Privacy

In short

• You can search and read jobs without an account. We do not use advertising trackers.
• We do not sell personal data, and we do not share it for advertising. You can stop our usage statistics counting your visits by switching them off on the Account page, or by turning on Global Privacy Control or Do Not Track.
• An account stores what you choose to save: searches and alerts, and, with sync on, your tracker and resumes. Your application tracker is kept in this browser or in our app, and reaches your account only if you turn on sync. You can delete it yourself at any time.
• A resume check runs on your device. A resume you save is kept in your browser or in our app, and reaches our servers only if you turn on sync; there it is stored encrypted.

Who we are

workfinds.app is operated by kevinesg, an individual based in the Philippines ("we"). We decide how the personal data described here is used, and are its controller. For anything about your data, write to support@workfinds.app.

When you visit without an account

Server logs

Our web server and our network provider (Cloudflare) record each request: your IP address, the page requested, the response status and time, your browser's user agent, and the country Cloudflare derives from your IP address. Our own log keeps the page's address without any search words in it. We use these logs to keep the site running and to investigate abuse. Access logs are normally kept for about two days; rotated log files are deleted after 14 days at most.

Usage statistics

We count how the site is used with our own, self-hosted tools. They set no cookies and do not follow you from one day to the next:

• page views: the page's address without its search terms or other parameters, except the campaign tags of a link that brought you, from a fixed list; its title; the website you came from (its address, not the page); your browser, operating system, device type, screen size and language; how quickly the page loaded; on job pages, how far down you scrolled; roughly how long you stayed; and the country, region and city your IP address points to. The IP address itself is not kept;
• searches: the filters used and any changes to them or to the sort order, whether you searched again within a minute, the number of results, which page of results, whether you were signed in, and the text typed. The text is erased after 90 days;
• searches and job or company lookups made through an AI assistant connected to workfinds.app: which kind of lookup, the number of results, the search words, and the assistant's name and version as it gives them. No IP address and nothing else about you or the assistant's request is recorded with them, and they are kept like the rest of these records;
• a prompt to sign in on a filtered search: that it appeared, and whether you signed in, closed it or kept browsing;
• job and company pages you view, and clicks through to an employer's application page or to another website: the kind of job (its applicant system, country scope and work arrangement, and whether a salary was shown), where it sat in the results and how you reached the page (a search, a company page, a country page or directly); for a company page, whether it has a profile and roughly how many open jobs; for other websites, only their address. Our own record of clicks to an application page also notes which job and from which page;
• which menu and footer links you use, and switches between the light and dark theme;
• errors the site ran into: the kind of page and the type of error, never the error message;
• that a share button was used;
• account steps, counted by kind and day only: that a sign-in was started or finished and how (Google, Apple, Microsoft or an email link), and that a search was saved, a company followed, a job added to your tracker, a tracked job's status changed, a resume saved or the autofill extension present in your browser that day; and, if you tell us why you cancel a plan, the reason you pick from a list, with the plan and roughly how long you had it; never which search, company or job, and never your account. We also count how many accounts come back each week, grouped by the week they joined; your account keeps only the last week it was counted;

If you type a comment when you cancel a plan, we keep it with the reason you picked, without your account, for 6 months, then delete it. We record only the week it arrived, and we remove anything in it that looks like an email address, a link or a long number. Please do not put personal details in it. Because nothing links a comment to you, we cannot find yours later; if you want one removed, write to us with its wording and we will delete it.

• resume checks: the file type and a rough page count, never the file or its text;
• the paid plan: when its page, an upgrade prompt or the offer of our apps was shown or followed, for which feature, and whether the offer's QR code was displayed; in our apps, also which plan was picked, whether a purchase was started and how it ended (completed, pending, not yet confirmed, cancelled or failed), and, if the page was closed without buying, roughly how long it was open;
• your answer to "Would you use a workfinds mobile app?". If you are signed in, your account also notes that you answered, not what or when, so you are not asked again.

