Privacy policy

1. Data controller

The Ipplied app, in both its iOS and Android versions, and the site ipplied.app are published by a sole trader (SIRET 102 406 410 00013), acting as data controller within the meaning of Regulation (EU) 2016/679 (GDPR).

Responsible: Guilyan d’Eurveilher
Contact: contact@ipplied.app

2. The principle

Unless stated otherwise, everything that follows holds identically on iPhone and on Android; the few places where the two systems differ are flagged where they occur.

3. What you type, and where it lives

Applications, companies, roles, pay, locations, contacts, notes, events, tags and attachments are stored in the app’s private storage area, on your device. On iOS as on Android, that area is encrypted by the system as soon as the phone is protected by a passcode — the device encryption does that, not the app.

In practice:

• this data is never transmitted to the publisher or to a third party;
• there is no synchronisation — no account, no iCloud, no Google Drive, no remote backup managed by the app;
• it is included in the backups you make of your phone yourself — iCloud or Finder on iPhone, Google’s automatic backup on Android — like the rest of the device, and under Apple’s or Google’s responsibility as the case may be;
• uninstalling the app erases it permanently — hence the export function.

You can export all of your data (JSON or CSV) at any time from the app’s settings, and import it on another device — including from an iPhone to an Android, or the other way round: the format is the same. The file produced is yours: it is handed to the system share sheet, towards the destination you choose.

4. The permissions the app asks for

None is requested at launch. Each one is requested only when you turn on the matching feature, and the app stays usable if you refuse them all. On Android, the camera, the microphone, video, precise location and drawing over other apps are explicitly removed from the manifest, even though libraries add them of their own accord.

5. The four network accesses

These are the only ones in the app, and none of them transmits the content of your applications.

What cannot be switched off: usage measurement cannot be disabled. There is no switch in the settings. It carries no personal data — five event names and a few counters, attached to a randomly drawn identifier never derived from you, which section 6 establishes line by line. Uninstalling the app stops it immediately.

What can be switched off, on the other hand: the first three accesses — logo, ad reading, company record — are gathered under a single switch, under Settings → Privacy → “Look things up online”. Closed, no request goes to those three recipients: thumbnails give way to the company initial, a pasted link no longer fills the fields by itself, and the register card stays empty. On iPhone, an ad shared from Safari is still read: it is read on the device, inside the already-open page, and nothing goes out.

These three accesses also depend on your actions: an ad is read only if you bring its link, a logo is looked up only from the company name you have just typed, and the register record is requested only when an application is opened. Turning off mobile data or Wi-Fi prevents all four: usage signals then wait for the network to come back, or are lost without consequence.

Legal basis: the legitimate interest in showing a readable interface, in avoiding double entry, and in knowing how many people use the app, from which systems and in which languages. Since usage measurement does not involve personal data, it does not rest on your consent — there is no consent to ask for data that identifies nobody.

6. Audience measurement, in detail

This section is written from the code: the complete list of the five events fits in a single file, and the compiler refuses anything not in it.

Who you are, to this service. A number drawn at random the first time you open the app, kept on the device, then hashed (SHA-256, with a salt) before every send. It is derived from nothing: not your name, not your device, not your data. It does not allow you to be recognised from one app to another, nor traced back to you. Uninstalling and reinstalling Ipplied produces a new one, unconnected to the previous one.

What is sent — the whole list, there is nothing else:

• Five events, which are bare names: each start of the app, the start of a session — sent under two names, one of them the name the measurement tool expects —, the detection of a first install, and the fact that the onboarding journey reached its end. Nothing is attached to those names — what you answered during onboarding does not leave, only that it is finished.
• The session counters that follow from them, computed on your device: number of sessions, number of distinct days of use, average session length, date of the first one.
• The technical context: the Ipplied version, the system (iOS or Android) and its version, your phone’s language (“fr”, “tr” — the language, not the region), the hour and the day of the week.

