Privacy Policy

Maksim Tachylau, trading as JDG MAKSIM TACHYLAU, the developer and seller identified for HoroJob in the App Store, is the controller of personal data processed for the HoroJob service.

This policy covers the HoroJob website, public market tool, mobile app, support channels, and related backend services. Apple and other providers may act as separate controllers for information they collect under their own terms.

• Privacy contact: privacy@horojoblab.com.
• General support: support@horojoblab.com.
• Contact address: Krasinskiego 67/36, 01-755 Warszawa, Poland.
• Business registration: NIP 1182257371 · REGON 524565417.

The information we process depends on the features you choose to use. HoroJob starts with an anonymous app session and only receives Sign in with Apple details if you choose to protect or recover that account.

• Account and identity data: internal user and session identifiers, Sign in with Apple subject identifier, and the name or relay/private email Apple provides when available.
• Birth profile data: name, birth date, birth time, birth city, derived coordinates and time zone, and natal-chart calculations used for personalized guidance.
• Vacation Time: dates and search ranges you enter, rest style, flexibility, chosen time zone and calculated readings. Saved checks remain until you delete them or your account; unsaved checks are scheduled for cleanup after 90 days, or 90 days after removing a saved mark. Derived day caches expire after 30 days; temporary usage counters expire after two days. Up to 20 recently opened readings may be cached on your device for an access session of up to one hour, ending earlier at account/session expiration. Signing out clears that local account cache.
• Career data: current role, experience, goals, preferences, saved roles, shortlist activity, job searches, job-posting URLs, extracted posting text, annual Blueprint strategies, advice preferences, private journal notes, and generated reports or recommendations.
• CV workspace data: professional sections extracted from a PDF, DOCX, or pasted resume text you submit; confirmed facts, findings, requested rewrites, accepted edits, bounded document versions and source links, and processing status. This normalized working copy remains personal information, even after automatic contact cleanup; professional employers, projects, and unlabelled personal details may identify you.
• User content: screenshots you deliberately select for job-posting analysis, CV files or text you submit, optional contact details you enter for an export session, and information included in support messages.
• Purchase data: product, entitlement, transaction, renewal, expiration, and restore status received from Apple and RevenueCat. HoroJob does not receive your full payment-card details.
• Notification and device data: Expo push token, app version, device platform, time zone, notification preferences, delivery status, and limited reliability or security telemetry.
• Website and public-tool data: role and location queries, page viewed, referrer, approximate region, browser, operating system, and device category used for aggregated site analytics.

HoroJob asks for device permissions only when you open a feature that needs them. You can refuse a permission and continue using unrelated parts of the product.

• Photos: used only to let you select job-posting screenshots for an analysis you request. HoroJob does not scan your photo library.
• Files: the CV picker reads only the PDF or DOCX you select. HoroJob does not search your other files or replace the original document. You can use pasted professional text instead.
• Calendar: used to find time conflicts and, when you choose, create or remove HoroJob interview-window events. Only start and end times for busy intervals are sent to the backend; event titles, notes, attendees, and locations are not sent for conflict checking.
• Notifications: used to deliver optional career-vibe, recovery, lunar-productivity, interview-window, and other alerts you enable.

AI-assisted personalization is optional and off until you make a separate choice in the app. Requested features can use OpenAI to structure a selected job-posting screenshot, extract professional CV facts, assess document wording or market context, propose truthful resume edits, or write requested Blueprint strategies, strategy update proposals, and Career Insights. Relevant input can include your career context, professional CV sections and confirmed facts, role or posting details, public-source evidence, and the screenshot you selected. Optional astrology interpretation can also use relevant birth-profile and natal-chart context.

CV processing requires its own versioned processing and storage notice in addition to general AI consent. The original file or full raw input is handled transiently for bounded extraction; the private normalized professional working copy is saved. Automatic removal of detectable contacts and sensitive fields is limited, not anonymization. Remove unnecessary personal or sensitive details before submitting, and review the saved professional text. Processing a CV does not automatically include it in Blueprint: you separately choose a confirmed CV revision when requesting a strategy or update proposal.

