Skip to content

Privacy Policy

Last updated: October 8, 2026

1. Introduction

Careerscient (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, web app, mobile apps, and related services (collectively, the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Email address, name, and authentication credentials when you create an account (with an email address or through Google, Apple, or LinkedIn sign-in).
  • Career Data: Work experiences, achievements, skills, goals, and other professional information you capture through the Service — including text entries, voice notes, photos you attach to a conversation, and documents you add such as a resume or a job description. The Service classifies your input into career signal types (such as stories, decisions, learnings, reflections, feedback, and milestones) and extracts structured career evidence from each.
  • Practice Sessions: What you say or type in interview and conversation practice, including live voice sessions and, where a feature records them, the recording.
  • Generated Content: Resumes, interview stories, LinkedIn posts, brag books, career identity profiles, and other artifacts generated from your career data.
  • Career Record Contact Messages: If you send a message to the owner of a Career Record, we check your name and message for abuse (using OpenAI's safety check), then pass on your name, email address, and message so they can reply to you.

2.2 Information Collected Automatically

  • Usage Data: In the mobile apps, which features you use and when, linked to your account ID (never your email address or name). On our public website, cookieless page statistics that are not linked to you.
  • Device Information: Device type, operating system, and app version.
  • Error and Performance Data: Crash reports and performance metrics to improve the Service.
  • Network Information: Your IP address, which our hosting, security, and delivery providers see when your device connects to the Service.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Process your career data through AI to generate structured stories, resume bullets, and other career artifacts
  • Authenticate your identity and secure your account
  • Send transactional communications (account verification, security alerts, account deletion notices) and the notifications you have turned on
  • Improve the Service and develop new features
  • Comply with legal obligations

We do not sell your personal information. We do not use your career data for advertising or share it with advertisers.

4. AI Processing

Careerscient uses artificial intelligence to process your career data. This section explains what data is sent, to whom, and how it is protected.

4.1 What Data Is Sent

  • Text you write: Captures, follow-up answers, conversation messages, practice answers, and the text of documents you add (for example a resume or a job description).
  • Your voice: Voice notes are sent to OpenAI to be transcribed into text. Live voice practice sessions stream your microphone audio to OpenAI while the session is running.
  • Photos you attach: A photo you attach to a conversation is sent with your message so the reply can take it into account. We remove location data from photos first.
  • Context from your history: Relevant saved Career Cards, goals, and your career level or job title (if provided), so the response fits your situation.

We do not send your account email address, password, or payment details to AI providers. Content you write or upload is sent as you wrote it, so it includes any personal details it contains.

4.2 Who Processes It

  • OpenAI: Classifies and structures your captures, writes follow-up questions and career artifacts, transcribes voice notes, runs live voice practice, checks content for safety, and builds the search index for your Library.
  • Anthropic: Writes replies in conversations with your saved evidence, including any photo you attached, and reviews some practice answers. When a reply needs current public information, Anthropic may run a web search based on your conversation.
  • ElevenLabs: Turns written scripts into spoken audio. If you ask for a custom listening example, the script written from the situation you describe is sent to ElevenLabs.

4.3 How Your Data Is Protected

  • Data is sent to an AI provider only to fulfil the request you made
  • Under their API terms, OpenAI and Anthropic do not use your data to train their AI models. They may keep it for a limited period to detect abuse, as their policies describe
  • All data sent to AI providers is encrypted in transit (TLS 1.2+)
  • Each provider's data handling is governed by its own terms: OpenAI, Anthropic, ElevenLabs

4.4 Your Consent

Before your first use, Careerscient presents an AI & Data Transparency disclosure explaining what data is sent, who processes it, and how it is protected. By proceeding to use the Service after reviewing this disclosure, you consent to the processing described above. You may withdraw consent at any time by deleting your account, which removes all your data within 30 days.

4a. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

  • Contract Performance (Article 6(1)(b)): Processing necessary to provide the Service you signed up for — including AI career data analysis, story generation, and artifact creation.
  • Legitimate Interest (Article 6(1)(f)): Error monitoring, security analysis, and service improvement, balanced against your rights through data minimization and pseudonymization.
  • Consent (Article 6(1)(a)): Optional features such as sharing career data to LinkedIn or other third-party platforms, which you explicitly initiate.
  • Legal Obligation (Article 6(1)(c)): Retaining minimal audit records for GDPR compliance and financial reporting.

