Payment details are handled entirely by Stripe. We never see or store your card number.

What we never store

Raw audio or video from practice sessions. Recordings stay in your private library; our servers keep only transcripts and scores.
Off the Record conversations, unless you choose to keep them. Shred deletes a conversation immediately and permanently, with no archive and no recovery.
Nothing from Off the Record ever feeds dashboards, scores, emails, or any reporting.

How we use your information

To run your coaching: Mara uses your profile and session history to coach you personally.
To send member emails. You can unsubscribe from any email, any time.
For corporate pilots, organisations see aggregate, anonymised progress only. Never the content of any individual session.

Who we share it with

We do not sell your data, ever. We use a small number of processors to run the service: Claude via AWS Bedrock (the AI that powers Mara, Frankfurt, EU), Supabase (database and storage, London, UK), Render (application hosting, Frankfurt, EU), Stripe (payments), and Brevo (email, France). Each receives only what it needs to do its job.

Where your data is processed

Your database and files are stored in the United Kingdom, in the London region. The application runs in the European Union, in the Frankfurt region, and Claude runs in the European Union through AWS Bedrock in Frankfurt with zero data retention, so your inputs and outputs are never stored. Nothing about you is processed outside the United Kingdom and the European Economic Area.

Your control

Delete any practice recording from your library, any time.
Shred any Off the Record conversation, any time, including mid session.
Ask us to export or delete your account and everything connected to it: email hello@thesessionlab.com and we will action it.