Privacy Policy
Last updated: July 14, 2026
This privacy policy explains what personal data Aplyfy ("we", "us") collects when you use aplyfy.com and the Aplyfy application, why we collect it, and what rights you have. We process personal data in accordance with the EU General Data Protection Regulation (GDPR).
1. Controller
The controller responsible for data processing on this website and in the Aplyfy application is: Aplyfy Email: support@aplyfy.com If you have any questions about this policy or your personal data, contact us at the address above.
2. Data we collect
Account data: name, email address and authentication identifiers when you create an account. Profile and CV data: the CV you upload and the profile information extracted from it or entered by you, such as work history, education, skills, certifications, links and contact details. Job application data: job descriptions you paste, the tailored CVs, cover letters and application emails generated for you, your chosen templates, and the application statuses you track. Usage data: features used, documents generated, processing volume, and technical logs (IP address, browser type, timestamps) needed to operate and secure the service.
3. Purposes and legal bases
We process your data to provide the service: parsing your CV, tailoring documents to job descriptions, generating PDFs and tracking applications (Art. 6(1)(b) GDPR, performance of a contract). We process technical and usage data to secure, maintain and improve the service (Art. 6(1)(f) GDPR, legitimate interest). Where we rely on your consent for optional processing, you can withdraw it at any time with effect for the future (Art. 6(1)(a) GDPR).
4. Automated document generation
To tailor your documents, the relevant parts of your profile and the job description you provide are sent to Google's Gemini API (Google Cloud) for processing. The output is returned to us and stored in your account as your draft documents. We do not use your personal data to train our own or third-party machine-learning models. API traffic to Google Cloud is covered by Google's data processing terms.
5. Hosting and storage
Aplyfy runs on Google Cloud Platform and Firebase (Google Ireland Limited). Application data is stored in the region europe-west1 (Belgium, EU). Uploaded files and generated PDFs are stored in Firebase Storage; structured data is stored in Cloud Firestore. Data is encrypted in transit (TLS) and at rest.
6. Sharing of data
We do not sell your personal data. We share data only with processors necessary to operate the service, in particular Google Cloud / Firebase (hosting, storage, authentication) and the Google Gemini API (document generation), under data processing agreements. Your profile and documents are never sent to employers or job platforms unless you download and submit them yourself.
7. Retention
We keep your data for as long as your account exists. If you delete your account, your profile, documents and application history are deleted, except where we are legally required to retain certain records. Technical logs are kept for a limited period for security purposes and then deleted.
8. Your rights
Under the GDPR you have the right to access your personal data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). You also have the right to lodge a complaint with a data protection supervisory authority. To exercise your rights, contact us at support@aplyfy.com.
9. Cookies and local storage
Aplyfy uses only functionally necessary cookies and browser storage: your authentication session, your language preference and your light/dark theme choice. We do not use advertising or cross-site tracking cookies.
10. Changes to this policy
We may update this privacy policy as the service evolves. The current version is always available on this page; material changes will be announced in the application.