Privacy Policy

1. Who we are

RoleFit is an iOS app developed and published by Gerard Rodríguez, an independent developer based in Spain. For the purposes of the EU General Data Protection Regulation (GDPR), the developer is the data controller for any personal data described in this policy — which, as explained below, is almost none.

You can reach us at gerodriguez26@gmail.com.

2. What data RoleFit handles

RoleFit is a career tool, so you will naturally put a lot about yourself into it. All of it is handled on your device. The table below describes what the app stores locally, so you know exactly what lives in it.

None of the above is transmitted to us. There is no RoleFit account to create, so there is no profile of you on any server we control.

3. Where your data is stored

On your device

Everything listed above is stored in the app's private database on your iPhone, protected by iOS app sandboxing and the device's own encryption. If you use an iPhone backup (to iCloud or to a computer), that data is included in the backup, under Apple's terms and your own settings.

iCloud sync

RoleFit is built to synchronise your data across your own devices using Apple's CloudKit private database. When this feature is available and you switch it on, your data goes to your personal iCloud account, under your Apple Account. RoleFit has no access to that container, no key to it, and no ability to read it. Apple's handling of iCloud data is governed by the Apple Privacy Policy.

Sync is optional and off unless you enable it. The Sync screen inside the app always shows its current status. In version 1.0 it is not available at all, so in practice nothing currently leaves your device this way — the description above applies from the update that enables it.

Backups you create

If you export a backup from within RoleFit, the file is written to your device with complete file protection, meaning it cannot be read while the device is locked. Where you then move or share that file is entirely your decision.

4. What RoleFit never does

These are properties of how the app is built, not promises about how we intend to behave:

• No account, no sign-up, no password.
• No RoleFit server ever receives your data. There is no backend to receive it.
• No third-party analytics, attribution or advertising SDKs. The app contains no third-party code of any kind.
• No tracking of you across other apps or websites, and no advertising identifier is read.
• No selling, renting or sharing of your data with anyone.
• No sending of your resume, cover letters, messages or profile anywhere on RoleFit's initiative. Exporting or sharing always hands the file to the system share sheet, at your request.
• No location tracking, no contact list access, no calendar access, no microphone or camera access.

5. Connections the app makes

RoleFit is close to fully offline. It makes network connections in exactly three situations, and never to a server we operate:

a) Fetching a job posting you asked it to import

When you paste a job link, RoleFit downloads that page so it can read the posting text. The request goes directly to that website — for example LinkedIn, Greenhouse, Lever, Workday, Ashby or a company careers page — and that site will see the request in the way it sees any visit: its own server logs, IP address and similar. RoleFit sends no information about you with the request, and the connection is made with an isolated, non-persistent session, so no cookies or credentials are stored or carried between imports. Those sites' own privacy policies apply to what they log.

If you import by PDF or by pasting text instead, no network request is made at all.

b) The App Store, for subscriptions

Purchases and subscription status are handled by Apple through StoreKit. RoleFit asks Apple whether an active subscription exists; it never sees or stores your payment details, card number, or Apple Account credentials. See section 9.

c) iCloud, if you enable sync

As described in section 3 — to your own iCloud account, not to us.

6. Permissions

RoleFit asks for one permission: notifications, and only so it can remind you about follow-ups, deadlines and interviews you have set up. Notifications are scheduled locally on your device — there is no push server, and you will never receive a promotional or re-engagement notification. You can decline the permission, or disable any individual category in Settings, and the app remains fully usable.

The app also uses background app refresh, if you allow it, to keep reminders and widget data current. No data leaves the device during that refresh.

Beyond that, RoleFit declares in its App Privacy Manifest that it reads UserDefaults (only values the app itself wrote), file timestamps and available disk space (only to report backup file sizes and ages, and to avoid starting a backup that cannot finish). None of these is used to identify you or your device.

7. Analytics and tracking

RoleFit records product events — such as "a resume was generated" or "an application changed status" — to your device's own system log, using Apple's unified logging. These entries stay on the device, are never uploaded, and contain no personal content: they record that an action happened, not what was in it.

There is no analytics vendor, no crash reporting SDK, no attribution SDK and no advertising SDK anywhere in the app. RoleFit does not track you, and its Privacy Manifest declares no tracking domains and no collected data types.

8. Third-party code

RoleFit is built entirely on Apple's own frameworks and ships no third-party libraries at all. That is a deliberate design decision and it is the reason this policy can be as specific as it is: there is no dependency in the app capable of collecting anything without our knowledge.

9. Subscriptions

RoleFit is free to use, with an optional premium subscription. All payment processing is performed by Apple, not by us. We never see your name, billing address, payment method or Apple Account details.

What RoleFit stores locally is a cached answer to a single question: whether an active entitlement exists. Apple's handling of your purchase data is covered by the Apple Privacy Policy. Purchase terms are set out in our Terms of Service.

10. Retention and deletion

Because your data never leaves your device, retention is entirely under your control:

• Delete individual records — profile entries, jobs, applications and documents can each be deleted inside the app at any time.
• Delete everything — removing the app from your iPhone deletes its database and all local files with it.
• iCloud — if you enabled sync, you can also remove RoleFit's data from your Apple Account in iOS Settings → your name → iCloud → Manage Account Storage.

There is no server-side copy for us to delete, and therefore no deletion request you need to send us. If you email us for support, we retain that correspondence only for as long as needed to answer you.

11. Security

RoleFit relies on the protections iOS provides: app sandboxing, device-level encryption, and Data Protection for files the app writes. Backup files are written with complete file protection, so they are unreadable while the device is locked. Job postings are fetched over HTTPS where the source site supports it.

The most meaningful security property of RoleFit is architectural: there is no server holding your career data, so there is no server to breach. Keeping your device updated and protected with a passcode or biometrics is the main thing that protects the data inside the app.

12. Your rights

If you are in the European Economic Area or the United Kingdom, the GDPR gives you rights of access, rectification, erasure, restriction, portability and objection over your personal data.

In RoleFit's case, these rights are satisfied by the design of the app rather than by a request process: your data is in your possession at all times. You can view all of it in the app, edit or correct any of it, export a backup of it, and delete any part or all of it — without asking anyone's permission and without a waiting period. We hold no copy, so there is nothing for us to disclose, correct or erase on your behalf.

If you contact support by email, that correspondence is processed on the basis of our legitimate interest in answering you. You may ask us to delete it at any time by writing to gerodriguez26@gmail.com. You also have the right to lodge a complaint with your local supervisory authority — in Spain, the Agencia Española de Protección de Datos.

International transfers: we transfer nothing, because we receive nothing. If you enable iCloud sync, Apple may store your data in data centres in various countries under its own safeguards.

13. Children

RoleFit is a professional tool intended for people in or entering the workforce. It is not directed at children, and we do not knowingly collect any data from anyone — of any age. If a child uses the app, their data remains on their device exactly as anyone else's would.

14. Changes to this policy

If RoleFit ever changes in a way that affects this policy — for example if a future version introduces an optional feature that sends data somewhere — we will update this page, change the effective date at the top, and describe the change in the app's release notes. Any change that would involve collecting personal data would be introduced as an opt-in, never enabled silently.

15. Contact

Questions about this policy, or about anything else in the app:

Gerard Rodríguez
gerodriguez26@gmail.com

We aim to reply within a few business days.