What is never sent. Everything else. The function that emits a signal accepts no data: it takes an event name, and nothing more. No role, no company, no city, no amount, no address, no link, no file name, no note, no contact, no first name — nor any screen viewed, application status, rejection reason, abandoned journey, job platform or incident.

What the service receives on top, despite us: your IP address, like any server one contacts. TelemetryDeck uses it to derive a country, then does not keep it — neither in its database nor in its logs. We never have access to it. Its own privacy policy describes this, and it acts as a processor on our behalf.

The framework, in legal terms. Purposes: measuring the app’s audience — how many people use it, from which systems and in which languages, and how often they come back — in order to decide what deserves to be written next (one more translation, keeping support for an older system version). Legal basis: the legitimate interest (art. 6(1)(f) GDPR) in ensuring the app works well and improves. Processor: TelemetryDeck, a company established in the European Union, data hosted in the EU.

Pseudonymous, not anonymous. The identifier described above is drawn at random then hashed: it allows neither naming you nor recognising you elsewhere. But under the GDPR, data attached to a stable identifier, however random, remains pseudonymous. Section 12 says what that changes for your rights.

7. What the app does not do

• No account: no sign-up, no username, no password.
• No tracking, and no content measurement: the measurement described in section 6 does not follow a person, cross-references nothing with other apps or sites, and carries nothing of what you type or of what you do in the app. No automatic crash report is sent: the message and the stack of an error stay on the device, behind a “Copy” button that only you press.
• No artificial intelligence: nothing you write is sent to a language model. What the app “guesses” — the time in “Interview at 2:30pm”, a salary in a block of text, a role in an ad title — comes from rules written by hand, running on the device.
• No advertising, no advertising identifier, no social network. The iOS privacy manifest declares NSPrivacyTracking = false, no tracking domain, and the only data category declared is product interaction, not linked to your identity, for analytics use. The Google Play “Data safety” form says the same thing, in its own terms.
• No resale: not to an advertiser, not to a commercial partner, not to a data broker. Apart from the strictly necessary technical providers named on this page — Apple and Google for distribution, TelemetryDeck for measurement, Cloudflare and Resend for the feedback form alone — nothing that reaches us is shared with anyone.

8. The two stores

Ipplied is distributed by Apple’s App Store and by Google Play. These two companies are not our processors: they act on their own behalf, as controllers, for everything to do with your account with them. We have no control over what they collect on that occasion.

What we receive from them is limited to aggregated statistics — number of downloads, countries, system version, public ratings and reviews. They identify nobody and cross-reference with nothing described in section 6.

The terms of use for the app are those of the store that supplied it to you. Section 5 of the legal notice names them and gives both links.

9. The ipplied.app site

The site uses no audience measurement tool and sets no cookie for that purpose — nor for any other. Typefaces are hosted on the site itself rather than fetched from a provider, so that viewing a page transmits your IP address to nobody but the host.

One single page is an exception, and one single third-party resource exists across the whole site: “Your feedback” loads Cloudflare’s anti-robot check, without which the form would be swamped by automated messages. Section 10 describes it. Everywhere else, no page calls anything outside the domain.

The site carries an outgoing link to Buy Me a Coffee. As long as you do not follow it, it loads nothing and transmits nothing: it is a link, not a component. Following it does take you to a third-party service, subject to its own privacy policy.

The host keeps technical connection logs (IP address, timestamp, page requested) for security and for the proper running of the service. Those logs are not used by the publisher for analytics.

The Your feedback form is the only place on the site where anything is transmitted to us. The next section is entirely devoted to it.

10. The “Your feedback” form

It is the only place in the whole product where you transmit something to us.

What is collected: the type of feedback (a comment, a bug, an idea), the message you write, your email address if you provide it, and a screenshot if you attach one. Nothing else. In particular, nothing is taken from the app: this form lives on the site, it has no access to your applications.

Image metadata is stripped before storage — Exif data, and in particular the GPS coordinates your device may have written into the file. The stripping is done by our server on receipt; the original image is never kept.

