Privacy Policy
Last updated: this page describes what the app does as of today. Replace this line with a real date when you publish it, and have it reviewed before relying on it for Google’s OAuth verification.
What we collect
- From Google sign-in: your name, email address, and profile picture.
- From Gmail (read-only access, never write or send): the sender, recipient, subject, and a short preview snippet of messages on threads we detect as job applications, plus the same for any later replies on those threads — used only to start a timer and tell you when it should reset. We do not read your full email body or anything outside threads matched this way.
- What you enter directly: timer titles, job posting URLs, status, and notification preferences.
- If you enable push notifications: a browser-issued push subscription (an endpoint and keys) needed to deliver them.
How it’s stored
Your Gmail access tokens are encrypted at rest and only ever decrypted server-side to make an authenticated request to the Gmail API on your behalf. Everything else lives in our database behind the same authentication that protects your account.
Who else sees it
We don’t sell or share your data, and there’s no advertising or tracking in this app. A small number of infrastructure providers process data on our behalf to make the app work: Google (authentication and Gmail access), our database host, and, if you have email notifications enabled, our transactional email provider. None of them use your data for their own purposes.
Your choices
You can delete any individual timer at any time from its detail page — that removes it and its notification history immediately. Self-service full account deletion isn’t built yet; to delete your account and all associated data, contact [add a contact email].