Privacy.

We don't collect your data

We don't run a server that receives your files, and the app has no account with us. It has no analytics, no crash reporting, no ads and no tracking. It doesn't check for updates in the background. When the app makes videos, it turns off the video renderer's own usage reporting.

Your folder

• Your profile, resumes, jobs, scores, letters, filed emails and settings are plain files in a folder on your computer. Setup suggests a folder called JobCairn in your home folder.
• You can open, back up, move or delete that folder like any other.
• A few app settings, and any saved passwords, live in the app's own folder in your Mac's Library. Saved passwords are encrypted with a key kept in your Mac's Keychain.

What goes to Claude, and when

• Claude runs through Claude Code on your Mac, signed in to your own Claude account. When you ask for something, such as a score, a tailored resume or company research, Claude reads the files that piece of work needs and sends them to Anthropic to do it.
• Job searches, company research and study guides read the public web. They don't read your resumes, emails or private documents. They get your search settings and public facts about the company.
• One thing can start on its own: when you drop a file into the Drop box and JobCairn can't tell where it belongs, it may ask Claude to look at a copy of that one file. This only happens on a Claude subscription plan. Files JobCairn recognises as identity or employment documents are never sent.
• What Claude reads is handled by Anthropic under your account's terms and Anthropic's privacy policy, not ours. Claude Code is Anthropic's program.

Locked folders

• Your identity documents and employment records sit in two locked folders. JobCairn writes rules into your folder's Claude settings that stop Claude Code from reading them.
• If Claude needs something inside, it asks and says what for. You allow it for 15, 30, 60 or 120 minutes, or deny it. When the time is up, the folder locks again.
• Every lock, unlock and request is listed on the Privacy screen.
• A locked folder is read aloud only while it's unlocked, and that audio is deleted when it locks again.

Gmail (optional)

• If you connect Gmail, the app connects to Gmail's mail servers with an app password you create. It saves job email into your folder, filed under each job.
• Images in emails are blocked until you choose Load images, which loads them from wherever the sender put them.
• If you turn on background checking, your Mac checks for new mail on a schedule while you're signed in.
• Nothing is sent until you approve it. Disconnecting removes the saved app password.

Chrome (optional)

• If you connect Chrome, a browser helper opens job boards you choose in your own Chrome, with your own sign-ins, and reads the ads. It doesn't apply, save jobs or message anyone.
• The ads it reads are saved in your folder, where Claude can read them to score and tailor.

Other connections the app makes

Only when you ask for them:

• When you paste a link from an applicant system such as Greenhouse or Lever, the app fetches that job's public details.
• When you install the voice, the voice model downloads once from Hugging Face. After that, the voice runs on your Mac without the internet.
• When you install the browser helper, it downloads from the npm registry.

This website

This site loads no analytics, cookies or third-party scripts. It's hosted on GitHub Pages, and GitHub may keep standard server logs. See GitHub's privacy statement. GitHub Discussions are public, so don't post personal details there.

Deleting your data

Delete your JobCairn folder and the app. To remove a saved Gmail app password first, disconnect Gmail in Settings. You can also revoke the app password in your Google account.

Questions

Ask in GitHub Discussions, without personal details. See also the Terms of use.