Privacy Policy

This policy explains how your personal data is processed when you use the Apply app, in accordance with applicable data protection laws, including Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR).

Last updated: 7 Kasım 2026

1. Data we process

Account details: the name and email address shared by Sign in with Apple or Google sign-in (if you chose to hide your email with Apple, Apple’s relay address).
CV data: the PDF file you upload and the text extracted from it.
Job data: the job posting link or text you add.
Interview data: the written answers you give.
Generated content: CV reports, job match reports, interview feedback and the search profile extracted from your CV (titles, level, skills).
Usage data: your credit balance and credit transactions, usage counters and the days you open the app.
Purchase records: transaction details of credit pack purchases. Your payment and card details stay with Apple and never reach us.

2. Purposes of processing

To provide the CV analysis, job match and interview preparation services.
To create your account and manage your session securely.
To apply your credit balance and spending correctly.
To keep the service secure and prevent abuse.

3. Legal bases

Entering into and performing the service contract.
Legitimate interest: securing and improving the service.
Your explicit consent for sending CV and job texts to the AI service provider and for international transfers.

4. Processing with AI

To generate analyses, your CV, job posting and interview answer texts are sent to the Google Gemini API through our servers.
We ask for your explicit consent in the app before the first analysis; if you don’t consent, AI features are not used and your data is not sent.
Requests are made under the Gemini API’s paid service terms and without interaction logging. Google does not use this content to improve its products or train its models; it may retain it for a limited time only to detect abuse.
Scores are explainable heuristic assessments; they are not a likelihood of being hired or a hiring decision.

5. Recipients

Supabase: authentication, database and file storage infrastructure.
Google (Gemini API): text processing with AI.
Apple and Google: Sign in with Apple and Google sign-in (authentication).
Apple (App Store) and RevenueCat: processing and verifying credit purchases (your user ID and purchase records).
These providers’ servers may be located abroad; your data may therefore be transferred internationally.
Your data is never sold, used for advertising or shared with third parties.

6. Job posting sources

When you add a posting link, only the public posting page is read; pages that require sign-in are not read.
Applications are always made by you, on the original posting page.

7. Retention and deletion

Your data is kept for as long as your account remains open, in areas only you can access.
You can permanently delete your account, CV files, texts, reports and interviews via Profile → Privacy and data → Delete account and data.
Deleted data can’t be recovered.
If you signed in with Apple, deleting your account also removes the app’s connection to your Apple ID.

8. Security

Each user can access only their own data (row-level security).
CV files are kept in private storage; download links are short-lived and issued only to you.
AI and server keys are kept only on the server, never in the app.

9. Your rights

To learn whether your data is processed and to request information about it.
To learn the purpose of processing and whether data is used accordingly.
To know the parties your data is transferred to.
To request correction of incomplete or inaccurate data, or its deletion or destruction.
To object to an unfavorable result arising from analysis by automated systems.
To claim compensation if you suffer damage due to unlawful processing.

Contact: atakangmc@gmail.com