Privacy

Last updated: 8 October 2026

Short version: you don't need an account, your CV stays in your browser unless you choose otherwise, and you can download or delete your data at any time.

Who is responsible

The data controller is Md Raiyan Bin Mohsin, Uppsala, Sweden. Contact: raiyanbinmohsinshishir@gmail.com.

What we process and why

• Decodes and AI tools you ask for (job ads, CV text, cover letters, roadmaps, thesis pitches, interview answers, employer reviews, job search): sent to our server and AI provider only to produce the answer you requested. Legal basis: contract — providing the service you ask for. Not stored by us.
• Link reading: when you paste a link, our server fetches that page once to read the ad. Legal basis: contract.
• Account (email address, securely hashed password) and synced data (tracker cards, roadmap progress, learned phrases). Legal basis: consent — you choose to create an account.
• Saved CV: only if you turn on "Save my CV to my account". Off by default. Legal basis: consent.
• Insights opt-in: for each decode with a CV we store the job title, fit score and gap names. These records are linked to your account until you opt out or delete your account (both delete them). Others only ever see anonymous totals, and only once at least 10 people have joined. Legal basis: consent.
• Success stories: what you write in the form. Shown publicly only after review and with your consent. Legal basis: consent.
• Feedback: your message, the page you sent it from and, if signed in, your account. Legal basis: legitimate interests — improving the app.
• Usage limits and security: a one-way scrambled code of your account or IP address with the time of each AI or link request. Stories also keep a scrambled IP code to stop spam. Legal basis: legitimate interests — preventing abuse.
• Usage counts: anonymous events such as "decode completed" with the page path and time. No user id, IP address or cookies. Legal basis: legitimate interests.

In your browser

Your tracker, recent decodes, roadmap progress, learned phrases and sign-in session are saved in this browser's local storage so the app works. Your CV is kept in memory and disappears when you close the tab. We use no tracking cookies and no advertising or third-party analytics.

How long we keep it

• Ads, CVs and AI answers you don't save: not stored.
• Account, synced data, saved CV: until you delete them or your account. Turning off "Save my CV" deletes the stored CV.
• Insight records: until you opt out or delete your account.
• Stories: until you ask us to remove them or delete your account. The scrambled IP code is removed after 48 hours.
• Feedback: 24 months, then deleted automatically.
• Usage counts: 13 months, then deleted automatically.
• Usage-limit records: 24 hours, then deleted automatically.
• Browser data: until you clear it.

Who processes it for us

• Lovable Cloud — hosting, database and sign-in.
• OpenAI, via the Lovable AI Gateway — AI processing of the text you send.
• Cloudflare — edge hosting that delivers the app.

AI processing and some hosting may happen outside the EEA (for example in the USA). This is covered by the providers' data processing terms and their safeguards for international transfers.

Your rights

Under the GDPR you have the right to:

• Access your data and get a copy.
• Rectification — correct data that is wrong.
• Erasure — have your data deleted.
• Restriction — limit how we use it.
• Objection — object to processing based on legitimate interests.
• Portability — receive your data in a machine-readable format.
• Withdraw consent at any time, without affecting earlier processing.

You can also complain to the Swedish data protection authority, Integritetsskyddsmyndigheten (IMY).

Export and delete

• Download my data: in My data you get one file with your email, tracker, CV, progress, stories, feedback and insight records.
• Delete my account and data: in My data. This permanently removes your account, synced data, CV, insight records, and any stories and feedback sent while signed in — and can also clear this browser.
• Without an account: clear this site's data in your browser settings. For stories or feedback sent while signed out, email us.

Contact

Questions or requests? Email raiyanbinmohsinshishir@gmail.com.