Datenschutzerklärung

1. Controller

Marcel Jendrusch, Dauner Str. 14, 50937 Köln, Germany. Contact: marcel.jendrusch@gmail.com.

2. What we collect

• Account data: an anonymous account ID created on first launch; optionally your email address and a password hash if you secure your account.
• Profile and onboarding answers: target role, locations, experience level, preferences, and the answers you give during onboarding.
• Your CV: the resume you upload, and the tailored CVs and cover letters generated from it. CV content is encrypted at rest.
• Job activity: jobs you save, analyze, apply to, and your interview-prep progress.
• Usage events: which features you use, to operate, secure, and improve the service. No advertising tracking, no sale of personal data.
• Device basics: timezone and language, to show weeks and dates correctly.

3. Why we process it (legal bases, Art. 6 GDPR)

• To provide the service (Art. 6(1)(b)): matching you with jobs, generating documents, tracking your application progress.
• With your consent (Art. 6(1)(a)): processing your uploaded CV. You can withdraw consent at any time by deleting your CV or account.
• Legitimate interests (Art. 6(1)(f)): preventing abuse, securing the service, fixing errors.

4. AI processing

When you use an AI feature (match analysis, CV tailoring, cover letters, interview prep), the relevant content — your CV text and the job posting — is transmitted to our AI provider, Anthropic, to generate the result. We send only what the feature needs. Anthropic processes this data on our behalf and does not use it to train its models.

5. Analytics and diagnostics

To understand how the app is used and to keep it stable, we process pseudonymous usage and diagnostic data. This includes which screens and features you open, funnel steps (e.g. onboarding, purchase), and — if the app crashes — a technical crash report. Events are tied to a random account identifier, never to your name, and never include your CV, job, or cover-letter text.

We use the following processors for this:

• PostHog (EU-hosted) — product analytics, processed on our servers and forwarded to PostHog in the EU.
• Google Firebase Analytics and Crashlytics (Google, USA) — in-app usage analytics and crash diagnostics.

Legal basis: our legitimate interest in measuring, securing and improving the service (Art. 6(1)(f) GDPR). You can object to this processing or delete your account at any time (see section 10).

6. Subscriptions

If you buy a subscription, purchase and entitlement data is processed through Adapty (Adapty Tech Inc., USA), which manages subscriptions on top of the Apple App Store and Google Play. Adapty receives a pseudonymous account identifier and the purchase details needed to grant and validate your subscription. The payment itself is handled by Apple or Google, not by us.

7. Storage and security

Your CV text is encrypted at rest. All transfers between the app and our servers use TLS. Access to production systems is restricted.

8. Retention

• CV text of anonymous accounts that have been inactive for 30 days is automatically deleted.
• Deleting your account in the app removes your personal data.
• Aggregated, non-personal usage statistics may be kept longer.

9. Sharing and transfers

We never sell your data. We share it only with processors needed to run the service: our hosting provider, Anthropic (AI processing), PostHog (product analytics), Google Firebase (in-app analytics and crash diagnostics), and Adapty (subscription management). Where a processor is located outside the EU/EEA (Anthropic, Google and Adapty in the USA), transfers are safeguarded under the EU–U.S. Data Privacy Framework and/or standard contractual clauses.

10. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and objection, and the right to withdraw consent at any time with effect for the future. You can delete your CV or your entire account directly in the app (Profile → Privacy & data) — see our account deletion page for the full process — or contact us at marcel.jendrusch@gmail.com. You also have the right to lodge a complaint with a data-protection supervisory authority.

11. Changes

We will update this policy when the service changes. The current version is always available at this URL; material changes are announced in the app.