Privacy Policy

1. Introduction

Rung ("we," "our," or "us") is an AI-powered nursing career companion that helps nurses find jobs, build resumes, and prepare for interviews. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use the Rung mobile application (the "App").

By using Rung, you agree to the collection and use of information as described in this policy. If you do not agree with this policy, please do not use the App.

2. Information We Collect

We collect the following categories of information, organized by Apple's privacy data categories:

2.1. Contact Information

• Email address — collected when you create an account (via email/password or Apple Sign-In). Used for authentication, account recovery, and service communications.
• Name — optionally provided during profile setup. Used to personalize your experience and pre-fill resume content.

2.2. Identifiers

• User ID — a unique identifier assigned to your account. Used internally to link your data across app features and analytics.

2.3. Location

• Coarse location — collected with your explicit permission via GPS opt-in. Used solely to show nursing job listings near you. We do not collect precise location data.

2.4. Purchases

• Purchase history — subscription and consumable purchase records processed through Apple's App Store and managed by RevenueCat. Used to determine your subscription status and consumable balances.

2.5. Usage Data

• Product interaction — how you navigate and interact with the App (screens viewed, features used, buttons tapped). Collected via PostHog for analytics purposes.
• Other usage data — feature flag evaluations and session replay data (recorded for 10% of sessions). Collected via PostHog to improve the App experience.

2.6. Diagnostics

• Crash data — information about application crashes, including stack traces and device state. Collected via Sentry to identify and fix bugs.
• Performance data — app startup time, screen load times, and transaction traces. Collected via Sentry to monitor and improve performance.
• Other diagnostic data — additional technical information related to app stability. Collected via Sentry and PLCrashReporter.

2.7. User Content

• Resumes, cover letters, and interview responses — content you create or provide for AI-assisted features. This content is processed by our AI services to generate suggestions and is stored in your account for your continued use.

2.8. Search History

• Job search queries — your search terms, filters, and location preferences. Used to personalize job recommendations and improve search results.

3. How We Use Your Information

We use your information for the following purposes:

• App functionality — to provide core features including job search, resume building, interview preparation, and career guidance.
• AI features — to power AI-assisted content generation (resumes, cover letters, interview prep, career strategy, follow-up emails, SOAR workshop, and match analysis). Your content is sent to our AI processor (Anthropic) via secure server-side API calls. See Section 4.5 for details.
• Analytics — to understand how the App is used and improve the experience for all users.
• Diagnostics — to detect, investigate, and resolve technical issues.
• Personalization — to tailor job recommendations and search results to your preferences and location.
• Account management — to manage your subscription, process purchases, and communicate about your account.

4. Third-Party Services

We use the following third-party services to operate the App. Each service receives only the data necessary for its function.

4.1. Supabase (Authentication, Database, Storage)

Supabase provides our authentication system, database, and file storage. Your account information, profile data, resumes, saved jobs, and search history are stored in Supabase's infrastructure.

• Data processed: Email, password hash, Apple ID token, user ID, profile information, resumes, saved jobs, search history, user documents.
• Retention: Account lifetime plus 30 days after account deletion.
• Privacy policy: supabase.com/privacy

4.2. RevenueCat (Purchase Processing)

RevenueCat manages subscription and consumable purchase processing, syncing purchase status between Apple's App Store and our backend.

• Data processed: Purchase history, subscription status, transaction identifiers, Apple receipt data.
• Retention: 180 days after account deletion.
• Note: Rung links your purchases to your user identity to manage subscription entitlements.
• Privacy policy: revenuecat.com/privacy

4.3. PostHog (Analytics and Session Replay)

PostHog provides product analytics, feature flags, and session replay. Session replay is enabled for approximately 10% of sessions and records screen interactions (with sensitive inputs masked).

• Data processed: Product interaction events, session replay recordings (10% sample rate), feature flag evaluations, user properties.
• Retention: 1 year.
• Note: Email and password fields are masked in session replays. Analytics data is linked to your user identity for cohort analysis.
• Privacy policy: posthog.com/privacy

4.4. Sentry (Crash Reporting and Performance Monitoring)

Sentry collects crash reports and performance metrics to help us maintain App stability and performance.

• Data processed: Crash data, performance traces, device information (model, OS version, memory), breadcrumbs (navigation events).
• Retention: 90 days.
• Note: Crash and performance data is linked to your user identity to help diagnose user-reported issues.
• Privacy policy: sentry.io/privacy

4.5. Anthropic (AI Data Processing)

Rung uses Anthropic's Claude AI to power AI-assisted features including resume generation, cover letter writing, interview preparation, career strategy, follow-up email drafting, SOAR workshop, and job match analysis.

• Data processed: Job descriptions, profile information, resume content, cover letter content, and interview responses — only the data relevant to the specific AI feature you are using.
• How it works: Your data is sent to Anthropic's API via our secure server-side Edge Functions (Supabase). Data is processed in real-time and is not stored by Anthropic after processing.
• Model training: Your data is not used to train Anthropic's AI models. Anthropic's API usage policy prohibits using API inputs for model training.
• Consent: AI features require your explicit consent before any data is sent to Anthropic. You can withdraw this consent at any time in the App's settings.
• Privacy policy: anthropic.com/privacy

4.6. JSearch API (External Job Listings)

JSearch provides external nursing job listing data.

• Data processed: Job search queries (keywords, location, filters).
• Retention: Not stored. Queries are passed through our server and are not retained by JSearch.

4.7. USAJOBS API (Federal Job Listings)

USAJOBS provides federal nursing job listing data from the U.S. Office of Personnel Management.

• Data processed: Job search queries (keywords, location, filters).
• Retention: Not stored. Queries are passed through our server and are not retained.

5. Data Retention

We retain your data for the periods described below. After your account is deleted, data is removed within the stated timeframe.

6. Data Sharing

We do not sell your personal information to third parties.

We do not share your data with advertisers or ad networks.

We do not use your data for cross-app tracking.

Your data is shared only with the third-party service providers listed in Section 4, solely for the purposes described in this policy. Each provider acts as a data processor on our behalf and is contractually obligated to handle your data in accordance with their published privacy policies.

7. Your Rights

You have the following rights regarding your personal information:

• Account deletion — you can delete your account at any time from Settings in the App. This will initiate deletion of your data across all services within the retention periods described in Section 5.
• Data export — you may request a copy of your personal data by contacting us at the address below.
• AI consent withdrawal — you can withdraw consent for AI features at any time in the App's settings. Withdrawing consent will disable AI-powered features but will not affect your ability to use other App features.
• Location permission — you can revoke location access at any time through your device's Settings. The App will continue to function using your manually entered location preferences.
• Analytics opt-out — you can request to opt out of analytics data collection by contacting us.

To exercise any of these rights, contact us using the information in Section 10.

8. Children's Privacy

Rung is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete that information. If you believe a child under 13 may have provided us with personal information, please contact us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. For significant changes, we may provide additional notice within the App. Your continued use of Rung after any changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us:

• Email: privacy@tryrung.app