Postify

1. Introduction

We collect and process information to provide, maintain, and improve the Service. By using the Service, you acknowledge this Policy and consent to the data practices described below.

2. Information We Collect

We collect various categories of information to provide, maintain, and improve our Service.

2.1 Personal Information

When you sign in with LinkedIn using OAuth 2.0 (OpenID Connect), we receive the following basic profile information from LinkedIn:

• Full name (first name and last name)
• Email address
• Profile picture / avatar
• Email verification status

2.2 LinkedIn Growth Statistics

After signing in, users may manually enter their LinkedIn performance statistics to track their growth over time, including number of connections, profile view counts, and average post impressions.

2.3 Resume Data

When you use the resume upload feature, we collect and process information from your resume to generate an optimized LinkedIn profile. Your resume is sent to our AI service provider (OpenAI) which analyzes it and returns generated content stored in Firestore:

• LinkedIn Headline — AI-generated professional headline
• LinkedIn About / Summary — AI-generated profile summary
• LinkedIn Skills — AI-suggested list of professional skills
• LinkedIn Post — AI-generated sample LinkedIn post
• Resume Score — AI-evaluated resume quality score
• Summary Strength — Assessment of the resume summary
• User Role / Title — Identified job title or role
• Projects — Extracted project titles and descriptions
• Experience — Extracted work experience titles and descriptions

2.4 User-Generated Content

When you use the App to create, edit, or publish content, we collect and store the following:

• Manually written LinkedIn posts (text entered by the user)
• AI-generated LinkedIn posts (created via resume data or manual prompts)
• Post titles, body content, and associated metadata (creation date, status, preferences)
• Images uploaded by the user to enhance posts
• Image URLs (stored as Cloudinary paths referenced in Firestore)
• Draft posts and scheduled post content

2.5 Job Follow-Up Messages

When you use the job follow-up feature, you paste or enter a job description. The App combines the job description with your previously processed resume data and sends both to OpenAI to generate a personalized follow-up message. The generated message may be stored locally on your device for reference. This data is used solely to provide the follow-up message generation feature and is never shared with third parties for advertising or marketing purposes.

2.6 Job Application Tracking

The App includes a job tracking feature allowing you to manage and monitor your job applications. All core job tracking data is stored locally on your device using an SQLite database (Room) and is never transmitted to any server or third party. Data collected includes:

• Job title and company name
• Company logo URL (if available)
• Job location, type (Full-time, Part-time, Contract, Internship, Freelance), and work mode (Remote, Hybrid, On-site)
• Salary range (optional)
• Job description and job URL (optional)
• Application date and current status
• Recruiter name, email, and phone (optional)
• Interview date and follow-up date (optional)
• Reminder settings
• Personal notes and comments

AI-Generated Emails Within Job Tracking

When you use AI-powered email features inside the Job Tracking screen, the App sends certain job tracking data to OpenAI to generate a personalized email:

• Follow-Up Email — sends job title, company name, recruiter name, days since application, and your LinkedIn profile data.
• Thank-You Email — sends job title, company name, recruiter name, interview type, and your LinkedIn profile data.
• Salary Negotiation Email — sends job title, company name, recruiter name, and your LinkedIn profile data.

Generated emails are displayed in a preview dialog and are not automatically stored. Data sent to OpenAI is processed solely to generate the requested email and is not used for model training by default, in accordance with OpenAI's API usage policy.

2.7 Scheduled Posts & Publishing

When you create or schedule a post, the following data is stored in Firestore and/or Cloudinary: post title and content, post type, scheduled date and time, publishing status, image URLs, Cloudinary public IDs, and LinkedIn asset URN (returned after publishing).

2.8 Notification Data

The App stores and triggers the following types of notifications, with records kept in Firestore: notification ID, title, description, status, timestamp, associated image URL, and associated post ID. Notification types include post status updates, LinkedIn growth stat reminders, and job tracking reminders.

