Who we are
Hiredeck (“Hiredeck”, “we”, “us”) is operated by Fernix LLC, 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, USA. For any privacy question or request, contact furkankar6@icloud.com. We are the data controller for the information described below.
What we collect
We collect what the product needs to build and send an application for you, plus a narrow set of usage events that tell us which parts of the app work and which do not. There is no advertising SDK, no ad tracking and no tracking of you across other apps or sites, and no session recording — nobody replays your screen.
Information you give us
- Account and contact details — your name, email address, and phone number. These are placed on the applications we submit, which is why the phone field is labelled “for applications”.
- Your résumé — the PDF or DOCX file you upload, and the plain text we extract from it. This is the core input to every document we generate; without it, drafting fails and we tell you so.
- Work history — the role, company, location, and dates for each position you add or edit.
- Onboarding answers — your goal, the obstacles you selected, your weekly application target, your timeline, and your motivation. These shape which jobs are ranked first and the tone of the documents we write.
- Job filter — the role and location you search for.
Information created as you use the app
- Swipe and application activity — which jobs you applied to, passed on, or saved, and the status and history of each application.
- Credit balance and purchases — how many application credits you hold and which packs you bought.
- Referral codes — your own code and, if you used one, the code that referred you.
- Preferences — language, and whether applications are submitted automatically or held for your review.
Usage analytics
We use PostHog to see how the app is actually used. The events are named one by one in the app’s source rather than captured automatically: which onboarding step you reached, when an account was created, whether a swipe was an apply or a pass, when the credits screen was shown, dismissed or bought from, and when a submission ran out of credits. Each event carries values of that kind — a step name, a direction, a product identifier, a count.
What analytics never receives: your résumé or the text extracted from it, your work history, the documents we generate, your answers to an employer’s questions, which jobs or employers you applied to, or your name, email address and phone number. Those stay in the systems that need them to send an application.
Events are attached to a pseudonymous account identifier — the same internal id your account already uses, not your email — and are sent alongside your device model and name as your phone reports it, your operating system and app version, your language and time zone, and standard app-lifecycle events (installed, updated, opened, backgrounded). PostHog also derives an approximate location from your IP address — country and region, not a precise position. Purchases are reported once more from our server at the moment credits are granted, so revenue is counted by the code that grants it rather than by your device.
Sign in with Apple
If you sign in with Apple, we receive the identifier Apple issues for you and, if you allow it, your name and email address. If you choose Apple’s Hide My Email, we only ever see the relay address — we never receive your real one. We do not receive your Apple password or payment details.
Why we use it, and on what legal basis
| Purpose | Data used | Legal basis (UK/EU GDPR) |
|---|---|---|
| Creating and submitting applications on your behalf | Name, email, phone, résumé, work history, form answers | Performance of a contract |
| Generating a tailored résumé and cover letter for a specific job | Résumé text, work history, onboarding answers, the job description | Performance of a contract |
| Ranking and filtering the jobs you see | Job filter, goal, timeline, swipe history | Performance of a contract |
| Taking payment and crediting your balance | Purchase events, credit balance | Performance of a contract |
| Keeping the service working, secure, and free of abuse | Account identifiers, application status, rate-limit counters | Legitimate interests |
| Understanding how the app is used, so we can improve it | Pseudonymous account identifier, in-app events, screen names, device and app information, approximate location from IP | Legitimate interests |
The disclosure that matters most: employers
The purpose of Hiredeck is to submit real applications, so the information you would put on an application is sent to the employer — your name, email, phone number, the résumé and cover letter generated for that role, and your answers to that employer’s form questions.
Applications are submitted through the employer’s own applicant tracking system: Greenhouse, Lever, or Ashby. Once an application reaches an employer, that employer is an independent controller of it and their own privacy policy and retention rules apply. We cannot withdraw, edit, or delete an application after it has been submitted — please treat every approval as final.
By default the app holds each draft in your Review tab and sends nothing until you approve it. If you switch on automatic submission in Settings, applications are sent without a per-application review step. You can switch back at any time.
Service providers we use
We do not sell personal data and we do not share it for advertising. We use a small number of providers to run the service, each bound to process data only on our instructions:
| Provider | What it does | What it sees |
|---|---|---|
| Convex | Database, file storage, and application logic | All account data and your uploaded résumé file |
| OpenRouter, which routes to Anthropic (Claude) | Writes the tailored résumé and cover letter | Your résumé text, work history, onboarding answers, and the job description |
| Railway | Hosts the service that fills and submits employer forms | The data needed for the application it is submitting |
| RevenueCat | Validates in-app purchases | Purchase events and a pseudonymous user identifier — never your résumé |
| PostHog | Product analytics — which screens and steps get used | A pseudonymous account identifier, the in-app events described above, device and app information, and your IP address — never your résumé, your documents, or your contact details |
| Apple | Sign in with Apple, and App Store payment | Authentication and payment data; Apple, not us, processes your card |
We may also disclose information where the law requires it, or to establish or defend legal claims.
Automated processing
Hiredeck uses automated systems to rank the jobs in your deck and to write your application documents. These decisions do not produce legal or similarly significant effects on you: they affect the order of the cards you see and the wording of drafts you can read and edit before approving. Hiring decisions are made by employers, not by us.
International transfers
Our providers are located in the United States, so your data is transferred and processed there. Where you are in the UK or EEA, these transfers rely on the European Commission’s Standard Contractual Clauses or an equivalent approved safeguard. Employers you apply to may be located anywhere; you choose which jobs to apply to.
How long we keep it
- Account data, résumé, and application history — kept while your account is open, so your tracker and documents stay available.
- On deletion — removed from our live systems without undue delay, and from routine backups within 30 days.
- Purchase records — retained as long as tax and accounting law requires, even after account deletion.
- Usage analytics — retained by PostHog for up to seven years. These records contain no résumé, document, or contact data and are keyed to a pseudonymous identifier rather than to your name or email. Deleting your account removes your account data from our systems; write to furkankar6@icloud.com if you want the analytics records deleted too and we will remove them.
- Applications already submitted — cannot be recalled from the employer; see above.
Your rights, and the buttons that exercise them
You can access, correct, export, delete, restrict, or object to our processing of your data, and withdraw consent where we rely on it. Two of these are built into the app:
- Settings → Download my data exports the information we hold about you.
- Settings → Delete account deletes your account and its data.
You can also edit your name, email, phone, work history, and résumé directly in Profile at any time. For anything else, contact furkankar6@icloud.com and we will respond within 30 days. If you are in the UK or EEA and believe we have handled your data improperly, you may complain to your local supervisory authority.
Children
Hiredeck is not intended for anyone under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
Security
Data is encrypted in transit and at rest by our providers. Authentication tokens are stored in your device’s secure keychain rather than in ordinary app storage. Access to production data is limited to those who need it to operate the service. No system is perfectly secure, and we cannot guarantee absolute security.
Changes
If we make a material change to this policy, we will update the date above and notify you in the app before the change takes effect.