Purpose: reading your feedback, fixing what needs fixing, and replying to you if you left an address. Legal basis: your explicit consent for the email address — that is what the checkbox is for, and it is required as soon as the field is filled in — and the legitimate interest in improving the app for the feedback itself, which may perfectly well arrive without an address.

Recipients: the publisher, and nobody else. Two technical providers act on our behalf and make no use of their own: Cloudflare, which receives and stores the feedback, and Resend, which sends the notification telling us a message has arrived. Messages and screenshots are stored in Western Europe, and the notification leaves from infrastructure established in Ireland. No mailing list, no statistics, no transfer to a commercial third party.

The anti-robot check. The page loads Cloudflare Turnstile, which tells a visitor from a script. It is the site’s only third-party resource, and it is present only on that page. It is not used for advertising targeting and does not follow your browsing from one site to another; any technical marker it might set is strictly necessary to that check, and is exempt from consent on that basis.

Your IP address is read for as long as it takes to rate-limit abusive sending, then forgotten. It is never stored with your message: no IP address is kept beyond that anti-spam protection.

Retention: twelve months at most, message, address and screenshot included, then automatic deletion. You can have it erased before that term, at any time, by writing to contact@ipplied.app.

11. Retention periods

Of your applications, we keep nothing — for want of receiving them. They stay on your device for as long as you keep them there, and disappear when you delete a record or uninstall the app.

Three things are exceptions, and their durations have nothing to do with each other:

• the feedback form messages — message, address and screenshot included: twelve months at most, then automatic deletion. Section 10 details the processing;
• the site host’s technical connection logs, kept for a short period under its own policy;
• the usage signals of section 6, kept by TelemetryDeck in the European Union under its own policy.

12. Your rights

The GDPR gives you a right of access, rectification, erasure, restriction, objection and portability. Exercising them takes an unusual form here, and that is a direct consequence of the architecture described above:

• Access and portability: immediate and without writing to us — the JSON or CSV export in the settings gives you all of your data, in an open format.
• Rectification and erasure: everything can be edited and deleted from the app. “Erase everything” empties the device.
• Objection: the first three network accesses in section 5 can be switched off in one gesture, under Settings → Privacy → “Look things up online”; turning off mobile data or Wi-Fi prevents them as well, and the fourth with them. Usage measurement, however, cannot be disabled: it carries no personal data.
• Access to and erasure of the usage measurement: out of our reach in practice. The identifier is drawn at random then hashed: we can neither find your signals nor establish that they are yours, unless you tell us that identifier yourself — and the app displays it nowhere. Searching for you in that data would require us to re-identify you; article 11 GDPR provides for this case. Uninstalling the app stops the measurement immediately.

For the feedback form, however, none of this applies: your message is easily found there as soon as you left an address. Write to contact@ipplied.app to obtain a copy, a correction or its deletion — attached screenshot included. The same goes for anything you may have sent us by plain email. We reply within one month.

You may also lodge a complaint with the French CNIL, or with the data protection authority of your country of residence.

13. Minors

Ipplied is not intended for children under 13 and asks them for no data — it asks nobody for any.

14. Changes

This policy may change if the app changes. Any substantial change — in particular the addition of a network access — is dated at the top of the page and described in the app’s release notes.

15 September 2026 — added the usage measurement (section 6), the first network access Ipplied opens on its own account, and the company public record (section 5), with the single switch that closes the three third-party accesses.

22 September 2026 — added the share sheet (section 4). It is not a network access: from Safari, the job ad is read inside the already-open page, on the device.

29 September 2026 — the usage measurement of section 6 goes from forty-eight events to five, and the function that emits them no longer accepts any data to attach. The policy is also extended to Android and translated into eight languages: section 8 on the two stores is new, and the differences between the two systems are flagged in sections 3, 4 and 5.

15. Contact

For any question about this policy:
contact@ipplied.app