Privacy Policy

Last updated: 2026-07-07

Plain Language: This is written in plain language on purpose. It's the real policy, not a summary of a hidden one. We don't collect more data than we show here, and we don't sell personal data.

1. What We Collect

Account Information

When you sign up:

Email address (required)
Name (optional)
Password (hashed — we don't store the plain text)

Usage Events

We collect events like:

Pages you visit
Articles you read
Buttons you click
Time spent on the platform
Device type and browser

AI Playground Inputs & Outputs

When you use the AI playground:

We send your prompt to the LLM provider (Fireworks, OpenRouter, or your own API key)
The LLM processes it and returns an output
We don't permanently store your inputs/outputs by default, but providers may (per their policies)
If you save a conversation, we store it in your account

User-Generated Content

Recipes, outcome stories, and comments you publish are stored and displayed publicly (or privately, if you mark them as private).

BYOK API Keys

If you provide your own API keys (for OpenAI, Anthropic, etc.), we store them encrypted in your account. The plaintext key is never logged or shared.

2. Why We Collect It

To provide the service: Email and account data let you log in and use the platform
To improve the platform: Usage events help us see which features are popular and where people get stuck
To personalize your experience: We use your activity to recommend content and features that might interest you
To track and measure: Analytics help us understand how the platform is used
To comply with law: We may need to retain data for legal or regulatory reasons

3. How Long We Keep It

Account data: As long as your account exists, plus 30 days after deletion
Usage events: 90 days by default (older data is aggregated and anonymized)
Saved conversations: As long as you keep them
Published content: As long as you keep it published
Deleted content: Permanent deletion happens within 30 days (but backups may persist longer)

5. Your Rights (DPDP & GDPR)

Digital Personal Data Protection (DPDP) Act — India

If you're in India, you have the right to:

Access: Request a copy of your personal data
Correction: Request that we fix inaccurate data
Deletion: Request permanent deletion of your account and data

Visit /me/export to download your data or /me/delete to request deletion.

General Data Protection Regulation (GDPR) — EU

If you're in the EU, you have additional rights:

Right to access, correct, delete (same as DPDP)
Right to restrict processing — we won't use your data for profiling
Right to data portability — export in a standard format
Right to object — opt out of marketing emails anytime

Use /me/export or contact us at [email protected] to exercise these rights.

6. Cookies & Tracking

We use cookies for:

Session management: Keeping you logged in
Anonymous ID: Tracking sessions without personally identifying you
Analytics: Understanding how you use the site (PostHog, GA4)

You can disable cookies in your browser settings, but some features may not work properly.

7. We Don't Sell Data

We never sell, trade, or rent your personal data. Period. Our business model is based on building great products, not monetizing user data.

8. AI Work Readiness Diagnostic

The AI Work Readiness diagnostic at /readiness asks you to describe your work in your own words. Because that description is about your job, we treat it with extra restraint.

What happens to what you write

We remove personal identifiers before storing anything. Your description passes through an automated redaction step that strips names, employer names, email addresses, phone numbers and financial identifiers. Only the redacted version is saved.
We never ask for your employer. There is no product reason to know it.
Please don't paste confidential company data — credentials, customer records or contract text. We warn you before you start, and flag it if we detect it.
Your diagnostic is anonymous by default. It is tied to a random identifier in a cookie, not to your identity, unless you choose to join the early-access list.

How your score is produced

Protected characteristics are never used. Age, gender, race, religion, disability, marital status, caste, nationality and salary cannot influence your score. This is enforced in our code, not merely requested of the AI model.
Your score is an estimate, not a measurement. It is calculated from what you told us about yourself, so it is always labelled “estimated” and its confidence is capped.
It does not predict job performance, employability, job security or salary, and must not be used by anyone to make decisions about you.
Time-saving figures only appear when you supplied real numbers. If you didn't tell us how long a task takes, we describe impact qualitatively rather than inventing a figure.

Sharing

A report link is unguessable and is not indexed by search engines. Share cards contain only your identity label, score and a general capability area — never your employer, your tasks, or anything you typed.

Deleting it

You can delete a diagnostic at any time from your report. Deletion is immediate and complete: your description, every answer, your work profile, your score and your opportunities are all removed. If you joined the early-access list, your place on it is kept but is no longer linked to any diagnostic data.

9. Contact Us

For privacy questions or to exercise your rights:

Email: [email protected]
Use the export/delete endpoints: /me/export or /me/delete

We'll respond within 30 days.

Changes to This Policy

We may update this policy. We'll notify you of significant changes via email or through the platform. Your continued use means you accept the updates.