Privacy and terms

Version 1, in effect from 2026-10-16.

Privacy statement

Version 1, in effect from 2026-10-16.

Career Coach is a job-search app. It keeps track of your applications, helps you write resumes, cover letters and notes for a job, and helps you get ready for interviews. It is a preview, run by the operator for invited testers.

This statement describes what the app does today. When that changes, this statement changes first, and you're asked to agree again.

Questions: use Send feedback when you are signed in.

In short

Nothing about you is sold, used for advertising, or shared for anyone else's use.
What you add is kept so the app can show it back to you and do what you ask.
When you press a button that uses AI, the app sends what that task needs to Claude, an AI made by Anthropic. Nothing is sent to Claude unless you press something.
The app never sends Claude the contact details in your profile (name, e-mail address, phone number, town, links), your passwords, or the pay you've entered, except when a button says your pay goes with it. Anything written in a file you ask Claude to read goes with the file.
In Settings › Privacy you can turn Claude off, or keep certain kinds of information from it.
You can delete what you've added, one thing at a time (a few things only go with their application, and some are kept hidden until your account is deleted: see How long things are kept), or your whole account at any time.

What the app keeps

Your account: your name, e-mail address and settings. Your password is kept only as a one-way hash, which can't be turned back into the password. If you turn on two-step sign-in, its secret is kept encrypted.
What you add: everything on Your career (headline, summary, jobs, bullets, skills, schools, certifications, projects, awards, volunteering, stories, notes, goals and pay); your applications (postings, notes, timelines, calls, contacts, interviews and calendar items) and the files you add to them, offer letters included; practice sessions; the people and companies you track, with contact photos and company logos; Library documents and pictures; resumes you import; and your conversations with the Coach.
What Claude wrote for you: every version of your documents, company research, analyses of postings, Library readings and cards, and redrafts.
Text read from your files is kept with them, so the app can search and use it.
Signing in: the kind of device and browser ("iPhone · Safari") and when. Your IP address is held in memory briefly, only to slow down repeated wrong passwords, and never stored.
AI use: for each AI task, which task it was, the model, its size and cost, and when. Not the words.
Notifications, if you turn them on: the address your browser's notification service gives for that device.
Your invitation: the name and e-mail address the operator entered for you.
Your agreement: when you agreed to each version of this statement and the terms, and on what kind of device.
What you send the operator: notes from Send feedback (with the page, the app's version and your kind of device, and a picture if you attach one, with where and when it was taken left out; you can remove the picture later on Feedback you've sent), your answers when the operator asks the testers a question (with your name), and requests for more Claude credits.

Cookies and your browser. One cookie keeps you signed in (30 days from your last visit). Your browser also keeps a few things on this device only: words you've typed but not saved, for 5 minutes; an unsent feedback note, for a day; and choices such as the voice and the last page you were on. They aren't sent anywhere.

The app has no analytics, advertising, tracking or third-party scripts. It never reads your location; it keeps only your device's time zone, to show times. Speech you give in practice is turned into text on your device, and no sound is sent anywhere. A practice video never leaves your browser unless you save it.

Pictures and files are kept as you upload them. A phone photo may hold details such as where it was taken, and a Library picture keeps them; when Claude reads a picture, the app takes those details out first. Contact photos are made small and have those details removed before they're kept. Please don't add ID documents, passports, bank or card details, or health records. The app doesn't need them.

How it's stored and protected

The app, its database and its files are hosted by DigitalOcean, in the region its host runs it in. Your connection to the app, and the app's connections to its database and file storage, are encrypted.
Your files are private. Every file reaches your browser through the app, which first checks that it belongs to the account signed in. Every page that names a record makes the same check.
All accounts' files are kept in one private storage area, in a folder per account. Two copies of the app hold a key that opens these files: this one, and the operator's test copy, which runs code before it's released. Each key is kept only in that copy's encrypted settings, never in code. Giving the test copy a storage area of its own, so its key can't reach these files, is planned.
DigitalOcean says it encrypts the disks it stores data on. The app doesn't add its own encryption to your files or their text; it does encrypt your two-step secret.
The database is backed up every day, and backups are kept 7 days. Files have no backup. A file you delete in the Library or on an application, a contact's photo and a company's logo you remove are removed from storage at once, and if storage can't be reached the app says so and keeps them until it can. The logo file of a company you delete or clear is removed just after, and if storage can't be reached at that moment it stays until you delete your account. A file lost by accident couldn't be brought back, so keep your own copy of anything you can't lose.

