Privacy Policy

1. Who we are

My ATS Job App Optimizer is provided by Valeon Labs Ltd (“we”, “us”), which is the data controller for the personal data described in this notice.

2. What we collect

Your CV and job description (as text and/or the original file you provide), the readiness analysis, tailored CV and cover letter we generate for you, your account identifier, and your purchase/credit history.

3. Why we process it

To provide the analysis, tailored CV, and cover letter you specifically request; to maintain your account and application history so you can return to it later; and to keep the service secure and prevent abuse.

4. Our legal basis

For analysing your CV/job description and generating documents, and for maintaining your account and documents, we rely on this being processing necessary to provide the service you’ve specifically asked us for. Where we rely on our legitimate interests — such as preventing fraud or abuse — we make sure this doesn’t override your own rights. We ask for your separate, freely-given choice before any processing that isn’t necessary to provide the service itself, such as optional product analytics.

5. Who we share it with

• Google Gemini, the AI service we use to perform the analysis or generation you request (Google acts as our data processor for this)
• Firebase (Google), to run our app’s sign-in, storage and database
• RevenueCat, to process purchases

We do not sell your data, and we never share your CV or job description with employers or any other candidate.

6. Product analytics

We use Firebase Analytics, a service provided by Google, to understand how the app is used — which features are helpful, where people run into trouble, and how well technical processes complete. This is optional and off until you allow it.

What we collect. When you allow product analytics, we send a small number of fixed, named events (for example, that a particular screen was shown, or that a document finished generating) along with a closed set of category values (for example, "cover letter" or "cv" as a document type, or a short error-category code). We never include the content of your CV, job description, cover letter, or generated documents; your account, application, or document identifiers; or any other free-text or personal content in these events.

Device and installation identifiers. Core parts of the app — such as verifying the app installation itself for security purposes — use a per-installation identifier regardless of your analytics choice; this supports app functionality and isn't tied to your analytics decision. Separately, when you allow analytics, Firebase Analytics assigns its own analytics identifier to associate the events you've consented to for measurement purposes. We don't set an analytics user ID or any custom analytics user properties, and we don't deliberately link analytics events to your account identity.

Purchases. If you make a purchase through Google Play, Firebase Analytics may automatically record that a purchase or new subscription happened, including limited context such as the product, its price, currency, and subscription status. This is separate from our own Complimentary Pack telemetry, which never includes transaction identifiers or purchase amounts — but it does mean Firebase Analytics itself can contain limited purchase information, which we don't suppress.

Approximate location. We don't collect precise or city-level location. Firebase Analytics can still infer a coarse country/region from your network connection, even with this granular collection setting off.

What we don't do. We don't collect your advertising ID, use Google Signals, allow ads personalisation, or automatically report every app screen you visit as a named "page view." We don't link this data to Google Ads, Display & Video 360, Search Ads 360, Merchant Center, Search Console, or BigQuery — no such integrations exist on our analytics account. Firebase's enhanced audience-sharing feature (Enhanced Audience Integration) is also off.

Retention. Analytics event and user data are kept for 2 months, after which they're automatically deleted; we don't extend this on new activity. Standard aggregate reports derived from Analytics data may remain available separately and are not governed by the same raw event and user-data retention expiry.

Your choice. You can decline or allow this at any time from Privacy settings, without any effect on the app's core functionality — uploading, generating documents, purchasing, and account features all work the same either way. If you withdraw consent, we stop sending future analytics events; this doesn't retroactively delete events already sent to Google. Your choice is tied to this installation of the app — clearing the app's data or reinstalling resets it, and you'll be asked again.

Who processes this data. Google, as our analytics service provider, processes this data on our behalf under its standard terms for Firebase Analytics.

7. About our AI provider

We use Google Gemini — Google’s paid Gemini API service — to analyse your CV and generate documents. Google handles the CV and job-description text and the results as our data processor, under Google’s data-processing terms, and does not use this content to train or improve its own models or products. Google may keep it for a limited period to detect and prevent misuse of the service.

8. Sending data outside your country

Google, and some of our other providers, may process your data in countries outside the UK and the EEA, including the United States. Where that happens, the transfer is covered by standard data-protection safeguards — such as the UK and EU Standard Contractual Clauses — in our agreements with those providers.

9. How long we keep it

If you use the app as a guest without creating an account, your CV, job description, results and the guest session itself are automatically deleted from our systems about 72 hours after the guest session is created. Removing the app from your device does not delete them — that deletion happens on our backend, on a schedule, so it can take a little longer than 72 hours. If a piece of processing fails or doesn’t finish, anything we stored for it is removed within about 24 hours.

If you create an account, we move your guest work to it, and we keep your data until you delete it, delete your account, or ask us to — unless we have to keep something to meet a legal obligation. Deleting your account removes your applications, documents and analysis history. If you have made a purchase, we keep a record of that transaction, with identifying details removed where we can, for as long as we need it for accounting, tax or legal reasons.

10. Your rights

You can access, correct or delete your data, and you can delete your account and its data at any time from My Applications. For privacy questions or requests — including access, correction or deletion — contact valeonlabs@proton.me.

11. AI accuracy

Our analysis and generated documents are produced by AI and can be wrong or incomplete — always review them yourself before relying on them. We don’t guarantee that using this app will lead to an interview, a job offer, or any particular ATS outcome.

12. Sensitive information

Please avoid including details you don’t need to, such as health information or religious beliefs, in your CV or job description unless it’s genuinely relevant to your application.

13. Questions or complaints

For privacy questions or requests — including access, correction or deletion — contact valeonlabs@proton.me. If you’re in the UK or EEA, you also have the right to complain to your local data protection regulator.