Natal-chart and transit positions are calculated inside HoroJob's own backend using commercially licensed Swiss Ephemeris software and locally stored ephemeris files. Those deterministic calculations do not send your birth date, birth time, coordinates, time zone, current date, or current-city coordinates to a separate astrology API provider.

We use those inputs to answer the requested feature, not to make employment decisions about you. OpenAI does not calculate the chart, supply HoroJob's market facts, set deterministic scores, or make your decision. HoroJob guidance is advisory and does not produce legal or similarly significant automated decisions.

You can turn AI-assisted personalization off at any time in Settings. This blocks new OpenAI processing and prevents activation of results whose consent was withdrawn; it does not retract a request already sent to a provider. Fresh AI-written CV results, rewrites, strategy proposals, Career Insights, and screenshot extraction then remain unavailable. Supported URL checks, deterministic astrology and transits, public market facts, Career Radar, saved results, owned Blueprint modes and journal, and saved CV corrections, export, and deletion do not require a new OpenAI request. Turning AI off does not itself delete saved content.

If you enable Career Lens CV reviews, OpenAI compares your selected saved professional CV with the available vacancy description when you view an eligible opening. The practical comparison excludes birth details; its separate astrological reflection does not alter the skills score. CV-builder draft saving itself does not use AI. Automatic reviews can be paused in Career Lens; deleting the CV removes dependent reviews.

Career Lens CV comparisons and their automatic-review preference are cleared when AI is turned off. This does not delete your saved CV workspace.

HoroJob does not intentionally persist the original screenshot image in its application database after request processing. Parsed job details and the resulting analysis may remain in your scan history until you delete them or your account.

CV export uses your saved professional sections, not assessment findings or astrology. Optional export contacts remain separate from model input and saved workspace data. For PDF export, those contacts are sent transiently to HoroJob's renderer, not to OpenAI; text export is prepared on your device. Export uses a clean new layout and does not replace your original document.

We process information to provide features you request, maintain your account and purchases, protect the service, communicate with you, and meet legal obligations.

• Contract and service delivery: create a session, save your profile, generate requested guidance, return market facts, synchronize entitlements, and provide support.
• Consent: access optional Photos, Calendar, and Notifications data; send selected inputs to OpenAI for AI-assisted personalization; and collect optional account-linked product analytics in PostHog. Each in-app choice is separate and can be withdrawn for future processing.
• Legitimate interests: secure the service, prevent abuse, diagnose first-party operational failures, measure aggregated website reliability, and maintain the service. This basis does not override an in-app refusal of OpenAI processing or account-linked PostHog analytics.
• Legal obligations: preserve limited billing, dispute, fraud-prevention, or compliance records when the law requires it.

We do not sell personal information and do not use it for cross-app advertising. We disclose only the data needed for providers to perform their part of the service.

• Apple: app distribution, Sign in with Apple, purchases, refunds, subscription management, push transport, and device-level permissions.
• RevenueCat: purchase receipt validation and entitlement synchronization.
• Amazon Web Services and MongoDB Atlas: application hosting, networking, database storage, backups, authentication for the private admin center, and operational security.
• OpenAI: requested AI-assisted guidance, screenshot extraction, professional CV fact extraction, assessments, and rewrite or strategy proposals only with the required consent. HoroJob has no undeclared backup AI provider. CV and strategy requests disable provider response storage for later API retrieval; this is not a zero-retention guarantee and does not disable all provider safety or technical retention.
• PostHog Cloud US: optional, privacy-minimized product analytics and technical error diagnostics only after the user separately allows analytics. Events can use an internal HoroJob identifier, bounded account state, app/build/device context, and feature outcomes. Session replay and provider GeoIP enrichment are disabled.
• Expo: push-token registration and notification delivery infrastructure.
• Vercel: website hosting and cookie-free, aggregated Web Analytics.
• CareerOneStop and O*NET: public labor-market facts. Relevant role and location queries may be sent to retrieve those facts.
• Adzuna: U.S. job listings. Relevant role, preference, and location search terms may be sent; displayed listings link back through Adzuna.
• GeoNames: HoroJob imports its CC BY 4.0 global place dataset into our own backend for city-name search, coordinates, and time-zone lookup. Your typed city query is searched inside HoroJob and is not sent to GeoNames or another geocoding provider at runtime.
• Greenhouse, Lever, and Ashby: when you submit a supported public vacancy URL, HoroJob requests that exact public posting through the provider's documented job-board API. Other sources use screenshots and are not requested directly.
• Google Workspace: delivery and handling of messages you send to HoroJob support or privacy addresses.
• Professional advisers or authorities: only when reasonably necessary to comply with law, protect rights and security, or handle a transaction involving the service.