2.9 Usage and Diagnostic Data

We collect certain technical data automatically through Firebase Analytics and Firebase Crashlytics to monitor app performance and improve reliability, including crash reports, error logs, app performance diagnostics, and general usage patterns.

2.10 Advertising Data

Postify is a free app supported by advertisements served through Google AdMob. The following ad types may be displayed: Banner Ads, Interstitial Ads, and Rewarded Ads. To serve ads, Google AdMob may collect the Google Advertising ID (GAID), device information, IP address for general location, and app usage data for ad frequency capping and fraud prevention.

Ads are served as non-personalized. You can opt out via: Device Settings → Google → Ads → Delete Advertising ID or Opt out of Ads Personalization. Purchasing a monthly subscription removes all advertisements permanently.

3. How We Use Your Information

4. App Permissions

The App may request the following device permissions to enable core functionality. You can manage or revoke permissions at any time through your device settings.

5. Third-Party Services

We integrate the following third-party services to operate and improve Postify. Each service processes data in accordance with its own privacy policy.

AI Content Generation

OpenAI (ChatGPT API) — Processes resume data, user-entered prompts, and job tracking data to generate LinkedIn profile content, posts, personalized follow-up messages, thank-you emails, and salary negotiation emails. Data is sent securely and used only for the requested generation task.

Analytics

Firebase Analytics — Collects anonymized app usage data to help us understand user behavior, monitor feature adoption, and improve the App.

Crash Reporting

Firebase Crashlytics — Collects crash reports and diagnostic data to help us identify and resolve technical issues and improve App stability.

Cloud & Data Storage

Firebase / Firestore — Stores user-generated content, post data, resume-generated suggestions, notification records, and app preferences.

Cloudinary — Stores and delivers user-uploaded images. Image URLs are stored in Firestore for reference within the App.

Advertising

Google AdMob — Displays non-personalized advertisements. AdMob may collect the Google Advertising ID (GAID) and device information for ad frequency capping, fraud prevention, and aggregated reporting. Ads are served without behavioral profiling. Users can opt out via device settings. Purchasing a subscription removes all ads permanently.

Authentication & Publishing

LinkedIn (OAuth 2.0) — Used for secure sign-in via an in-app WebView and to publish posts directly to LinkedIn on your behalf. Session cookies during sign-in are handled by the WebView only and are not stored by the App. Your LinkedIn access token is stored securely in EncryptedSharedPreferences on your device.

Payments

Google Play Billing — Processes monthly subscription payments to remove ads. We do not directly handle or store any payment card information. All payment processing is managed securely by Google Play.

6. How We Share Your Information

We respect your privacy and only share your data where strictly necessary to operate the Service.

6.1 Service Providers

We share limited data with trusted service providers including OpenAI, Firebase/Firestore, Cloudinary, Google AdMob, Google Play Billing, and LinkedIn — solely to the extent required to operate the features described in this policy.

• OpenAI — Receives resume content, job descriptions, and job tracking data to generate profile content, posts, and emails. Per OpenAI's API policy, data submitted via the API is not used to train OpenAI models by default.
• Firebase / Firestore — Stores structured user data. Job tracking and LinkedIn stats are stored locally only and never sent to Firestore.
• Cloudinary — Stores and serves user-uploaded images along with any EXIF metadata embedded in the files.
• Google AdMob — May collect the GAID to display non-personalized ads to users without a subscription.
• Google Play Billing — Processes subscription payments securely. We do not receive or store payment card details.
• LinkedIn — Receives your OAuth access token and post content when you publish directly to LinkedIn from the App.

6.2 LinkedIn Integration

When you sign in with LinkedIn or publish content through the App, certain information (such as your name, email address, profile picture, and post content) is shared with LinkedIn to enable authentication and publishing functionality, in accordance with LinkedIn's privacy policy.

6.3 Legal Requirements

We may disclose your information when required by law, legal process, litigation, or a valid governmental request, or when necessary to protect our rights, property, or the safety of our users.