Who can see it

You.
The operator, who runs the app. The app never shows the operator your applications, career, documents or conversations. For a tester it shows: your name and e-mail address; when you joined and when you last used the app; the Claude credits you've been given and what you've spent, with how many calls; and what you send the operator.
If you can't sign in, the operator can make you a link to set a new password. Using it changes your password and signs you out everywhere, so you'd notice. The operator only ever passes it to you.
The operator also runs the server and database your data is kept on, so could reach it outside the app. The operator does that only to keep the app working, to fix a problem you report, or when the law requires it.
The operator may paste a note you sent into the operator's own Claude account, under that account's terms, and keep it without your name in their project notes, to fix what it's about; the picture attached to it goes there only while its box "may show this picture to Claude" stays ticked. Your answers to the operator's questions to the testers may be copied there too, without names. Logs, which hold account numbers but no words, are read the same way.
No one can use the Coach to reach another account. No AI task, for anyone, the operator included, can fetch or change another account's data.

What goes to Claude

Claude is an AI made by Anthropic. The Coach is Claude. What it writes can be wrong: check it before you rely on it or send it to anyone. It makes no decisions about you or anyone else.

Only when you press. Each AI button sends what its task needs. Usually that's your career record (everything on Your career except your contact details and pay; your stories and job notes unless you turn them off), the posting or message it's about, and what you typed for it. The Coach also gets each application's name, place, status, dates and interview time; for the application you're talking about, its posting's address, what you noted matters to you, and its newest resume and letter; the page you asked about; the app's own help; and, with each message, the conversation so far. After your first message, it and the Coach's first answer go once more, to name the conversation. Before some tasks, the app asks Anthropic how large the request is; the same content goes for that. If Claude turns a request down, another Claude model may answer it; after a second refusal, your text (the posting or message) goes once more, to suggest another way to word it.

Sent as it is: what you type to the Coach; documents you ask Claude to read (the whole file, and a PDF with its own details, such as who made it); pictures you ask Claude to read, without the details stored inside them; a file or screenshot you start an application from; postings; and recruiters' messages, after the app takes out e-mail addresses and phone numbers (a picture or PDF of a recruiter's message is sent as it is, so an e-mail address or phone number in it goes too). A resume you import is sent whole to be read, contact details included.

Never sent by the app: your contact details from your profile; your passwords and sign-in details; the pay you've entered, except when a button says your pay goes with it (Ask the Coach to sum it up sends the figures, with no names); offer letters; contact photos and company logos. Pay or contact details you type to the Coach, or that are written in a document you ask Claude to read, go with it.

Half price. Some tasks can be sent at half price and collected later. That request waits at Anthropic until the app collects it, then the app deletes it there. A change in Settings can't call back a request already sent. If you delete your account, a request still waiting is cancelled and removed at Anthropic first.

Company research lets Claude search the web. Claude writes the searches (the company's name, the role, its news), and they go to Anthropic's search service. Claude is told not to search for you.

What Anthropic does with it. Anthropic's commercial terms say it doesn't train its models on what the app sends. Its privacy center says it deletes it within 30 days, unless it's flagged as breaking Anthropic's usage policy (then it may be kept up to 2 years) or the law requires otherwise. That is Anthropic's own account, as of 2026-10-16, and it covers what the app sends, not a note the operator pastes into their own Claude account.

What Claude was sent for a resume is on that resume's page.

