Datenschutzerklärung

1. Controller

Scalr Ventures LLC, 30 N Gould St, STE R, Sheridan, WY 82801, USA, represented by Marcel Jendrusch. Contact: hello@jobscalr.works.

2. What we collect

• Account data: an anonymous account ID created on first launch; optionally your email address and a password hash if you secure your account.
• Profile and onboarding answers: target role, locations, experience level, preferences, and the answers you give during onboarding.
• Your CV: the resume you upload, and the tailored CVs and cover letters generated from it. CV content is encrypted at rest.
• Job activity: jobs you save, analyze, apply to, and your interview-prep progress.
• Usage events: which features you use, to operate, secure, and improve the service, and which ad a new install came from. We never sell your personal data.
• Device basics: timezone and language, to show weeks and dates correctly.

3. Why we process it (legal bases, Art. 6 GDPR)

• To provide the service (Art. 6(1)(b)): matching you with jobs, generating documents, tracking your application progress.
• With your consent (Art. 6(1)(a)): processing your uploaded CV. You can withdraw consent at any time by deleting your CV or account.
• Legitimate interests (Art. 6(1)(f)): preventing abuse, securing the service, fixing errors.

4. AI processing

When you use an AI feature (match analysis, CV tailoring, cover letters, interview prep), the relevant content — your CV text and the job posting — is transmitted to our AI providers, Anthropic and Google (Gemini), to generate the result. We send only what the feature needs. They process this data on our behalf and do not use it to train their models.

5. Analytics and diagnostics

To understand how the app is used and to keep it stable, we process pseudonymous usage and diagnostic data. This includes which screens and features you open, funnel steps (e.g. onboarding, purchase), and — if the app crashes — a technical crash report. Events are tied to a random account identifier, never to your name, and never include your CV, job, or cover-letter text.

We also measure which ad a new install or signup came from, so we know which campaigns are worth running. We use the following processors:

• PostHog (EU-hosted) — product analytics, processed on our servers and forwarded to PostHog in the EU.
• Google Firebase Analytics and Crashlytics (Google, USA) — in-app usage analytics and crash diagnostics.
• Meta (Meta Platforms Inc., USA) — attribution for our Facebook and Instagram ads: it receives app and conversion events and a device or advertising identifier so we can see which ad led to an install or signup. It never receives your CV, job, or cover-letter text.

Legal basis: for product analytics and crash diagnostics (PostHog, Firebase), our legitimate interest in measuring, securing and improving the service (Art. 6(1)(f) GDPR); you can object or delete your account at any time (see section 10). For advertising attribution (Meta), your consent (Art. 6(1)(a) GDPR), which we ask for in the app, including the iOS App Tracking Transparency prompt; you can decline it, and withdraw it later, and we then do not run attribution.

Website analytics (jobscalr.works)

On this marketing website (which is separate from the app), we use Google Analytics (Google LLC, USA) only after you give explicit consent via the cookie banner (Art. 6(1)(a) GDPR). Until you accept, no Google Analytics script and no analytics cookie is loaded. You can decline, and you can withdraw your consent at any time by clearing this site's data in your browser. Where data is transferred to the USA, it is safeguarded under the EU-U.S. Data Privacy Framework and/or standard contractual clauses.

Launch waitlist (jobscalr.works)

If you enter your email address in the launch waitlist form, we store that address and your chosen language to send you a confirmation email and, once you confirm, a one-time notification when JobScalr launches (Art. 6(1)(a) GDPR, consent). We use double opt-in: if you never click the confirmation link, we do not contact you and the pending entry is discarded. The address is processed and stored by JobScalr and is never sold or used for advertising. You can unsubscribe at any time via the link in our emails.

6. Subscriptions

If you buy a subscription, purchase and entitlement data is processed through Adapty (Adapty Tech Inc., USA), which manages subscriptions on top of the Apple App Store and Google Play. Adapty receives a pseudonymous account identifier and the purchase details needed to grant and validate your subscription. The payment itself is handled by Apple or Google, not by us.

7. Storage and security

Your CV text is encrypted at rest. All transfers between the app and our servers use TLS. Access to production systems is restricted.

8. Retention

• CV text of anonymous accounts that have been inactive for 30 days is automatically deleted.
• Deleting your account in the app removes your personal data.
• Aggregated, non-personal usage statistics may be kept longer.

9. Sharing and transfers

We never sell your data. We share it only with processors needed to run the service: our hosting provider, Anthropic and Google (AI processing), PostHog (product analytics), Google Firebase (in-app analytics and crash diagnostics), Meta (ad attribution), and Adapty (subscription management). Where a processor is located outside the EU/EEA (Anthropic, Google, Meta and Adapty in the USA), transfers are safeguarded under the EU–U.S. Data Privacy Framework and/or standard contractual clauses.

10. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and objection, and the right to withdraw consent at any time with effect for the future. You can delete your CV or your entire account directly in the app (Profile → Privacy & data) — see our account deletion page for the full process — or contact us at hello@jobscalr.works. You also have the right to lodge a complaint with a data-protection supervisory authority.

11. Changes

We will update this policy when the service changes. The current version is always available at this URL; material changes are announced in the app.