Privacy policy

Last updated 2026. This policy explains how Armaan Punia ("we") handles personal data in applyrn, under India's Digital Personal Data Protection Act, 2023 and the rules made under it. We are the data fiduciary.

What we collect

• From Google sign-in: your email address and name. We do not ask for access to your Gmail.
• What you give us: your resume (file and text), the profile you confirm, your job preferences, sources you add, jobs you paste or forward to our Telegram bot, email drafts and their status, support tickets.
• What the app records: jobs matched to you and what you did with them, your plan and usage counts, payment references you submit (UPI reference number and amount), and security logs (a one-way hash of your IP address, never the address itself).

Why we use it

• To find jobs you're eligible for and explain why they fit.
• To draft emails you choose to send from your own Gmail. We never send email for you.
• To send the alerts you asked for (Telegram, in-app), run your plan and support you.
• To keep the service safe (rate limits, abuse prevention) and to fix errors.

We rely on your consent, given when you create your account. You can withdraw it at any time by deleting your account.

AI processing

If you allow it, an AI model reads your profile to tailor email drafts and to answer help questions. Your phone number, email address, postal address and links are removed before anything is sent to an AI provider, and personal data only goes to providers that do not train on it. AI output that adds a fact, number or contact you did not give us is discarded. You can switch AI off; templates are used instead.

Who processes your data for us

• Supabase (database, sign-in, resume storage)
• Google Cloud (application servers) and Google Gemini (AI, paid tier)
• Cloudflare (website hosting, bot check, and forwarding email sent to our @applyrn.com addresses)
• Sentry (error reports, with personal data removed)
• Telegram (only if you connect the bot: the messages we send you)

Some of these providers may process data outside India. We do not sell personal data or share it for advertising.

How long we keep it

For as long as your account exists. When you delete your account, your profile, resumes, matches, drafts, tickets and connections are deleted at once; encrypted backups are overwritten within 30 days. Security logs are kept for 30 days. We keep a minimal record of payments (amount, date, UPI reference, no name or email) because accounting law requires it.

Your rights

• Access and download: Settings, Privacy center, Download my data gives you everything we hold, as a file.
• Correction: edit your profile and preferences any time.
• Erasure: Settings, Privacy center, Delete my account.
• See who looked: if an administrator ever opens your content (for example to answer your support ticket), you see it in your activity log with the reason.
• Nominate someone to exercise these rights for you, and complain to the Data Protection Board of India if we don't resolve a grievance.

Grievance officer

Armaan Punia, [email protected], 659 Sector-38 Gurugram, Haryana, India. We acknowledge grievances the same day and resolve them as quickly as we can, within the time the law sets.

Children

applyrn is for people aged 18 and over. We don't knowingly collect data from children.

Changes

If we change this policy in a way that matters, we'll tell you in the app before the change applies.