Privacy policy

Last updated: 22 October 2026

hireXlog ("we", "us") is a mobile app that tracks your job search using the job-related emails in your Gmail account. This policy explains what we access, what we store, how we use it, and how you can delete it.

Google user data

What we access

When you connect Gmail, we ask Google for the gmail.readonly permission. This lets hireXlog read your messages. It can't send, delete, label or change any email. We also receive the email address of the Gmail account you connect.

How we use it

We read your messages only to find job-search emails, such as application confirmations and status updates, interview invitations and calendar invites, job alerts, and LinkedIn connection notices. We use them only to show you your applications, interviews, jobs to apply to and new connections in the app.

What we store

For each job-related email we store:

• Gmail's ID for the message, the sender, the subject and the date received.
• The details we pull from it: company, role, location, status, interview date and round, job alert listings, and the names and headlines of people who accepted your connection requests.

We don't store the full text of your emails, and we don't keep anything from emails that aren't about your job search. To keep syncing, we store a Google access token, encrypted with AES-256.

Who we share it with

We don't sell your data, use it for advertising, or share it with data brokers. Nobody at hireXlog reads your emails unless you ask us to (for example, to fix a problem you reported), it's needed for security, or the law requires it.

Optional AI help. If you add your own OpenAI or Anthropic (Claude) API key in the app, hireXlog can send a small number of job-related emails that its built-in rules couldn't sort (from calendar invites and companies you've written to) to that provider, under your key, so it can tell whether the email is about an interview, a next step or a rejection. We send only what's needed for that answer. The provider's own terms and privacy policy apply. If you don't add a key, nothing is sent to an AI provider. You can remove your key at any time.

We also use hosting and database providers to run the service. They store data on our behalf and don't use it for their own purposes.

hireXlog's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Other data we store

• Your account email address and a hashed copy of your password. We never store the password itself.
• Your OpenAI or Anthropic API key if you add one, encrypted. We never show it back to you in full.

How long we keep it

We keep your data while you have an account. If you disconnect Gmail, we revoke hireXlog's access at Google and delete the stored token. Your existing tracked records stay so you can still see them. If you delete your account in the app, we permanently delete your account and everything stored for it, including every record above. You can also revoke hireXlog's access at any time from your Google Account settings.

Security

All traffic between the app and our servers uses HTTPS. Google tokens and AI keys are encrypted at rest. Passwords are stored with BCrypt hashing.

Children

hireXlog isn't meant for anyone under 16.

Changes

If we change this policy, we'll update the date above. If we change how we use Google user data, we'll tell you in the app first.

Contact

Questions or requests: hello@hirexlog.com