Privacy Policy

Last updated: June 12, 2026

1. Controller

Marcel Jendrusch, [Postal address — required before store submission]. Contact: marcel.jendrusch@gmail.com.

2. What we collect

3. Why we process it (legal bases, Art. 6 GDPR)

4. AI processing

When you use an AI feature (match analysis, CV tailoring, cover letters, interview prep), the relevant content — your CV text and the job posting — is transmitted to our AI provider, Anthropic, to generate the result. We send only what the feature needs. Anthropic processes this data on our behalf and does not use it to train its models.

5. Analytics and diagnostics

To understand how the app is used and to keep it stable, we process pseudonymous usage and diagnostic data. This includes which screens and features you open, funnel steps (e.g. onboarding, purchase), and — if the app crashes — a technical crash report. Events are tied to a random account identifier, never to your name, and never include your CV, job, or cover-letter text.

We use the following processors for this:

Legal basis: our legitimate interest in measuring, securing and improving the service (Art. 6(1)(f) GDPR). You can object to this processing or delete your account at any time (see section 10).

6. Subscriptions

If you buy a subscription, purchase and entitlement data is processed through Adapty (Adapty Tech Inc., USA), which manages subscriptions on top of the Apple App Store and Google Play. Adapty receives a pseudonymous account identifier and the purchase details needed to grant and validate your subscription. The payment itself is handled by Apple or Google, not by us.

7. Storage and security

Your CV text is encrypted at rest. All transfers between the app and our servers use TLS. Access to production systems is restricted.

8. Retention

9. Sharing and transfers

We never sell your data. We share it only with processors needed to run the service: our hosting provider, Anthropic (AI processing), PostHog (product analytics), Google Firebase (in-app analytics and crash diagnostics), and Adapty (subscription management). Where a processor is located outside the EU/EEA (Anthropic, Google and Adapty in the USA), transfers are safeguarded under the EU–U.S. Data Privacy Framework and/or standard contractual clauses.

10. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and objection, and the right to withdraw consent at any time with effect for the future. You can delete your CV or your entire account directly in the app (Profile → Privacy & data) — see our account deletion page for the full process — or contact us at marcel.jendrusch@gmail.com. You also have the right to lodge a complaint with a data-protection supervisory authority.

11. Changes

We will update this policy when the service changes. The current version is always available at this URL; material changes are announced in the app.