Hireola Privacy Policy
In short: we only process the data you enter in Hireola to provide the app to you. We use no advertising, analytics or tracking tools, we do not sell your data and we do not share it with anyone for marketing. You can delete your account and all of your data at any time.
1. Who is responsible
The data controller for the Hireola mobile app is Ahmet Yakup Çetinkaya, who develops the app under the Jacoboss brand.
Contact: [email protected]
2. What data we process
| Data | Examples | When |
|---|---|---|
| Account details | Email address, display name, language, a one-way hash of your password (the password itself is never stored) | When you create an account. Guest accounts have no email, name or password. |
| Your job search records | Companies, applications, stages, interview notes, ratings, questions and your answers, tags | When you enter them |
| Salary and offers | Expected salary, figures discussed, offers and benefits | When you enter them |
| People you met | Name, title, email, phone, LinkedIn URL, notes | When you enter them (see the note below) |
| Session data | A hash of your session key, device name (e.g. "Android"), session expiry | When you sign in |
| Connection data | IP address | On every request. Kept in server memory for a few minutes only to limit abuse (e.g. password-guessing attacks); never written to the database. |
You enter the details of the people you met yourself. Please record them only to follow your own job search, for personal use, and only to the extent they were shared with you.
The app does not ask for device permissions such as location, contacts, camera or microphone. No advertising ID, analytics, crash reporting or third-party trackers are used.
3. Why we process it
- To provide the app (create your account, store and show your records, compute reports): performance of our contract with you.
- Security (protect your account, limit abuse and attacks, manage sessions): legitimate interest.
- Backups (recover from data loss): legitimate interest.
- Answering support requests: contract and legitimate interest.
- Legal obligations, where they apply.
4. Where it is stored and who receives it
We do not sell or rent your data or share it with anyone for marketing. We only use these service providers to run the app:
| Provider | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Application server and database | Germany (EU) |
| Cloudflare, Inc. | Secure connections (HTTPS), domain and network protection; storage of encrypted backups; forwarding of support emails | Global network, US-based |
| Google (Play Store) | Distribution of the app. Your in-app data is not sent to Google. | — |
These providers process data under their data processing agreements and standard contractual clauses. We disclose information to public authorities only when legally required.
5. How long we keep it
- Registered account: as long as the account exists. When you delete your account, all of your data is removed from the live database immediately.
- Backups: daily encrypted backups are kept for at most 30 days, after which deleted data is gone from backups too.
- Guest account: deleted automatically with all its data after 90 days without use.
- Sessions: session keys are valid for at most 30 days (90 days for guests).
- Support emails: at most 1 year after the request is resolved.
6. Security
- All traffic between the app and the server is encrypted (HTTPS, TLS 1.2 or later).
- Your password is stored only as a one-way hash (BCrypt).
- Each user can access only their own data; the server checks this on every request.
- The server is closed to the internet; it is reachable only through Cloudflare's encrypted tunnel.
- Your session key is kept in your device's secure storage.
7. Your rights
You can access, correct, export and delete your data, object to processing and ask how your data is used. Most of this you can do directly in the app: edit or delete records, use Settings → Export my data to get all of your data, and Settings → Delete my account to close your account. For anything else, email [email protected] from your registered address; we answer within 30 days, free of charge. If you are in the EU/EEA you also have the right to lodge a complaint with your local data protection authority.
8. Children
Hireola is designed for adult job seekers and is not directed at children under 16.
9. Changes
When we change this policy we update the effective date above, and we announce significant changes in the app.