Privacy Policy
This policy explains what personal data Careeah collects, why we collect it, who we share it with, and what you can ask us to do with it. We have tried to write it in plain language rather than legal boilerplate.
Who we are
Careeah is operated from the United Kingdom by the sole trader trading as Careeah. You can contact us at support@careeah.com, and we will provide our full details on request. We are the data controller for the personal data described below.
What we collect
Account information
When you create an account we store your email address, your name, the sign-in method you used (Google, Apple or email and password), and your profile picture if your sign-in provider supplies one. Passwords for email sign-in are handled by Firebase Authentication and are never visible to us.
Your career profile
Careeah only works if it knows about you, so the profile you build is the bulk of what we hold:
- Work experience, including employers, job titles, dates and what you did
- Education, qualifications, grades and fields of study
- Projects, skills, technologies, languages and certifications
- The roles you are targeting, your seniority, and your salary expectations
- Where you can work, whether you want remote work, and whether you need visa sponsorship
- Any CV or resume you upload, and the information we extract from it to fill in your profile
How you use the product
We store your saved searches and search groups, the jobs you bookmark or mark as applied, and any tailored resumes or cover letters generated for you.
Technical information
We record standard technical data needed to run and secure the service, including a device identifier, IP address, browser type, and log records of errors and requests.
How we use it
- To score jobs against your profile and explain why each score was given
- To run your saved searches and build your job feed
- To generate tailored application documents when you ask for them
- To operate, secure, debug and improve the service
- To contact you about your account or material changes to the service
Our lawful basis is performance of our contract with you for everything needed to provide the service, and legitimate interests for security, debugging and product improvement. Where we rely on consent, you can withdraw it at any time.
Automated processing and AI
Match Scores are produced automatically. To generate them, job descriptions and the relevant parts of your profile are sent to a large language model provider that processes them on our behalf and returns a score with its reasoning. We do not use your data to train third party models.
A Match Score is a suggestion to help you prioritise your reading. It does not decide anything about you, is not shared with employers, and has no legal or similarly significant effect on you.
Who we share it with
We do not sell your personal data and we do not share your profile with employers or recruiters. We use the following processors to run the service:
- Google (Firebase Authentication, Cloud Firestore, Firebase Hosting and Google Cloud) for accounts, storage, and hosting
- OpenRouter, and the model providers it routes requests to, for the language model processing described above
We may also disclose data if we are legally required to, or to establish or defend legal claims.
International transfers
Our providers may process data outside the UK and the European Economic Area. Where they do, the transfer is covered by an adequacy decision or by standard contractual clauses.
How long we keep it
We keep your account and profile data for as long as your account exists. If you delete your account we delete your profile, CV files and saved searches within 30 days, except where we must keep something to meet a legal obligation. Technical logs are kept for a shorter period.
Your rights
If you are in the UK or the EEA, you have the right to access your data, correct it, delete it, export it, restrict or object to how we process it, and withdraw consent where we relied on it. To exercise any of these, email support@careeah.com.
If you think we have handled your data badly you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local supervisory authority in the EEA. We would rather you told us first so we can put it right.
Security
Data is encrypted in transit and at rest by our infrastructure providers, and access to production data is limited to those who need it. No service can promise perfect security, but we take this seriously and will tell you promptly if a breach affects your data.
Cookies and local storage
We use local storage and cookies to keep you signed in and to cache data so the app is fast. We do not use advertising cookies or third party tracking pixels.
Children
Careeah is not intended for anyone under 18. We do not knowingly collect data from children.
Changes to this policy
If we change this policy we will update the date at the top, and we will tell you directly if the change materially affects your rights.