Last updated · May 13, 2026 · v1.0
The point of a privacy policy is to tell you, in plain English, what we know about you. Here is the entire list.
I. The short version
- Our server stores your email address, your license key, and your Stripe customer ID. That’s it.
- Everything generated by the app — résumés, applications, cover letters, Q&A library, analytics — lives in a SQLite database on your machine. We don’t have a copy.
- The app contacts our server once per day to verify your subscription. That request contains your license key and nothing else. It also reports a count of applications submitted — job board and time only — because that is what enforces the monthly limit on your plan. The full list of what is and isn’t sent is in §V.
- No tracking pixels. No Google Analytics. No Facebook Pixel. No session replay. This marketing site ships ~5KB of JS total.
II. What we store, on our server
Account record
- Email address — for license delivery, refunds, and the rare critical update.
- License key — the string the app sends us each day for verification.
- Stripe customer ID — for refunds and tier changes.
- Tier & subscription status — what plan you’re on, when it renews.
License-ping log
When the app verifies your subscription, we log: the license key, an IP address (kept 30 days then dropped), and the timestamp. We use this only to detect license-sharing — if the same key pings from 14 cities in 14 hours, that’s a problem.
III. What stays on your machine
Everything else. The app stores a local SQLite database under your OS’s standard app-data directory:
- Your résumé(s).
- Every job application TimeBaQ has submitted on your behalf.
- The full text of every cover letter.
- Your Q&A library — every screening question and the answer you saved.
- Analytics — counts, timestamps, success/failure breakdowns.
- Per-platform login sessions (sandboxed and encrypted at rest; the encryption key is held in a permission-restricted directory only your user account can read).
We can’t see any of it. If your computer is offline, the app still works for everything except the daily license ping.
IV. Third parties we touch
The minimum set required to run a subscription business:
- Stripe — payment processing. They see what they have to see (card, billing address). We don’t store card numbers.
- Cloudflare — hosts our license server and this site, plus the Cloudflare AI Gateway proxy that fronts our AI calls (logging disabled). Standard CDN logs apply.
- Resend — transactional email (license key delivery, refund confirmations, support replies). No marketing list.
- Google AI Studio (Gemini), OpenAI, Anthropic — upstream AI providers reached through Cloudflare AI Gateway. Calls are on zero-retention contracts; the gateway has logging off. Gemini and OpenAI are used by the desktop app for cover letters and Q&A; Anthropic is used by the support-email handler.
- CAPTCHA solver — the app sends image-only CAPTCHA challenges to a paid solver. The challenge image leaves your machine; none of your résumé or form data does.
No data is sold to any third party. Ever.
V. Tracking & analytics
None on this marketing site. No Google Analytics. No Facebook Pixel. No Hotjar. No session replay. No cookie banner because we don’t need consent — there’s nothing to consent to.
The desktop app: beta builds
While TimeBaQ is in beta, the desktop builds we hand to testers ship with usage telemetry and crash & error reporting turned ON by default. We use this short-lived data to find the bugs and rough edges a small beta can’t surface on its own — aggregate feature usage, error traces, and crash reports. The app discloses this on first run and on the Settings → Privacy page, and you can switch both off there at any time. We never collect the contents of your résumé, applications, cover letters, or Q&A library — telemetry is about how the app behaves, not what you put into it.
What still gets sent when you switch telemetry off
Two things, and we would rather spell them out than round “almost nothing” up to “nothing”:
- The daily licence check — your licence key, so we know the subscription is live.
- A count of applications submitted — the job board and the time, plus an identifier so the same application isn’t counted twice. This is how the monthly limit on your plan is enforced, so it can’t be switched off without switching off the plan. It carries no job title, no employer, no answers, and none of the diagnostics (which browser driver ran, how long it took, what failed) that go with it when telemetry is on.
Nothing else leaves your machine. In particular, with crash reporting off we send no crash reports at all — including the native and start-up ones that don’t go through the usual path.
The desktop app: stable builds
Once TimeBaQ leaves beta, the stable release reverts to no telemetry by default: usage telemetry and the crash & error reporter are opt-in, off until you turn them on in Settings, and turn themselves back off the moment you uncheck them.
VI. Your rights
Under GDPR, CCPA, and basic decency, you have the right to:
- Ask for a copy of what we store (it’s a 4-line JSON file, we’ll email it).
- Ask for it to be deleted. Once you cancel, your account row is auto-deleted after 30 days unless you ask sooner.
- Object to processing. If you don’t want the daily license ping, cancel; the app stops contacting us.
Email support@timebaq.app with “Privacy” in the subject. A real person responds within ~24h on weekdays.
VII. Contact
TimeBaQ is a solo-developer project. The data controller is one person. Email support@timebaq.app for any privacy question; we’ll add a postal address before EU rollout.