Privacy policy

Last updated 16 October 2026

1What DuckInJob does

DuckInJob builds a timeline of your job applications from the emails that job sites and employers send you: applied, viewed, assessment, interview, offer or rejected. It only exists to show you that dashboard.

2What it reads from your Google account

Signing in shares your name, email address and profile picture (scopes openid, email, profile). Connecting Gmail is a separate, optional step that grants read-only access (gmail.readonly). DuckInJob never sends, changes, labels or deletes your email.

It searches your inbox for emails about job applications from the last 90 days onward. For each one it reads the sender, subject, date and content to decide whether it's about an application and what happened. From your sent mail it only looks at emails with an attachment that talk about applying (an application you emailed with your CV), to add that application too.

3What it keeps

For emails that look like they're about your applications: the sender, subject, date, Gmail's short snippet and message id, and what was recognized (company, role, stage). Full email bodies and attachments are never stored. Emails that aren't about applications are only recorded as "skipped" by message id, so they aren't read again.

It also keeps the applications, notes and next steps you add, your questions to the AI assistant and its answers, feedback you send from the Feedback page (with your sign-in address only if you agree to a reply), and an encrypted (AES-256-GCM) Gmail refresh token so it can sync in the background.

4AI processing

When AI assist is turned on for this instance, emails the rules can't place, and your questions to the assistant, are sent to the AI provider this instance is configured with. For an email that's the sender's name and domain, the subject and up to 2,000 characters of the text, with links, email addresses and phone numbers removed. The assistant gets the data the app already keeps (companies, roles, stages, dates, next steps, notes, subjects and snippets), never full emails or sender addresses. The provider only processes it to return an answer.

5Google API Services: Limited Use

DuckInJob's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

✓Gmail data is only used to provide and improve the job-application tracking you see in the app.
✓It is only transferred to others to provide that feature (the AI provider above, and the database host), to comply with the law, or as part of a merger or sale with your consent.
✕It is never used for advertising, never sold, and never used to train general AI or ML models.
✕No person reads it, except with your permission for a specific message, for security (such as investigating abuse), to comply with the law, or when it's aggregated and anonymized for operations.

6Where it's stored and who sees it

Data is stored in this instance's database and is only shown to you, except feedback you send, which the developer reads to fix and improve the app. It isn't shared with other users, sold or used for advertising. Server logs leave out email content and addresses.

7Your choices

Disconnect Gmail at any time from the dashboard or the Account page; this revokes the access token.
Export all your data as JSON, sign out on every device, or delete your account from the Account page. Deleting removes everything stored about you right away and revokes Gmail access.
You can also remove access from your Google account settings.

8Retention

Data stays until you delete it or your account. Disconnecting Gmail stops new syncs but keeps your applications until you delete them or the account.

9The beta waitlist

If you leave your email on the landing page to join the waitlist, that address and the time you joined are kept, only to tell you when DuckInJob opens. It isn't shared, sold or used for anything else, and the developer is the only one who sees the list.

To stop spam, a one-way, keyed hash of your IP address is kept next to it for up to 24 hours (never the address itself). To be taken off the list, email gunadharma201@gmail.com; deleting a DuckInJob account with the same address also removes it, and any invite to it.

Contact

Questions or requests: email the developer at gunadharma201@gmail.com.