Privacy Policy & Terms of Service

Welcome to Apply Assistant. We operate a local-first mobile job application tracking tool designed to centralize scattered job posts, log application progress, perform CV gaps analysis, generate cover letters, and help organize your job-hunting workflow.

Because we value your privacy, our core architecture is designed to store data directly on your device by default, utilizing local offline SQLite databases (Drift). Cloud services or external API processing are used strictly when you configure and trigger features (like syncing data to Supabase or tailoring documents with Google Gemini APIs). All data transactions are secured with industry-standard encryption.

The app processes the following categories of information to manage your job application tracker and generate career documents:

Unlike automatic email aggregators, Apply Assistant does not sync with your inbox, ask for Google OAuth permission, or link to your email server. All email-related tracking in the app is entirely manual:

Apply Assistant supports advanced AI-driven features like resume gap analysis, CV keyword injection, tailored cover letter generation, and LaTeX CV exporting. These functions process your career text and job requirements as follows:

Google Gemini API via Supabase Edge Function Proxy

When you trigger CV Gap Analysis or Cover Letter Tailoring, the app securely transmits the job description and your resume profile to our Supabase Edge Function gateway. This gateway secures all communications and features an automatic model fallback chain to handle rate limits, service unavailability, or model errors. The gateway dynamically tests and routes requests through verified model slugs in the following sequence: gemini-2.5-flash → gemini-3.1-flash-lite → gemma-4-26b-a4b-it → gemma-4-31b-it → gemini-3-flash-preview. Transmissions are encrypted using TLS 1.3, and data is processed strictly to generate responses; your inputs are not used to train the underlying models.

LaTeX Document Compilation (Google Cloud Run)

If you choose to export your tailored CV as a professional LaTeX PDF, the app compiles the LaTeX code using a state-free compiler hosted on Google Cloud Run. The raw LaTeX source is sent encrypted via HTTPS/TLS 1.3 to the compiler endpoint, where it is compiled directly in-memory. The compiled PDF file bytes are returned to your device. No document files, resume data, or personal details are permanently stored, cached, or logged on the compiler server.

On-Device Offline Engine Fallback

If no internet connection is available or if you operate in offline mode, the app bypasses all cloud models entirely. Instead, it processes CVs and templates using a local, rule-based keyword scanner and template engine running 100% on your device, ensuring no external data transmission takes place.

We use secure local storage and local scheduling engines to manage your job application logs and career documents, along with cloud-based authentication for user profiles:

• Local SQLite Storage (Drift): Your job pipelines, resumes, CV profiles, tailored cover letters, and application logs are saved directly to an offline-first SQLite database inside sandboxed mobile directories that cannot be accessed by other applications. This data is stored strictly on your device and is not synchronized to any cloud servers.
• Supabase Authentication & Profile: If you register an account, we use Supabase to store your authentication details (email and password hash) and profile metadata (full name and phone number) securely. No resume documents, cover letters, or job application tracker tables are uploaded or synchronized to Supabase.
• Secure Token Storage: Any authentication keys or session tokens are kept in secure local keychains (iOS Keychain and Android Keystore).
• Local Notifications (Awesome Notifications): To schedule follow-up reminders (7 days after applying) and closure warnings (13 days after applying), the app utilizes the awesome_notifications local engine. These alarms are scheduled entirely on-device and run locally without communicating with external push servers. This feature requires your explicit system notification permission.

You have absolute control over your private job search data. A permanent account deletion option is built directly into the app:

By using the Apply Assistant mobile application and associated web materials, you agree to comply with the following Terms of Service:

1. Scope of Use

Apply Assistant is provided solely for your personal, professional job-seeking, and career optimization activities. You agree not to reverse-engineer the mobile client, perform automated bulk requests against our Supabase Edge Function gateway, attempt to bypass the LaTeX Cloud Run compilation endpoint, or use the application to distribute malicious payloads.

2. Account Responsibility & Danger Zone

If you establish a Supabase account, you are solely responsible for securing your login credentials. You may delete your account and local data at any time via Settings → Danger Zone → Delete My Data. This action is irreversible and permanently wipes all records from your local SQLite database and deletes your authentication credentials and profile metadata from the Supabase servers.

3. Disclaimer & Limitation of Liability

The application is provided "as-is" without any express or implied warranties. While Apply Assistant utilizes advanced AI matching models and local ATS parser heuristics, we cannot guarantee job placement success, recruitment replies, or absolute error-free ATS compatibility parsing. We are not liable for any service interruptions, API rate limits, or LaTeX document compile failures from third-party or hosted endpoints.

We may update this Privacy Policy & Terms of Service to reflect changes in our database structures, AI features, or cloud hosting integrations. When updates are published, we will modify the "Last Updated" date at the top of the policy.

If we introduce any automated inbox connections, OAuth providers, or active sync services in the future, we will provide a prominent update dialogue in the mobile application and require user approval before enabling those capabilities.

If you have any questions about this Privacy Policy, your local offline database security, AI operations, or would like to request data exports, please contact us: