Privacy Policy

1. Who we are

Cinapp is an application intelligence platform that helps job seekers research roles, tailor their resumes and cover letters, and track their applications. This policy explains what personal information we collect, how we use it, who we share it with, and the choices you have.

Cinapp is operated by Cinapp, based in Australia. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You can reach us at hello@cinapp.app.

2. Information we collect

We collect the following categories of information, almost all of it provided directly by you.

Account information

Your email address and, if you sign up with a password, a securely hashed version of that password. We never store your password in readable form.

Profile information

Your name, phone number, general location (suburb or city, state and postcode), LinkedIn profile URL, target role and weekly application target. Contact details appear on the resumes and cover letters Cinapp generates for you. We ask you not to enter a full street address.

Documents and application content

Resume files you upload (PDF or Word), the text and structured data extracted from them, job advertisements you capture, the resumes and cover letters Cinapp generates for you, interview preparation notes, final application PDFs you save, and the notes and timeline events you record against each application.

Networking and contact records

If you use the networking features, we store the employers and contacts you research, along with names, job titles, email addresses, LinkedIn URLs and your notes about conversations. Some of this is personal information about other people. You are responsible for collecting and recording it lawfully, and for keeping your notes accurate and professional.

Coaching and learning records

If a coach or mentor has enrolled you, we store the coach relationship, your course and checklist enrolments, and which items you have completed. Your coach can see your progress and the documents you produce.

Billing information

Your subscription plan, trial and renewal dates, and identifiers issued by our payment processor. Card numbers are entered directly with Stripe and never reach our servers.

Technical information

Standard server logs, including IP address, browser type and the pages requested, used to operate the service and investigate faults and abuse.

3. Signing in with Google

If you choose to sign in or sign up with Google, we request only the basic profile and email scopes. From those we receive your email address and your name, which we use to create and identify your account and to personalise your profile.

We do not request or receive access to your Gmail, Google Drive, Contacts, Calendar or any other Google service. Your Google password is never shared with us: authentication happens on Google's servers using OAuth 2.0. Cinapp's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

If your Google email address matches an existing Cinapp account, we will sign you in to that account and link the two, so you keep your existing data. You can disconnect Cinapp from your Google account at any time from your Google account permissions page. Doing so stops future Google sign-ins but does not delete your Cinapp account.

4. How we use your information

• To create and administer your account and authenticate you.
• To provide the service: analysing job advertisements, tailoring resumes and cover letters, preparing interview material and tracking your applications.
• To send transactional and service email, including email verification, password resets, application follow-up nudges and weekly progress summaries.
• To process subscriptions, trials and payments.
• To share your progress with your coach, where a coach has enrolled you.
• To maintain security, prevent abuse and fix faults.
• To meet our legal and tax obligations.

We do not sell your personal information, and we do not use your resumes, applications or documents to train our own models.

5. Artificial intelligence processing

Cinapp's core features rely on a third-party AI provider, OpenAI. When you ask Cinapp to analyse a job, tailor a resume, draft a cover letter, prepare interview material or draft outreach, we send the relevant content to OpenAI's API. Depending on the feature, that can include the full text of your resume, your contact details as they appear on your resume, the job advertisement, and notes you have recorded about a role or hiring manager.

OpenAI processes this content to return a result and, under its API terms, does not use data submitted through the API to train its models. We keep a copy of what was sent and what was returned so you can review your documents and so we can diagnose failures.

AI output can be wrong. Everything Cinapp generates is a draft for you to review and edit before you send it to an employer.

6. Who we share information with

We do not sell your personal information or disclose it for advertising. We share it only with the service providers that run Cinapp, and only to the extent they need it:

• OpenAI, to generate the documents and analysis described above.
• Stripe, to process subscription payments. Stripe receives your email address and handles your card details directly under its own privacy policy.
• Brevo, to deliver our transactional and notification email.
• Google, where you choose to sign in with Google.
• Cloudflare, whose Turnstile check helps block automated signups. Turnstile receives your IP address when you create an account with an email address and password.
• Render, which hosts our application, database and file storage.

We may also disclose information where the law requires it, or where it is necessary to protect our rights, safety or property, or those of our users.

7. Where your information is stored

Cinapp's application servers, database and uploaded files are hosted in Singapore. Our service providers listed above operate globally and may process your information in the United States and elsewhere. By using Cinapp you consent to your personal information being disclosed to these overseas recipients. We take reasonable steps to use reputable providers with appropriate security and contractual protections.

8. Security

All traffic is served over HTTPS with HSTS enabled. Passwords are stored as salted hashes. Uploaded and generated documents are never served from a public URL: they are delivered only through views that check you own the file, or that your coach is entitled to view it.

No online service can promise perfect security, but we take reasonable technical and organisational steps to protect your information from misuse, loss and unauthorised access.

9. Cookies

Cinapp uses two essential cookies: a session cookie that keeps you signed in, and a CSRF token that protects forms from cross-site request forgery. Both are required for the site to function. The Cloudflare Turnstile check may set its own cookies on the signup page.

We do not use advertising cookies, and we do not run Google Analytics, tracking pixels or similar analytics tools.

10. Retention and deletion

We keep your information for as long as your account is open. You can delete your account yourself at any time from Settings, and the deletion is immediate and permanent: your profile, resumes, applications, generated documents, networking records and uploaded files are removed, and the files are deleted from our storage. We cannot recover a deleted account.

Two things survive deletion. Encrypted backups roll off on their normal cycle rather than being edited, and Stripe retains payment and invoice records where tax and financial record-keeping laws require it.

11. Your rights

You may ask us to:

• give you access to the personal information we hold about you;
• correct information that is inaccurate or out of date, most of which you can edit yourself in Settings;
• provide a copy of your information in a portable form;
• delete your account, which you can also do yourself in Settings.

You can opt out of follow-up nudges and weekly summary emails in Settings. We will still send essential service email such as password resets and billing notices.

Email hello@cinapp.app to make a request or raise a privacy complaint, and we will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

12. Children

Cinapp is intended for people in or entering the workforce and is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has given us personal information, contact us and we will delete it.

13. Changes to this policy

We may update this policy as the service changes. We will update the date at the top of this page, and for significant changes we will notify you by email or in the app.

14. Contact us

Questions about this policy or about how we handle your information can go to hello@cinapp.app.