HoroJob and its providers may process data in the United States and other countries where privacy laws can differ from those in your country. When required, transfers rely on the provider's data-processing terms and recognized safeguards, such as standard contractual clauses or an applicable adequacy framework.

You can contact us for more information about safeguards relevant to your data.

We keep account profiles, saved guidance, and user-visible history while your account is active so the product can provide continuity. You can initiate full account deletion in the app. Account-linked data is then deleted unless a limited record must be retained by law or to resolve an active security, fraud, billing, or dispute matter.

• Refresh-session credentials expire no later than 180 days after issuance or renewal unless revoked sooner.
• Raw job-page fetch artifacts are normally retained for up to 14 days; normalized market and job caches are normally retained for up to 30 days.
• AI operational telemetry and interview-window interaction records are normally retained for up to 180 days.
• Recovery and lunar-productivity delivery or interaction records are normally retained for up to 365 days to enforce safe frequency limits and measure reliability.
• Original screenshot images are processed for the requested analysis and are not intentionally stored in the HoroJob application database afterward.
• Original CV files and full raw input are discarded after bounded extraction rather than saved as uploaded files. Normalized professional CV copies, including unconfirmed copies, confirmed facts, findings, accepted edits, and bounded document history remain saved until you delete the CV workspace or account. Premium expiry does not delete them or remove the owner's access to saved reads, corrections, export, or deletion.
• Stop using a CV in Blueprint removes its private contribution from the strategy but keeps the standalone CV workspace. Delete this CV workspace removes its saved document and findings and invalidates dependent private Blueprint content, including affected proposals or revisions. Independent user-authored journal notes remain when a CV is deleted; account deletion removes them. Privacy-safe removal does not require Premium or a new model request.
• Export contacts are not persisted by HoroJob. App-created temporary export files are cleaned up after sharing, failure, or account change, with bounded expiry and interrupted-session cleanup. Copies you save or share to other apps are outside HoroJob's deletion controls; deleting a CV does not delete those copies or your original source file.
• OpenAI API requests can be retained by OpenAI for up to 30 days in abuse-monitoring logs under its standard API data controls unless stricter account-level retention is enabled.
• Turning optional product analytics off stops future account-linked HoroJob and PostHog event capture. Account deletion removes internal analytics and queues deletion of the matching PostHog person and associated historical events through PostHog's deletion API.
• Apple and RevenueCat retain purchase records under their own legal and operational requirements. Deleting HoroJob does not cancel an Apple subscription.
• Deleted data can remain for a limited period in protected backups until those backups rotate, and is not used for ordinary product operation.

Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to processing, withdraw consent, and complain to your local data-protection authority. Withdrawing consent does not affect processing that was lawful before withdrawal.

Use Settings in the app to allow or withdraw AI-assisted personalization and optional product analytics independently, and for account deletion, notification controls, Calendar cleanup, and purchase restore. In the CV workspace, you can read or correct saved professional content, export it, or delete that workspace without active Premium. In Blueprint, Stop using current CV removes its use there without deleting the standalone CV. Contact us for other access, export, correction, restriction, objection, or provider-processing questions. We may ask for reasonable verification before acting on an account-linked request.

The public website uses Vercel Web Analytics for aggregated page-view statistics. It does not use third-party advertising cookies or create a profile that tracks you across websites. Avoid including personal information in public market-tool query fields.

If we later add non-essential cookies, advertising, or identifiable analytics, we will update this policy and add any consent controls required by law before enabling them.

HoroJob is intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a person under 18 has provided data, contact us so we can investigate and delete it where appropriate.

We use technical and organizational safeguards intended to protect information, including access controls, encrypted network transport, limited provider access, and service monitoring. No online service can guarantee absolute security.

We may update this policy as the product or law changes. We will change the date above and provide additional notice in the app when a change materially affects how personal data is used or requires a new choice.