Privacy Policy

Last updated: September 2026

This policy covers the ProFeed app and this website. It sets out plainly what ProFeed stores, where it lives, how AI is used, and the controls you have. ProFeed is currently in external beta, and this policy describes the product as it is today rather than as we hope it will be.

1. What We Collect

If you join the waitlist on this website, we collect your email address and, if you choose to give them, your name, what best describes you and how you heard about ProFeed. Your IP address is held briefly in memory to rate-limit the form and this website's visit statistics, and is not stored. If you hold a ProFeed account, we store:

  • Your email address and account credentials
  • Professional preferences: your primary goal, career stage, industry field and posting frequency
  • How you heard about ProFeed
  • Journal entries and draft posts you create
  • Voice recordings you capture, and their transcripts
  • CV files you upload, and the experiences, Master CV and tailored CVs built from them
  • Job descriptions you paste in when tailoring a CV to a role
  • Generated LinkedIn posts and your publishing history
  • A small, fixed set of usage events (for example, that a post was generated) which never include your content
  • Your answers to beta check-ins, if you choose to give them

2. Where Your Data Is Stored

Your account data is stored in our database and private file storage, both hosted by Supabase. Row-level security policies stop one account reading another's. This website is hosted by Vercel.

  • A small number of ProFeed staff can see account-level records — your email address, activity counts such as when you last used the app, and anything you write in a beta check-in — to run the beta and help you when you ask us to
  • Staff do not read your journal entries, drafts or CV
  • ProFeed also keeps a copy on your device so the app works offline. Entries, drafts and recordings you create without a connection are stored on the device and sync to your account when you reconnect

3. AI Processing

This is the section to read carefully. AI is part of how ProFeed works, which means your content is processed by our servers and by AI providers.

  • When you generate a post, transcribe a recording, or build or tailor a CV, the content that action needs is sent to an AI provider, which processes it and returns the result
  • Saving a journal entry also sends it for analysis automatically, so your themes and suggestions are ready when you come back to it
  • The providers currently used are OpenAI and Anthropic. Voice recordings go to OpenAI for transcription. Their handling of that content is governed by their own terms
  • ProFeed does not attach your account email or credentials to these requests. It does send the content itself, which can contain personal details you put there — an uploaded CV normally includes your name and contact details
  • There is currently no setting that turns AI processing off
  • Because your content is processed on our servers and by these providers, it is not end-to-end encrypted

4. Diagnostics

ProFeed collects limited technical diagnostics so we can find and fix problems: the app version and build, the platform, which screen an error happened on, the type of error, and internal reference codes. These reports are sent to Sentry, our error monitoring provider.

  • Diagnostics are filtered before they are sent, to keep out journal and reflection text, generated posts and CV content, transcripts, access tokens and sign-in codes, and your email address
  • No filter can be perfect, so we keep the reports as narrow as we can rather than promise that nothing can ever slip through
  • If you email us from inside the app, the message includes only your build, environment, platform, which backend you are on, and a reference code for a recent error if there is one. You can see all of it on screen before your mail app opens. Your entries, drafts and CV are not attached

5. Product Analytics

ProFeed records a small, fixed set of product-use events — that onboarding was completed, that a post was generated, that a CV was exported — so we can see which features are used and improve them.

  • Event names and their properties are checked against a closed list before anything leaves your device, and checked again on our servers. Anything outside that list is discarded
  • These events never carry your content: no entry text, transcripts, post or CV text, names, employers, filenames or free-form feedback
  • This analytics data is our own and stays in our Supabase database. We do not use a third-party analytics service
  • This website sets no analytics cookies and runs no third-party trackers
  • This website counts visits and a small, fixed list of interactions without cookies or anything stored on your device. Our own server records the page, the referring site, any campaign tag in the link, country and device type in our own Supabase database. It does not record your IP address and does not build any identifier for you.

6. How We Use Your Data

We use your data to:

  • Deliver the ProFeed service
  • Personalise generated content based on your professional context
  • Provide reminders and suggestions
  • Understand which features are used, so we can improve them
  • Send account emails such as sign-in confirmations and password resets
  • Reply to you when you contact support

7. Sharing and Selling

We do not sell your data, and we do not use it for advertising. We do depend on service providers to run ProFeed, and your content passes through them:

  • Supabase — database and private file storage
  • OpenAI and Anthropic — AI processing for generation, analysis, transcription and CV work
  • Sentry — error diagnostics, filtered as described above
  • Vercel — hosting for this website
  • A waitlist service — storage for the email address you give on this website
  • We may also disclose data if required by law or to protect our legal rights

8. Payments and Subscriptions

ProFeed is free during the external beta. Paid plans are not active, no payment method is requested, and no payment or card data is collected from beta testers.

  • If paid plans are introduced later, purchases will be handled by a payment provider rather than by ProFeed — RevenueCat and Apple on iOS, Stripe on the web
  • We would give them your email address so they can identify your subscription, and we would store the customer identifiers they give back
  • ProFeed never sees or stores your card details

9. Security

The protections we can actually point to are:

  • Encrypted in transit (TLS)
  • Encrypted at rest by our hosting provider
  • Row-level security policies that scope every record to its owner
  • Private storage buckets for recordings and uploaded CV files
  • No service is completely secure, and we do not claim a security certification or an independent audit

10. Your Controls

From inside the app you can:

  • Access your data at any time
  • Export your journal entries, posts and settings as a JSON file from Settings. This export does not cover CV or experience data
  • Delete your account yourself, without emailing us. This removes your account and its data — entries, posts, recordings, uploaded CV files and CV data — and erases that account's data from the device you delete it on
  • Deletion is immediate and cannot be undone. Copies may persist in our providers' routine backups and logs until those age out on their own schedule
  • ProFeed never posts to LinkedIn for you. There is no LinkedIn posting capability in the product: you copy a finished draft and post it yourself

11. Data Retention

We keep your data while your account is open and remove it when you delete your account. Two cases are worth knowing about:

  • Work you create offline waits on the device until it can sync, and is kept for up to 7 days. If it has not synced by then it is removed, so reconnect within a week
  • Waitlist email addresses are kept until we launch, or until you ask us to remove yours

12. Your Rights

Under UK GDPR and data protection law, you have the right to:

  • Access: request a copy of your personal data
  • Correction: ask us to correct inaccurate data
  • Deletion: request deletion of your data ("right to be forgotten") — account holders can do this themselves in the app
  • Portability: receive your data in a portable format
  • Objection: object to certain processing of your data
  • Withdraw consent: where processing is based on consent, withdraw it at any time
  • To exercise any of these, email privacy@profeed.app

13. Cookies and Local Storage

This website sets no cookies and runs no third-party trackers. The ProFeed app stores two things on your device:

  • Your sign-in session, so that you stay signed in
  • The offline copy of your entries, drafts and recordings described above
  • Signing out clears the note you are part-way through on the capture screen. Entries and drafts already saved on the device stay there until the account is deleted

14. Children's Privacy

ProFeed is not intended for users under 13 years of age. We do not knowingly collect data from children under 13. If you believe we have, contact us and we will remove it.

15. International Transfers

Your data may be transferred to and processed in countries outside the UK and EEA, including the United States, where our AI providers are located. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses.

16. Changes to This Policy

ProFeed is in beta and this policy will change as the product does. We update the date at the top when it does, and for significant changes we will tell you by email or in the app.

17. Contact Us

For questions about this policy or about how we handle your data, email us at:

privacy@profeed.app