Privacy Policy
Last updated: 19 June 2026
JobJournal is operated by Appex Labs Ltd, a company registered in England & Wales (Company No. 17271845).
1. What We Collect
When you create an account we store:
- Email address — used for login, email verification, and password resets.
- Password — stored as a salted hash (PBKDF2-SHA256). We never store or see your plaintext password.
- CV data — if you use the CV Intelligence feature, structured data extracted from your uploaded CV (skills, experience, qualifications). The raw CV file is not stored on our servers.
- Job analysis data — AI-generated match scores, requirement tables, and fit summaries for jobs you analyse.
- Applied-job flags — which jobs you mark as “applied.”
2. How We Use Your Data
- To provide personalised job matching via Google Gemini AI.
- To let you track applications and manage your CV.
- To send transactional emails (verification, password reset). We do not send marketing emails.
3. Third-Party Services
| Service | Purpose | Data Shared |
|---|---|---|
| Google Gemini AI | Job analysis, skill extraction, CV processing | Job descriptions, CV content (per-request, not stored by Google under API ToS) |
| Railway | Application hosting | All application data (encrypted in transit) |
| Supabase | Database (PostgreSQL) | All application data (encrypted at rest) |
| OpenStreetMap / Nominatim | Geocoding university locations | University names and locations |
4. Data Retention
Your data is retained for as long as your account exists. If you delete your account, all associated data (analyses, CV data, keywords, applied-job records) is permanently removed within 24 hours.
5. Your Rights
- Access — download all your data via your account settings.
- Deletion — delete your account and all associated data at any time.
- Correction — edit your CV and profile data directly in the app.
6. Security
We use HTTPS everywhere, Content Security Policy headers, login rate limiting, and HTML sanitisation on all user inputs. Database backups are encrypted and retained for 7 days.
7. Contact
For privacy questions, contact Appex Labs Ltd at: [email protected]