None of these records holds your IP address or an account. Page views, and the searches, sign-in prompts, clicks, survey answers and paid-plan offers above, share a random-looking number for the day, so that we can count visits and see what a visit led to. It is made from your IP address and browser with a key that changes every day, cannot be turned back into either, and does not link one day's visits to another's. The text you search for, resume checks and account steps never carry it. If your browser sends Global Privacy Control or Do Not Track, none of these records is made for your visit; turning one of them on is how you opt out. Server logs are still kept, for security. Detailed records are kept for 25 months, then only daily totals.

Stored in your browser

• your application tracker: the jobs you track with their status, dates, notes and history, your job searches, and the days you opened the site. Clearing this site's data in your browser deletes it, and we cannot restore it unless sync was on;
• resumes you save, with the name you give each one. Clearing this site's data in your browser deletes them, and we cannot restore them unless sync was on;
• your light or dark theme choice (local storage);
• your choice to switch off usage statistics, if you make it on the Account page (local storage);
• your last job search, so the list is still there when you go back (session storage);
• the scroll position and state of pages you visited, so Back works (session storage);
• whether you answered "Would you use a workfinds mobile app?", so you are not asked again (local storage);
• your choice to include jobs whose work arrangement is not stated, when you filter by arrangement (local storage);
• today's date, so that the autofill extension is counted once a day (session storage);

These stay on your device. We do not read them on our servers, except for what the next section describes.

What your tracker sends us

To show whether a job you track is still open, your browser sends us the ids of those jobs. The request carries no cookie and no account, and we do not keep the ids.

If you turn on job-closed alerts, your browser sends your account the ids of the jobs you are still pursuing, so that we can alert you when one closes. Turning the alerts off deletes that list.

If you make a share link, your browser sends the stage counts of that job search and how many applications you made on each day of its period, from which we work out its rates and draw its calendar; never companies, job titles, notes or names. The link is public and permanent.

When you create an account

Sign-in is handled by our server with Google's Firebase Authentication, using a Google, Apple or Microsoft account or a link sent to your email. With an account from one of those companies, you sign in on its own page, which sees your IP address and browser and learns that you signed in here; it sends us only your email address and an account identifier. If you use a link sent to your email, our server asks Firebase to send it and completes the sign-in. Firebase records your email address, the sign-in method and times; it does not get your IP address from us. If you sign in with Google or Apple using an email address that already has an account, Firebase adds that way to the account and we tell you. With Microsoft, we add it once you have signed in the way you did before. We never receive a password. If you sign in with Apple and choose to hide your email, we receive only the relay address Apple gives us, and our emails to you go through Apple. Your account then holds:

• your email address, your time zone, and when the account was created and last used;
• if you sign in with Microsoft, a scrambled form of your Microsoft account identifier, so that we recognise you next time;
• saved searches and followed companies, with your alert settings;
• which jobs matched your alerts and when alert emails were sent (the time and the number of jobs), for 90 days;
• with sync on: jobs you track: title, company, link, status, dates, your notes, and the history of status changes;
• with sync on: your job searches: the name you give each one, if any, and the day it started;
• shared funnels, if you choose to make any: a public link to one job search's figures (stage counts and rates, the period it covers and, for links made from 24 October 2026, how many applications were made on each of its days; links made before 15 October 2026 also hold the months they cover; never its name, companies, job titles, notes or names) and its preview image. Anyone with the link can see it, and it follows that search. The link is not deleted with the search or with your account: see "Deleting your account";
• with sync on: saved resumes: the name you give each one, its type and size, a fingerprint of the file (to spot duplicates), and the file itself, encrypted before it leaves our server with a key unique to that file;
• with sync on: the days you opened the site (the date only), for your activity calendar;
• your plan, and how it was granted.

Resumes you save are kept where you save them: in this browser's storage for this site, or in our app's own storage on your phone. They are not sent to us unless you turn on sync. Clearing this site's data, or removing the app, deletes the copies kept there.

Syncing with your account

Your tracker and saved resumes stay in this browser or in our app unless you turn on sync, which is part of Pro and is turned on in each browser or phone. With sync on, they are kept in your account, together with what is already there, as one copy for every browser and phone where sync is on; your notes and resumes are stored encrypted. Your saved searches, followed companies and alerts are always kept with your account, with or without sync. Turning sync off stops that browser or phone syncing; what is in your account stays until you delete it or delete your account. With or without Pro, you can delete it from your account in one step. That also deletes the synced copies from every browser and phone where sync was on, offline ones when they next connect, and turns sync off. Anything a browser or phone kept without syncing, or changed after the deletion, stays there. When a synced copy is deleted, we keep only its random id and the day, for 12 months, so that your other devices can find out it was deleted. If your plan ends, nothing is deleted, but changes you make after that are no longer copied to your account. Backups that still contain it expire within 35 days.