We do not sell your personal information to any third party, and we never share your data for advertising purposes beyond what is described in this policy.

7. Subscription & Payments

Postify is free to use. The App displays advertisements to all users via Google AdMob. Users may purchase a monthly subscription through Google Play Billing solely to remove advertisements. The subscription does not unlock any additional premium features.

• We do not directly collect, store, or process payment card information.
• All billing, invoicing, and payment security is managed by Google Play.
• Subscription status (active or inactive) is stored only to determine whether ads should be displayed.
• Cancelling your subscription will re-enable advertisements in the App, including rewarded ads.
• Refund requests are handled in accordance with Google Play's refund policy.

8. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information. You may exercise these rights by contacting us at [email protected].

We will respond in accordance with applicable data protection laws within a reasonable timeframe.

9. Data Security

We implement industry-standard technical and organizational security measures to protect your information from unauthorized access, disclosure, alteration, or destruction.

• Encryption in Transit: All data transmitted between the App and servers uses HTTPS/TLS protocols.
• Firestore Encryption: Data stored in Firestore benefits from Google's built-in server-side encryption at rest.
• Cloudinary Encryption: Images stored in Cloudinary are protected by Cloudinary's built-in encryption and access controls.
• EncryptedSharedPreferences: Your LinkedIn access token, login state, and app preferences are stored locally using Android's EncryptedSharedPreferences (AES-256 encryption).
• Local SQLite Database: Job tracking and LinkedIn growth stats are stored in a local SQLite (Room) database, protected by Android's app sandboxing.
• Firestore Security Rules: Strict rules ensure each user can only access their own data.
• LinkedIn OAuth Security: Sign-in uses the industry-standard OAuth 2.0 protocol. We never store your LinkedIn password.
• OpenAI Data Processing: Data sent to OpenAI is processed under OpenAI's API usage policies. OpenAI does not use API data to train their models by default.
• EXIF Metadata Notice: Images uploaded from your gallery may contain embedded EXIF metadata transmitted to Cloudinary as part of the image file.
• Secure Payments: All payment processing is handled exclusively by Google Play Billing. We never store payment card details.

10. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account & Profile Data: Retained in Firestore while your account is active.
• User-Generated Content: Posts, drafts, and scheduled content stored in Firestore until deleted by you.
• Resume-Generated Data: AI-generated profile content stored in Firestore until deleted by you.
• Job Tracking Data: Stored locally on your device (SQLite). Deleted when you remove entries or uninstall the App.
• AI-Generated Emails: Displayed in a preview dialog only; not automatically stored on your device or any server.
• LinkedIn Growth Stats: Stored locally on your device (SQLite). Deleted when you remove entries or uninstall the App.
• Images (Cloudinary): Retained until you delete the associated post or your account.
• Analytics & Crash Data: Retained per Firebase's standard data retention policies.
• Subscription Status: Retained only while needed to manage ad display settings.

When your data is no longer needed, it will be securely deleted or anonymized. You may request deletion of your personal information at any time by contacting us at [email protected].

11. Children's Privacy

Postify is intended for users aged 18 and older. It is not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children.

If we become aware that we have inadvertently collected personal information from a child without verifiable parental consent, we will take prompt steps to delete that information. If you believe we have collected information from a child, please contact us immediately at [email protected].

12. Legal Compliance

This Privacy Policy is designed to comply with applicable data protection laws and regulations, including:

• GDPR (General Data Protection Regulation) — For users in the European Economic Area.
• CCPA (California Consumer Privacy Act) — For California residents.
• Google Play Developer Policy — All data safety and privacy requirements as mandated by Google Play.
• Other Applicable Laws — We comply with data protection laws in all jurisdictions where we operate.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or new features added to the App. When we make material changes, we will update the Last Updated date at the top of this policy and, where appropriate, notify you through the App.

Your continued use of the App after any changes to this Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this policy periodically.

14. Contact Information