Vuna Privacy Policy Effective date: [release date]. Draft for attorney review before publication; publish at [domain]/privacy and link it in App Store Connect.

This policy covers the Vuna mobile app and the Vuna website, including purchases made on either.

Vuna is built on a simple posture: your recruiting season is yours. We collect the minimum needed to run the product, we never sell your information, and you can delete everything at any time.

What we collect **Account information.** Your email address and authentication credentials (or your Apple Sign In identifier).

Content you create. Applications you track (company, role, links, deadlines, stage history), contacts you add (names, companies, notes), and settings.

Forwarded email, if you enable it. Vuna gives you a private forwarding address. If you set up a mail filter to forward recruiting emails to it, we process each forwarded message to suggest updates to your pipeline. We store the extracted fields (sender, company, event type, date) and a short excerpt shown to you as evidence. The raw message body is deleted from our systems within 30 days of processing. We never connect to your mailbox, never see mail you do not forward, and forwarding is entirely optional.

Purchase records. Purchases made in the app are processed by Apple. Purchases made on our website are processed by our payment processor. In both cases our payments provider (RevenueCat) shares transaction records with us (product, date, status). We never see or store your card details.

Basic usage data. Crash reports and feature-level usage events, used only to fix and improve the app.

How we use it To run the product: showing your pipeline, scheduling your reminders, generating suggested updates from forwarded email, and processing your purchase. To communicate with you about your account. To improve the app. Nothing else.

Forwarded email content is processed with the help of a third-party AI service under contract with us; content sent for processing is not used by that provider to train its models under our agreement with them.

What we never do We do not sell your personal information. We do not share it with advertisers or data brokers. We do not use third-party advertising SDKs. We do not read your mailbox. We do not submit applications or send messages on your behalf.

Service providers We use a small set of infrastructure providers to run Vuna: cloud database and authentication, inbound email processing, AI processing for email classification, purchase management, and push notification delivery. Each receives only the data required for its function and is bound by contract to use it only to provide the service to us.

Retention and deletion Your content stays as long as your account does. Raw forwarded email bodies are deleted within 30 days of processing. You can delete individual items anytime, and you can delete your entire account in Settings, which permanently removes your content from our production systems within 30 days. Backup copies expire on a rolling basis within 90 days.

Your rights You can access, correct, export, or delete your information from within the app or by emailing [support email]. If you are in a jurisdiction with specific privacy rights (including the EEA, UK, or California), you may exercise those rights the same way, and we honor them for everyone regardless of location.

Age Vuna is intended for users 13 and older, and is built for college students. We do not knowingly collect information from children under 13; if we learn we have, we delete it.

Security Data is encrypted in transit and at rest. Access to production data is restricted and logged.

Changes If this policy changes materially, we will notify you in the app before the change takes effect.

Contact [Legal entity or sole proprietor name] [support email]