Cookies

We set these cookies, and none is readable by scripts:

• __Host-auth_flow: only while you sign in, for up to 10 minutes, to protect the sign-in from forgery and, for an email link, to remember the address it was sent to (encrypted);
• __Host-auth_link: only when you sign in with Microsoft using an email address that already has an account, for up to 10 minutes, to hold that sign-in until you have signed in the way you did before (encrypted);
• __session: keeps you signed in for up to 14 days.

Cloudflare may set a security cookie of its own if it needs to check that a visit is not automated. There are no advertising cookies, so there is no cookie banner.

Email

Job alerts are sent only for searches and companies you turn alerts on for, through Resend, our email provider. Every alert has a one-click unsubscribe link. If an address bounces or reports our mail as spam, we stop sending to it and keep a keyed hash of that address, not the address itself, so that we do not send to it again. Resend keeps its own record of each email it sends for us (the address, the subject and whether it arrived) for a limited time, and its own list of addresses that bounced or reported spam.

Autofill profile

Autofill is open only to invited testers for now. It works through our browser extension. The extension keeps your autofill profile and the resumes you give it in its own storage in your browser. They never reach our servers, and we cannot see or recover them; removing the extension deletes them. You can also delete them at any time in the extension's settings. If you sign out, the extension stops filling forms; it also stops if it has not heard from our site that you are signed in for 30 days. It keeps your profile until you delete it.

The profile can hold your name, email address, phone number, street address, city, region, postal code and country; links such as LinkedIn; whether you may work in a country and whether you need sponsorship; your notice period and salary expectation; your own answers to questions applications often ask; your skills and languages; and, only if you tick the box that says so, your work history and education.

It has no place for your gender, race or ethnicity, religion, sexual orientation, disability, veteran status, date of birth, current or past salary, or government ID numbers, and it refuses saved questions about them. Please do not type such details into the free-text fields either.

The extension fills a form only when you ask, and never submits one. Our site tells it only whether you are signed in.

The extension counts the forms it fills per applicant system and passes the counts to workfinds.app for our usage statistics; never what was filled.

workfinds.app Autofill's use of data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

When you write to us

We keep your email address and your message in our mailbox (Gmail, run by Google), to answer you.

Subscriptions

In our mobile apps, paid plans are sold through Apple or Google, who process the payment; we do not receive your card or billing details. A purchase-tracking service (RevenueCat) tells us that your account has a subscription: the product, its period and status, the store and its country, and the store's transaction number. In our apps, RevenueCat is contacted when the Pro screen opens and, if your account has a subscription or a purchase in progress, each time the app starts, so that the store's purchase is confirmed. RevenueCat then receives a random identifier for that installation, your store's country, the app and system version, and the address your phone connects from. If you sign in, that identifier is joined to your account identifier. We send RevenueCat no email address or name.

The 3-month plan can also be bought on this website. The seller is Dodo Payments, our reseller and merchant of record, an independent company that decides how it uses the data it collects, under Dodo Payments' privacy policy. On its checkout page Dodo Payments collects your name, email address, billing address and country, and your payment details (card or wallet), and keeps them to take the payment, pay tax, send your receipt and handle refunds and disputes. We never receive your payment details, name or billing address.

To start a purchase we send Dodo Payments your account's email address, the country your connection appears to be in, and your workfinds.app account identifier. It tells us only what fulfils the service: its customer and subscription numbers, the plan, its status and dates, the payment's number and any refund. We use your email address to send the trial reminder on day 6 and notices of price changes. We keep these with your account, and use them to unlock Pro, to show your plan and to open "Manage billing", a link to Dodo Payments' billing page where you cancel or update your card.