5. Data Storage and Security

Your data is stored on Microsoft Azure in data centers in the United States (primarily the West US 2 region). We implement industry-standard security measures, including:

  • Encryption in transit (TLS 1.2+) and at rest
  • Authentication via Clerk with multi-factor support
  • Regular security audits and vulnerability scanning
  • Role-based access controls for internal systems
  • Parameterized database queries to prevent injection attacks

6. Services That Process Your Data

These are all the services that handle your personal data on our behalf, and what each one receives. We do not give any of them your career data unless the entry says so.

6.1 Running the Service

  • Microsoft Azure: Hosting, database, and file storage. Stores your account and everything you save, including attached photos, profile photos, and voice practice recordings, and keeps operational logs that can include your account ID and email address.
  • Clerk: Sign-in and account security. Processes your email address, name, password or sign-in provider identity, and session details such as IP address and device.
  • OpenAI, Anthropic, ElevenLabs: AI processing, as described in Section 4.
  • Cloudflare: Delivers and protects our website. Sees your IP address and the pages you request, and measures page load performance without cookies.
  • jsDelivr: Delivers the code editor used in coding practice. Sees your IP address when the editor loads.

6.2 Communication

  • Resend: Sends our emails to you (for example account deletion notices and digests you have turned on), and relays Career Record contact messages: the sender's name, email address, and message go to the Record's owner.
  • Expo: Delivers mobile push notifications. Receives your device's push token and the notification text, which can include the title of one of your own entries.
  • Apple and Google: Deliver push notifications to your device (Apple Push Notification service, Firebase Cloud Messaging), and provide Sign in with Apple and Google sign-in if you choose them.

6.3 Payments

  • Apple App Store and Google Play: Process in-app purchases. We never see your full payment card details.
  • RevenueCat: Manages subscriptions. Receives your account ID, purchase history, and subscription status. Does not receive your career data.
  • Stripe: Processes payments made on the web through our web checkout, which RevenueCat runs. Receives the payment details you enter and your email address; RevenueCat receives your account ID and the purchase. We never see your full payment card details.

6.4 Analytics and Error Monitoring

  • PostHog (mobile apps): Product analytics. Receives which features are used, device and app information, and your account ID — never your email address, name, phone number, or career content. Session recording is off.
  • Plausible (public website): Cookieless page statistics for our public pages and blog only — never the signed-in app, Career Records, or share links. Receives the page address and the referring site; it does not store your IP address or identify you.
  • Sentry (mobile apps): Crash reports and performance data. Receives error details, device information, recent app navigation, and your account ID — never your email address or name.

6.5 Optional Connections You Start

  • LinkedIn: If you sign in with LinkedIn or connect your LinkedIn account, we receive your basic profile and email address from LinkedIn. When you choose to post, the text you approved is sent to LinkedIn. OAuth tokens are encrypted at rest.

Each service operates under its own privacy policy. We select providers that meet our security and privacy standards and enter into Data Processing Agreements where applicable. We add a service to this list before it receives your data.

7. Data Retention

We retain your data for as long as your account is active. When you delete your account:

  • Your career data is deleted within 30 days
  • Anonymized, aggregated usage data may be retained for analytics
  • Backups containing your data are purged within 90 days

Practice recordings. Recording a practice session is off by default. If you turn recording on, the recording is deleted automatically 30 days after it is saved. You can delete a recording from its debrief, or all of them in Settings, at any time, and withdrawing your consent to recording in Settings also deletes them all. A voice drill answer is deleted as soon as it has been transcribed.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

8.1 All Users

  • Access: Request a copy of the data we hold about you
  • Correction: Update or correct inaccurate data
  • Deletion: Request deletion of your account and data
  • Export: Export your career data in a portable format

8.2 EU/EEA Residents (GDPR)

  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time
  • Right to lodge a complaint with a supervisory authority

8.3 California Residents (CCPA)

  • Right to know what personal information is collected
  • Right to delete personal information
  • Right to opt out of the sale of personal information
  • Right to non-discrimination for exercising your rights

We do not sell personal information as defined by the CCPA.

9. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the app and updating the “Last updated” date above. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: [email protected]