Keeping things from Claude

Settings › Privacy:

Use Claude. Turn it off and the app sends nothing to Claude. Your applications, notes, calendar and Library keep working; the AI buttons say they're off.
By kind, each on until you turn it off, each saying what you lose: your stories; notes on your jobs and Library proofs; Library documents; people you talk to and your call notes; your speaking pace and heard-word corrections; company research's web search.
Never sent is listed there too.

A change applies from your next press. What's already in a Coach conversation, a practice session or something Claude wrote earlier stays in it and goes with it: a conversation sends what's been said each time, and a brief that names the people you're meeting still names them in practice. Start a new conversation or practice session to leave it behind.

Other companies

Anthropic: the AI tasks, as above.
DigitalOcean: hosting, the database and file storage. All traffic passes through it, so it sees your IP address.
Better Stack: the app's log lines. They hold account and record numbers, counts, costs, error codes and page addresses, never your words, e-mail address, phone number, names or pay. Better Stack keeps them 3 days. DigitalOcean, which runs the app, also keeps its own copy for as long as its service keeps them.
Microsoft 365: every e-mail the app sends (an invitation or a link to set a new password) goes through Microsoft 365. Only an invitation keeps a copy, in the sender's sent mail. If the operator sent your invitation another way, it stays wherever they sent it.
Apple, Google, Mozilla or Microsoft, if you turn on notifications: they carry each one, encrypted so they can't read it; they see when and to which device. Your lock screen shows only what you chose.
Company websites: the app's server fetches a new company's logo from its site. Nothing about you is sent, but the site can see someone looked it up. Remove a logo and it isn't fetched again.

How long things are kept

What you add: until you delete it, or your account.
Kept after you delete it, until your account is deleted: a story or note you delete is hidden, not erased; when you merge people or companies, a copy of what they were is kept so the merge can be undone; words you typed for a half-price request stay after its application is deleted; a change the Coach made stays after you delete its conversation, so you can still undo it; the voice check's before-and-after copies; the AI use record; and the feedback notes you've sent, which can't be deleted one by one.
Not deleted on their own: a single version of a document, or a single practice session. They go with their application. Calendar items stay when their application is deleted, until you delete them.
A file you add to start an application: a day, unless you keep it with the application.
Your invitation: 30 days after it's used or ends. Your agreements: until your account is deleted.
Sign-ins: up to 30 days from your last visit (12 hours if you untick Stay signed in). Sign-in history: 90 days. A record that a sign-in ended: 31 days.
Notifications sent: 30 days. E-mails the app sent: 90 days, recording the kind and the outcome with a scrambled form of the address, never the address or the link.
Logs: 3 days at Better Stack; DigitalOcean's copy for as long as its service keeps them. Database backups: 7 days. At Anthropic: up to 30 days, as above.

Your choices

See it: most of what you've added is in the app. What's kept but not shown is listed under How long things are kept. Ask the operator and they'll tell you what's held, and can open Download my data to you for a day, so you can save a copy of your career yourself; that page lists what the copy leaves out.
Correct it: edit anything you've added.
Delete it: one thing at a time, or your whole account from Account › Delete my account, with your password. That removes your data and files from the app at once and signs you out everywhere; a half-price request still waiting is cancelled and removed at Anthropic first. What remains for a while: backups (7 days), Anthropic's copy (up to 30 days), e-mail records (90 days), logs (as above), and your month's AI cost in a total with no name. Copies outside the app stay: your invitation in the sender's sent mail, and any note the operator pasted into their own Claude account or kept, without your name, in their project notes.
Notifications: on or off for each device, in Settings.
Claude: Settings › Privacy.
Do Not Track: the app doesn't track you across other sites, so it treats every visit the same whether or not your browser sends Do Not Track or Global Privacy Control.
Wherever you live, you can ask the operator what the app holds about you, and you can withdraw your agreement by deleting your account. If you live in the European Union or the United Kingdom, you can also complain to your data protection authority.

Career Coach is not meant for anyone under 18.

If something goes wrong

If the operator learns that someone has reached your data who shouldn't have, you'll be told what happened and what it means for you, as soon as the operator knows.

