Short version: we collect the minimum, we sell nothing, and your journal is never training data. The long version below says the same thing with more words.

On this website

No cookies, no trackers. This site sets no cookies and loads no third-party analytics or fonts.
Your account: we store your email address and when you signed up. That is the entire account record. There is no password, because sign-in is by emailed link or Google.
Abuse protection: signup requests are rate-limited using a salted cryptographic hash of the request IP. Raw IP addresses are never stored.

In the product (beta)

Account data: email and name, for signing in.
Journal entries and resumes: stored encrypted at rest, isolated per-account with database-level row security. This is your data; we're the custodian.
AI processing: when you use tailoring or auto-tagging, the relevant entries are sent to our AI provider (Anthropic) to generate your result. They are processed to serve your request — not to train models. We never sell or share your journal.
Payments: handled by Stripe, Apple, or Google via RevenueCat. We never see card numbers.
Product analytics: minimal, aggregate event counts to understand what's used. Never the content of your journal.

Your rights

Export — take your journal and resumes with you, anytime.
Delete — deleting your account permanently removes your data from production within 30 days, backups within 90.
Ask — email hello@flexmywork.com and a human answers.

Changes

If this policy changes materially, we'll email account holders before the change takes effect and note it in the changelog.