Privacy Policy
Effective November 14, 2026
- Your resume, job preferences and applications are saved in your account, so they're the same on iPhone and the web. Only your account can read them.
- Your account holds your email, your plan and how many times you used each feature this month.
- To read and tailor your resume, it's sent to Anthropic's Claude AI through our server, only after you agree.
- Payments go through Apple or Stripe. We never see your card details.
- No ads, no tracking, no selling of data. You can delete your account at any time in the app.
Who we are
ApplyLoom is operated by Vlai, California, United States ("we"). We are the controller of the personal data described here. You can reach our data protection officer (Encarregado) at privacy@applyloom.app.
What we use, why, and on what legal basis
| Data | Why | Legal basis |
|---|---|---|
| Your email address, or the identifier and email that Sign in with Apple shares | To sign you in and keep your plan working on iPhone and the web | Contract (LGPD art. 7, V; GDPR art. 6(1)(b)) |
| If you sign in with Apple, a token from Apple | Only to revoke ApplyLoom's access to your Apple ID when you delete your account, as Apple requires | Legal obligation and contract |
| How many resumes you had read, job searches and tailored applications this month | To apply the Free and Pro limits | Contract |
| Whether you have an active Pro subscription | To unlock Pro features | Contract |
| Your resume and the job postings you choose to tailor (with Pro, also your top 3 search results if you switch on automatic preparation) | To read your resume and write tailored resumes and cover letters with Anthropic's Claude AI. Our server keeps what it sends to Claude only in memory, for 10 minutes (see below); your saved copy is in your account (next row). | Your consent, given in the app (LGPD art. 7, I; GDPR art. 6(1)(a)) |
| Your resume, the jobs you want, your settings and your applications (tailored resumes, cover letters, job postings, the status you set and its dates) | To keep them the same on every device you sign in to | Contract |
| Your job searches (job title, location, country) | To find listings through JSearch | Contract |
| When you tap Send application: the employer's address from the job posting, your tailored resume (PDF), cover letter, name and email | To email your application to that employer for you, with a copy to you and replies going to you. We don't keep it on our servers. | Contract |
| Technical data such as IP address and request times | Security and preventing abuse | Legitimate interest (LGPD art. 7, IX; GDPR art. 6(1)(f)) |
What's saved in your account and on your device
Your resume details, the jobs you want, jobs you paste in or save, your applications (tailored resumes, cover letters, job postings, the status you set, and when you prepared, applied and followed up), the jobs you hid and your resume style are saved in your account with Supabase, so they're the same on every device you sign in to. Each device also keeps a copy, so the app works offline. Your latest job search results, your consent choice and your sign-in session stay on the device only. On the device, this is the iPhone app's local database, or your browser's local storage on the web. We use this storage only to make the app work, not for tracking, and we don't use advertising or analytics cookies.
Who processes data for us
- Supabase stores your account, your monthly usage counts, and your saved resume, settings and applications.
- Anthropic (United States) runs the Claude AI that reads your resume and writes tailored resumes and cover letters.
- JSearch, by OpenWeb Ninja (directly, or through RapidAPI as a backup), supplies job listings for your searches.
- Resend (United States) delivers the applications you ask ApplyLoom to email to an employer.
- RevenueCat (United States) keeps track of your subscription status.
- Apple (App Store) and Stripe (web) process payments under their own privacy policies. We never receive your card details.
- Render (United States) runs our server and website, and may keep standard technical logs.
When you finish an application on a company's website inside the app, ApplyLoom fills in that form on your device; it doesn't pass through our server, and the company's own privacy policy covers what you submit to it.
Our server passes your resume and searches along to Claude and JSearch and does not save them itself (your saved resume and applications are in your account, as described above). Anthropic may keep what it receives for a limited time for safety and abuse monitoring, and doesn’t use it to train its models. To save repeat lookups, job listings for a search are kept in memory for up to 6 hours, and AI results are kept in memory for 10 minutes so a retry doesn’t use another application. See Anthropic's privacy policy for how Anthropic handles data.
International transfers
Some of these providers process data in the United States and other countries. When your data leaves Brazil or the European Economic Area, we rely on safeguards permitted by law, such as standard contractual clauses (LGPD art. 33; GDPR Chapter V).
How long we keep data
- Your account is kept until you delete your account.
- Your resume, settings and applications in your account are kept until you remove them in the app or delete your account. When you remove an application, only its job listing's ID is kept, so your other devices remove it too.
- Usage counts are stored under a one-way hash of your email, not your name or email itself. Only the current month's counts are kept; older months are deleted automatically. When you delete your account, the current month's counts stay until the month ends, so a new account can't restart the free plan.
- Backups you make in Profile › Your data are files saved wherever you choose (for example Files or iCloud Drive). They contain your applications; we never receive them.
- Data on your device stays until you delete your account, delete the app or clear your browser's site data. Signing out on the web removes it too. On iPhone it stays for when you sign back in, and is removed first if a different account signs in on that iPhone.
- Payment providers keep transaction records for as long as the law requires.
Camera and photos
The camera is used only when you choose to photograph a paper resume. The photo is sent for reading as described above and is not saved to your photo library.
Applying and sharing
ApplyLoom never sends an application for you. If a job takes applications by email, Apply by email opens your own email app with the message ready, and nothing is sent until you tap Send. Otherwise, Apply copies your cover letter to your clipboard and opens the employer's or job board's website, where their privacy policy applies. When you save or share a PDF, you choose where it goes.
Your rights
Under Brazil's LGPD (art. 18), the GDPR and similar laws, you can ask us to confirm whether we process your data; access it; correct it; delete it; port it; learn who we share it with; and withdraw your consent. You can also object to processing based on legitimate interest. Withdrawing consent doesn't affect processing that already happened. If you live in California, you can likewise ask to know, correct and delete your personal information, and we won't treat you differently for asking.
- Correct: use Your profile in the app, or contact us.
- Delete: use Delete account in Profile › Account (see below).
- Anything else: email privacy@applyloom.app. We answer within the deadlines the law sets.
ApplyLoom doesn't make decisions about you. The AI writes text that you review before you send anything. You can complain to Brazil's data protection authority (ANPD) or to your local supervisory authority.
Deleting your account
Delete account permanently deletes your account and your subscription record with RevenueCat, removes past usage records (this month’s count stays until it resets), revokes ApplyLoom's access to your Apple ID if you signed in with Apple, deletes the resume and applications saved in your account, and clears ApplyLoom's data from that device. Deleting your account doesn't cancel a subscription billed by Apple: cancel it in Settings › Apple ID › Subscriptions. For a subscription bought on the web, use Manage subscription before deleting. To clear the app from other devices, sign out there or delete the app.
What we don't do
- We don't sell or rent your data, and we don't "sell" or "share" personal information as California law (CCPA) defines those words.
- We don't show ads or use advertising or analytics trackers. We don't track you across other sites or apps, so "Do Not Track" and Global Privacy Control signals have nothing to turn off: everyone gets the same no-tracking treatment.
- We don't use your data to train AI models.
Children
ApplyLoom is meant for people looking for work and is not directed at children under 13. Where the law requires it, people under 18 need a parent's or guardian's permission to use ApplyLoom.
Security
All connections are encrypted (HTTPS). Our API keys and database access stay on our server, never in the app, and each request must come from a signed-in user.
Changes
If we change this policy, we'll update the date at the top. For important changes, we'll also tell you in the app.
Contact
Questions about privacy: privacy@applyloom.app