NextStep helps you keep track of job applications, tailor your CV and write cover letters. This page explains what data the app handles and what it does with it. Last updated: 15 October 2026.
Google sign-in: your name, email address and a unique account id, used only to sign you in and keep your data separate from everyone else's.
Your CV and generated documents: the CV you upload, the structure we read from it, and the CVs and cover letters you generate, with the company, position and the start of the job description you pasted.
Your Gemini API key: encrypted in your browser with a passphrase only you know, before it is saved. We cannot read it.
Application records: when you choose to scan Gmail, the company, position, status, date and a short subject or summary for each job-related email.
If you connect Gmail, the app asks for read-only access (the gmail.readonly permission). Access is requested only when you press the scan button and is used for that scan only. We do not store your Gmail access tokens. Emails are read on our server in memory to find job-related messages, and then discarded. Only the application details listed above are saved, in your private space. We never send, delete or change your email.
Your data is stored in Google Firebase (Firestore) under your own account id, protected by rules that let only you read or write it. The server that does the processing keeps no database and keeps no copy of your data after a request ends. Your Gemini key is sent with each AI request over an encrypted connection, used for that request only and not logged.
To tailor your CV and write cover letters, the text of your CV and the job description are sent to Google's Gemini service using your own Gemini key, under your own Google AI terms.
We do not sell your data and do not share it with anyone, except the service providers that run the app (Google Firebase, Google Gemini through your own key, and the web host). Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements: Gmail data is used only to provide the job-tracking feature you see in the app, is not used for advertising, and is not transferred to others except as needed to provide that feature or as required by law.
You can delete your saved Gemini key and generated documents inside the app. You can revoke the app's Gmail access at any time at myaccount.google.com/permissions. To have all your data deleted, email the contact below from your signed-in address.
jobtracker.app.dev@gmail.com