Changes

Each version has a number and a date, and lists what changed. If a change affects what is kept, what is sent, or who can see it, you're asked to agree before you go on using the app, and nothing you added earlier is used in a new way without that. A fix to the wording that changes nothing keeps the version.

Terms of use

Version 1, in effect from 2026-10-16.

You agree to these terms, and confirm you've read the privacy statement above, by ticking the box when you join, or by pressing Agree and go on when a new version is shown. If you don't agree, don't join, or delete your account.

1. What Career Coach is

A job-search app run by the operator. It keeps track of your applications, writes resumes, cover letters and notes for a job, helps you prepare and practise for interviews, and has a Coach to talk your job search through. Its AI is Claude, made by Anthropic.

2. It's a preview

Career Coach is open only to people the operator invites. It is free to use.
It is still being built. Features change, things break, and pages may look different tomorrow. Send feedback when something is wrong.
Files you add have no backup. Keep your own copy of anything you can't lose.
The operator may pause or end the preview. You'll be told in the app before it ends, and your account and data are then deleted.

3. Your account

You must be 18 or older.
One person per account. Don't share your sign-in, and keep your password to yourself. Two-step sign-in is there if you want it.
If you think someone else has got into your account, change your password (that signs out your other devices) and tell the operator through Send feedback.

4. Claude credits

The operator gives you Claude credits, which pay for your AI tasks on the operator's Anthropic account. They have no cash value, can't be passed to anyone else, and may be changed or paused. When they run out, the AI buttons stop until more are added; everything else keeps working.

5. Use it for your own job search

The AI is there for your career: your applications, your documents, your practice and your questions about your job search. Please don't:

use the Coach or any AI task for work that isn't your job search, such as writing code for a project, schoolwork, someone else's business, or long chats on other subjects;
try to make the Coach or a task ignore its instructions, reveal them, or reach anyone else's data, including by hiding instructions in a posting, a document or a file;
add other people's private details beyond what a job search normally involves (a recruiter's name and message, who you met at an interview);
add ID documents, passports, bank or card numbers, or health records;
add anything illegal, or anything meant to harm, harass or deceive someone;
test or get around the app's security, overload it, or run scripts or bots against it. If you find a weakness, tell the operator through Send feedback, and don't use it;
use what Claude writes in ways Anthropic's usage policy forbids. That policy applies to everything sent to Claude.

The operator may pause your Claude use or your account if these terms are broken, and will tell you why.

6. What the AI writes

What Claude writes can be wrong, out of date or not right for you. Read it and check it before you send it to an employer or rely on it. Career Coach makes no decisions about you or anyone else. It isn't legal, financial or medical advice, and it can't promise you an interview or a job.

7. Your content is yours

You own what you add, and what is written for you. You let the app keep it, show it to you, and send it to Claude and the other services named in the privacy statement, only to do what you ask. It is used for nothing else, except a note you send the operator, as section 8 says.

8. Feedback

If you send ideas or notes, the operator may use them to improve Career Coach, without owing you anything for them. A note may be pasted into the operator's own Claude account, under that account's terms, and kept in the operator's project notes, to fix what it's about; never with your name or e-mail address. A picture attached to it goes there only while its box "may show this picture to Claude" stays ticked. Answers to the operator's questions to the testers may be copied there too, without names.

9. Leaving

You can stop whenever you like, and delete your account from Account › Delete my account. It takes your data with it, as the privacy statement says. If you'd like a copy of your career first, ask the operator to open Download my data to you for a day.
The operator may end your access. You'll be told in the app first unless these terms were broken, and your account and data are then deleted.

10. No guarantees

Career Coach is a free preview, provided as it is. There's no promise that it will always be available, free of mistakes, or right for your situation. As far as the law allows, the operator isn't responsible for losses that come from using it, including lost data.

11. Changes

When these terms change, beyond a fix to the wording, the version changes, the app lists what changed, and you're asked to agree before you go on. If you don't agree, you can delete your account.

12. Questions

Use Send feedback when you are signed in.