Notifications in our app

If you allow notifications in our app, we keep your phone's notification address (a push token) with your account, and which notifications are on: new jobs for a saved search, a tracked job closing, or your trial ending. Each notification goes through Google's Firebase Cloud Messaging (and, on iPhones, Apple's notification service). Its text says how many jobs, or that your trial ends soon; never which search, job or company. The trial reminder is sent once, a day before a free trial turns into a paid subscription. You can turn notifications off in the app or in your phone's settings. The token is removed when you turn notifications off or sign out on that phone, sign out everywhere, or ask to delete your account; when the phone's sign-in expires after 90 days unused; after 60 days unseen; or when Google reports the token invalid.

Why we use this data, and on what basis

• To provide the account features you ask for (saved searches, alerts, tracking, the activity calendar, shared funnels, saved resumes): to perform our agreement with you.
• To keep the service secure and working (server logs, request limits), and to understand use without identifying anyone (usage statistics): our legitimate interests.
• To prevent abuse of one-time offers and of our mail (the records described under "Deleting your account" and "Email"): our legitimate interests.
• To answer you when you write to us: our legitimate interests.
• To meet a legal duty, when a law or a court order requires us to keep or hand over data.

We do not use your data for automated decisions about you, and we do not sell it.

Who processes data for us

These companies process data on our behalf, under their own terms:

• Cloudflare: network, security, file storage and mail forwarding. Every request (IP address, page, browser); saved resumes and account backups, both encrypted before upload; mail sent to support@workfinds.app, on its way to our mailbox.
• OVH: hosting of the web server and databases. Account data and server logs.
• Google (Firebase Authentication): sign-in. Email address, sign-in method and times.
• Resend: sending alert emails, once they start. Email address, the content of the alert, and delivery records (sent, bounced or reported as spam).
• RevenueCat: purchase tracking. Account identifier, product, status, the store and its country, and the store’s transaction number; in our apps also a random installation identifier, the app and system version, and your IP address. No email address or name.
• Google (Firebase Cloud Messaging): delivering notifications in our app. Your phone’s push token and each notification’s text (counts only).
• Google (Gmail): the mailbox that receives support mail. Your email address and what you write to us.

These companies deal with you directly and decide themselves how they use your data:

• Apple and Google Play: purchases. They take the payment and keep your payment details, under their own privacy policies; we never receive them.
• Dodo Payments: purchases of the 3-month plan on this website, as our reseller and merchant of record. It takes the payment and keeps your name, email address, billing address and country and payment details, under its own privacy policy; we never receive them. We send it your account email, your country and your account identifier, and receive its customer and subscription numbers, the plan, its status and dates.
• Google, Apple or Microsoft: when you sign in with their account. They see your IP address and browser on their own sign-in page, and learn that you signed in to workfinds.app, under their own privacy policies.

Where your data goes

Our servers are in Singapore. Sign-in data is processed by Google in the United States, alert email is sent by Resend, a company in the United States that keeps its records there, and Cloudflare handles requests on its worldwide network. We run the service from the Philippines. These countries may protect personal data differently from yours. Where the law requires it, we rely on the standard contract terms these companies offer for such transfers. Dodo Payments is a group of companies that moves data within the group and to its own service providers worldwide; for transfers from the UK and the European Economic Area it states that it relies on standard contractual clauses.

Other people's data in listings and profiles

Job listings come from public company career pages. Company profiles come from public sources such as the company's own website, which is sometimes read with the help of an automated text service. Neither contains data about you as a visitor. A listing or profile may name a recruiter, contact or founder, as its source does. If one shows your name or contact details, write to us with its link: within 7 days we remove them from it, or hide the listing, and they stay removed when the listing is next read from its source. You do not need an account. The copy we keep of a listing can also contain details from the source that we do not show, such as the name of the person who posted it; we do not use them, and you can ask us to remove them.

