Privacy policy

In short

• BewerbungsPilot is a Windows app that runs only on your own PC. It has no server, no user accounts, no tracking and no analytics.
• The developer of BewerbungsPilot does not receive any of your data — not your profile, not your documents, not your emails and not your Google account data.
• The app sends data only to the services you use through it: the job board of the Federal Employment Agency, the AI helper you chose, and your email provider (Google, if you use Sign in with Google). Each of them is described below.

Who is responsible

BewerbungsPilot is developed by Robert Kovach as a noncommercial open-source project. Because the app runs entirely on your PC and sends nothing to the developer, the developer does not process your personal data. Questions about this policy: open an issue on GitHub.

Data saved on your PC

Everything you enter or create in the app is saved only in %LOCALAPPDATA%\BewerbungsPilot on your PC: your profile (personal details, education, experience, skills, languages, wishes, stories), your CV file, photo and documents, job offers you found or added, application packages, statuses and settings, and a technical log file (without the contents of your letters, emails or CV). You can delete all of it by deleting that folder.

Data sent to other services

Federal Employment Agency job board

To search for job offers, the app sends your job titles, place, search radius and search filters to rest.arbeitsagentur.de, the public job board of the Bundesagentur für Arbeit. No name or contact data is sent.

Websites of links you paste

If you add a job offer with only a link (not from the Federal Employment Agency), the app opens that page in a separate, empty browser profile on your computer to read the offer — the website sees a normal page visit from your computer, without your cookies or accounts. Nothing about you is sent to it.

Your AI helper (Claude by Anthropic or ChatGPT by OpenAI)

The AI helper runs with your own Claude or ChatGPT account, which you sign in to inside the app. The app sends it the text needed for each task:

• when reading your CV: the CV (as a file for Claude, as text for ChatGPT);
• when writing an application or scoring a job offer: the job offer and your education, experience, skills, languages, city and confirmed stories — never your name, email address, phone number, street, postal code, birth date, nationality, photo or anything on your "never mention" list;
• when writing a reply to an offer: the job title, the amounts you enter and the same profile data as above.

What the provider does with it is governed by your agreement with them: Anthropic privacy policy, OpenAI privacy policy. On personal ChatGPT plans you can stop your texts from being used for training under ChatGPT Settings → Data controls → "Improve the model for everyone".

Your email provider

When you send an application, a reminder or a reply, the email (with its attachments) goes from your PC to your own email provider, which delivers it to the employer and puts a copy in your mailbox. For providers other than Gmail, the app uses the app password you enter; it is stored on your PC encrypted with Windows (DPAPI) for your Windows user only.

Google user data

If you connect a Gmail address with Sign in with Google, the following applies.

What the app accesses

• https://www.googleapis.com/auth/gmail.send — permission to send email from your Gmail account.
• openid and email — your Gmail address, so it can be used as the sender address and shown to you as the connected account.

The app cannot read, search, change or delete any email in your mailbox, and it does not ask for such access.

How the app uses it

The app uses the send permission only to send emails that you have seen and approved in the app by clicking Send: job applications (with the PDF documents attached and a blind copy to yourself), follow-up reminders and replies to employers. It uses your Gmail address only as the sender address and to show which account is connected. Google's answer to a sent email (a message and conversation number) is kept so that a later reminder or reply joins the same conversation.

Storage and protection

The access key from Google (refresh token) is stored only on your PC, encrypted with Windows (DPAPI) for your Windows user. Your Gmail address is stored in the app's settings on your PC. Nothing from your Google account is sent to the developer, to the AI helper or to any other third party. All connections to Google use HTTPS.

Sharing

Data received from Google is not shared, sold or transferred to anyone. It is not used for advertising, and it is not used to develop, improve or train AI or machine-learning models.

Retention and deletion

The key and the address stay on your PC until you disconnect. When you click Disconnect in the app's Settings, or switch to another account or to a password mailbox, the app asks Google to revoke the permission and deletes the key from your PC. You can also remove the app's access at any time at myaccount.google.com/permissions.

Limited Use

BewerbungsPilot's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Downloads during installation

The installer may install Node.js from the official Windows package manager (winget). When you choose an AI helper, the app installs it from its official source (Claude: claude.ai; ChatGPT: the @openai/codex package from npm). These downloads contain no personal data.

Children

BewerbungsPilot is meant for adults looking for a job and is not directed at children.

Changes

Changes to this policy are published on this page with a new effective date. The history of every change is visible in the source code repository.