Privacy Policy
Last updated: 29 September 2026
CareerDost ("the app", "we") is a job-search app for Android. This policy explains what personal data the app collects, why, where it goes, and the controls you have — in line with India's Digital Personal Data Protection Act, 2023 (DPDP) and Google Play's User Data policy.
The short version. Your resume lives on your phone, not on our servers. The file you upload is read once in memory to pull the text out and is then discarded — we never keep it, and we never copy its design. Your account holds little more than your name and email. You can delete the account yourself, from inside the app, at any time.
How you sign in
Signing in with Google is the only way into CareerDost. There is no password: none is created, stored or checked anywhere in the app or on our servers, so there is no password to leak or reset. Google tells us your name, email address, an account identifier and your profile picture; it does not give us access to anything else in your Google account.
What we store on our servers
- Your account: name, email address, your Google account identifier, and the profile photo from your Google account. That photo is shown on your profile only — it is never added to a resume unless you choose to add it yourself.
- Your settings: app language, timezone, and your plan and AI-credit balance.
- Consent: the date you first signed in and accepted this policy.
- Sign-in sessions: a one-way hash of each signed-in device's session token (never the token itself), so a phone and a tablet can both stay signed in. Up to five devices; logging out removes that device's session.
- Notification tokens: if you turn notifications on, the device token Google issues for push, so reminders can reach your phone.
- Counters: how many resume imports you have used today. This exists to keep the free AI limits fair.
What stays only on your phone
These are stored on your phone, are never sent to or backed up on our servers, and are not visible to us:
- Your resumes, and every field in them.
- Your job feed, saved jobs, application tracker and its notes.
- Your saved searches and filters.
Because they are local, signing in on a new phone does not download them from us: we do not have them.
Android's own backup. If backup is turned on for your phone (Settings → Google → Backup), the app lets Android include these in the backup it keeps in your own Google account, so that reinstalling the app or setting up a new phone can bring them back. Only this is included — not your sign-in, and nothing from the advertising or payment services. That backup is Google's, is encrypted, and never reaches our servers; you can turn it off or delete it in your Google account's backup settings at any time. Without it, they are gone when you uninstall the app.
Your resume file
When you import a PDF or Word resume, the file is uploaded over an encrypted connection, read in memory to extract its text and structure, and then discarded. It is never written to storage on our side, never kept, and never shared. The structured result is returned to your phone, which is the only place it is stored.
We also do not copy the design of an uploaded resume. The app looks at how long the sections are and what order they appear in, purely to suggest one of our own templates, and keeps nothing from that suggestion.
AI processing
Turning a resume file into structured sections, and features like ATS suggestions, use an AI language-model provider. Before any text is sent:
- your name is removed and replaced with a placeholder;
- your email address, phone number and links are removed, and put back afterwards on your phone.
So the provider receives your experience and skills as text, without the details that identify you. Depending on availability, the provider is one of Google (Gemini), Groq, Cloudflare Workers AI, OpenAI or Anthropic, each under their own terms — and the free tiers of some of them may retain what is sent in order to improve their services. That is precisely why your name and contact details are stripped out first. AI output is a drafting aid; you are responsible for what your resume says.
Jobs, and how they are fetched
Job listings come from public job boards and company career pages. Listings fetched by our server are cached and shared between all users, so a search tells us nothing about you personally. Listings from LinkedIn are fetched by your phone, logged out, and are never routed through our servers. When you apply, the employer's own form opens in the app and you fill it in; nothing is submitted for you, and no consent box is ticked on your behalf. What you type into an employer's form goes to that employer, under their privacy policy, not ours.
Diagnostics
Crash reports go to Sentry so we can fix what breaks. They are configured to exclude personal data: no IP address, no request contents and no resume content is attached. The app app can also record anonymous product events (for example "signed in", "resume imported"). These carry a random identifier rather than your account, and never any resume, job or search content.
Payments
Paid plans and credits are billed by Google Play. Payment details are handled entirely by Google and our subscription provider, RevenueCat; we never see or store your card, UPI or bank details. What we receive is whether a purchase is active.
Advertising
The free plan shows a banner ad at the bottom of the job feed and the insights screen. There are no full-screen ads, no ads between you and your own resume, and none anywhere on the Pro plan.
Those banners are served by Google AdMob. To select and measure them Google receives your device's advertising ID, your approximate location as inferred from your IP address, and basic signals about the app, under Google's own privacy policy. We do not send Google your resume, your saved jobs, your searches, your tracker or your account details — none of that leaves your phone in the first place.
You can reset the advertising ID, or delete it altogether, in Android's Settings → Privacy → Ads. Deleting it stops ads being personalised; it does not stop them appearing.
The app sends you no email. There is no verification mail, no password reset, no newsletter and no promotional mail, because sign-in is Google-only and we have nothing to verify.
Where your data is held
Account data is stored in MongoDB Atlas and served by Google Cloud Run, both in the Mumbai (asia-south1) region in India, encrypted in transit and at rest. Our AI, crash-reporting and billing providers may process data outside India, as named above.
How long we keep it
Account data is kept while your account exists. Device sessions expire on their own within 30 days of last use. Cached job listings expire within hours. Uploaded files are not kept at all.
Your rights, and deleting everything
You can delete your account and all the personal data on our servers at any time, from inside the app: Profile → Delete my account. It takes effect immediately and cannot be undone, and it also clears your resumes, jobs and tracker from that phone. Uninstalling the app removes everything held on your phone; if Android's backup is on, a copy can remain in your own Google account until you delete it there. Under the DPDP Act you may also ask us for access to your data, ask for a correction, or withdraw consent — email us and we will act within 30 days.
Full instructions, including how to ask by email if you cannot open the app, are on our account deletion page.
Children
CareerDost is a job-search app intended for people old enough to work — 18 and over. It is not directed at children, and we do not knowingly collect their data.
Changes
If this policy changes in a way that affects you, we will tell you in the app before the change takes effect.
Contact
Privacy questions and data requests: careerdost@bhagisheela.com