How long we keep it

• Account data: until you delete your account. A shared funnel link is kept after that as an anonymous copy, unless you ask for it to be removed.
• Records of alert emails sent and of the jobs that matched: 90 days.
• A job you remove from your tracker: it can be restored for 7 days, then it is deleted.
• Inactive accounts: we may delete an account that has not been used for more than two years. We will warn you by email before deleting an inactive account.
• Access logs: normally about two days; rotated log files are deleted after 14 days at most.
• Search text in usage statistics: 90 days, except the search words of searches made through AI assistants, which are kept 25 months like the other detailed records. Other detailed records: 25 months.
• Backups of account data: encrypted, and deleted after 35 days.
• Subscription records: the purchase events the stores send us, for 25 months, also after the account is deleted.
• Notification tokens: while notifications are on for that phone; removed when you turn them off or sign out there, sign out everywhere or ask to delete your account, when the phone's sign-in expires after 90 days unused, after 60 days unseen, or when Google reports the token invalid.
• Mail you send us: up to 12 months after our last reply. A record of a data request (its dates and what we did) is kept for 3 years.
• Web subscription records: the customer and subscription numbers, plan, status, dates and payment events Dodo Payments sends us, for 25 months, also after the account is deleted. After deletion we keep only a keyed hash of your email address (not the address), the plan, dates and payment numbers, for 25 months, to give one free trial per person, to keep tax records and to answer chargebacks; no other personal content. What Dodo Payments itself keeps follows its privacy policy.

Deleting your account

You can delete your account on the account page. For 30 days you can sign in to cancel the deletion. After that we delete your account data and your saved resume files, and we have Google delete your sign-in record, which it completes within 180 days. Backups that still contain your data expire within 35 days. If you cannot sign in, write to support@workfinds.app from the account's email address and we will delete the account for you. Your tracker and saved resumes are part of your account only if you turned on sync. Synced ones are deleted with your account and from every browser and phone where sync was on, offline ones when they next connect. Anything a browser or phone kept without syncing, or changed after the deletion, stays there until you delete it, clear this site's data or remove the app.

Shared funnel links stay. If you made one, it keeps showing its last figures after the account is gone, as an anonymous copy: the link, the stage counts and rates, the period and applications per day (links made before 15 October 2026 also hold the months they cover), and the preview image. Nothing in it says whose it was: no account, email address, name, company or job. To have your links removed with the account, tick "Also remove my shared funnel links" when you delete it. You can also write to us at any time with a link and we will remove it.

A few records are kept after deletion. None of them holds your email address:

• if your account used an offer that we give only once, a keyed hash of your email address and sign-in identifier, which only stops the same offer being taken again;
• if mail to your address bounced or was reported as spam, a keyed hash of the address, so that we never mail it again;
• if you synced your tracker or resumes, the random id of that synced copy and the day it was deleted, with nothing that ties them to you, for 12 months, so that your other devices can find out it was deleted;
• if you had a subscription, the purchase events the store sent us (the product, dates, the store's transaction number and country, and your former account number) for 25 months, for our accounts and for refund disputes. We delete your record at RevenueCat.
• if you had a web subscription, a keyed hash of your email address (not the address itself), the plan, dates and payment numbers, for 25 months, to give one free trial per person, to keep tax records and to answer chargebacks. We keep no other personal content from it. Deleting your account first cancels the web subscription, so no further payment is taken. Dodo Payments keeps its own record of your purchase as an independent company: ask it to delete or correct that.

Free trials of paid plans are given by Apple or Google, once per store account, and they keep that record.

Your rights

Wherever you live, you can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to move it elsewhere. Write to support@workfinds.app from your account's email address. We reply within one month, and we never send data to a different address. A copy of your data from us covers what we hold. What is kept in your browser or in our app is already with you.

You can object to our usage statistics by switching them off on the Account page, or by turning on Global Privacy Control or Do Not Track. We do not sell or share personal data, and we will not treat you differently for using your rights.

If you are not satisfied with our answer, tell us at the same address. We confirm within 30 days that we received your complaint, and we review it. You can also complain to the data protection authority of the country where you live.

Children

workfinds.app is for people looking for work. Accounts are for people aged 18 or older, which you confirm when you sign in. We do not check identity documents; if we learn that an account belongs to someone younger, we delete it.

How we protect it

Connections to the site are encrypted. Saved resumes and backups are encrypted before they are stored. Account data sits in a database that cannot be reached from the internet, and only the person who runs workfinds.app can access it.

Changes

If workfinds.app is ever sold or merged, your data moves to the new owner under this policy, and we will tell account holders first.

When this policy changes in a way that matters, we will say so on this page and, if you have an account, by email before the change takes effect. See also our terms of use.