Michi Privacy Policy
DRAFT: this policy is a placeholder and has not been reviewed by a solicitor.
Last updated: [date]
Paolo Farinella ("we") runs Michi and is the controller of your personal data. Contact: hello@michicareer.com.
What we collect, and why
| Data | Why | Kept |
|---|---|---|
| Your email address and sign-in details (email, Apple or Google) | Your account | Until you delete your account |
| Your CV or resume, LinkedIn profile and career ladder files | To read your roles, skills, achievements and the criteria of your ladder. The file is read once and deleted. Neither the file nor its full text is stored. | Only what Michi builds from it (your roles, skills and wins, or the ladder's criteria): until you delete them or your account |
| Your wins, goals, plans, job ads, cover letters, interview preparation and CV rewrites | The service you asked for | Until you delete them or your account |
| Your choices: terms and AI consent (version and date), age confirmation, language, reminders, "Help improve Michi" | Running the service and recording your consent | Until you delete your account (reminder settings stay on your phone) |
| Usage records: which AI features you used, when, and their cost and outcome; never your text | Allowances, fair-use limits, our costs, fixing problems | Up to 400 days, or until you delete your account |
| Anonymous usage events (for example, a screen was opened), only if you turn on "Help improve Michi" in Preferences. It is off unless you turn it on | Improving Michi | Until you delete your account |
| Subscription status (from Apple, through RevenueCat) | Giving you Plus | Until you delete your account |
| A one-way code made from your email address (a hash), and moderation records | Enforcing our rules, including after an account is deleted | [solicitor to confirm: retention of strikes and bans after deletion] |
| Text that our automated check flagged | Human review of the flag | Up to 30 days, or until the review is decided. Text flagged as illegal is never stored |
| Crash reports (device model, OS version, error details; no CV or wins) | Fixing crashes | Sentry's retention period [to confirm] |
Your text goes to an AI provider in the United States. To read your CV and LinkedIn text, score your wins, read job ads and write your plans, cover letters and CV rewrites, the text is sent to Anthropic (the Claude models), based in the US. Under its commercial terms, Anthropic does not use this content to train its models. It receives an anonymous identifier for your account, not your name or email. [solicitor to confirm: transfer safeguards and Anthropic's retention.]
What not to add. Michi only needs your work history. Please leave out health details, religion, political views, union membership, sexual life, ethnicity, ID numbers and financial details, even if your CV or resume has them. If a file you add contains them, Michi does not keep the file or its text, and does not add them to your profile.
Other people in your content. Your wins and job ads may mention colleagues, managers or employers. Keep this to what you need, and do not add anything confidential you are not allowed to share. This content is private to your account and is never shown to anyone else.
Legal bases. [solicitor to confirm: contract for the service; consent for sending your content to the AI provider (asked before first use) and for "Help improve Michi"; legitimate interests for safety, fraud prevention and moderation.]
Who we share it with (processors)
- Supabase (database, sign-in, hosting of our server functions; EU, Ireland)
- Anthropic (the AI that reads your text and writes Michi's output; US)
- Resend (sign-in codes and account emails)
- Sentry (crash reports; EU region)
- RevenueCat (subscription status; receives a purchase identifier and your Michi user id, not your CV or wins)
- Apple (payments, app distribution, Sign in with Apple; we never see your card details)
- Google (Sign in with Google, if you use it)
Some providers process data outside the UK and EEA; we rely on approved safeguards such as standard contractual clauses. [to confirm with each provider's data processing terms]
Automated decisions
An automated check flags content that may break our rules (illegal, abusive or sexual content). Depending on the case and earlier flags it can warn you, pause your account for a few days, or place it on hold for a human review; nothing permanent happens without a human review. We tell you in the app and by email. You can contest any flag at hello@michicareer.com.
Your rights
You can see and correct your data in the app, delete any item, or delete your account in Settings > Account to remove your account and everything in it. To get a copy of your data, or to object to or restrict how we use it, email hello@michicareer.com and we will reply within one month. You can withdraw consent at any time: turn off "Help improve Michi" in Preferences, or stop using the AI features and delete your account.
Where you live
We are based in the United Kingdom, so UK data protection law applies to how we handle your data wherever you are. You also have the rights your own country gives you:
- United States. [solicitor to confirm: state privacy laws that apply (for example California) and the wording they require. We do not sell or share your personal data for advertising.]
- Canada. [solicitor to confirm: PIPEDA and, for residents of Quebec, Law 25 (including the person responsible for personal information and cross-border transfer notice).]
- Australia. [solicitor to confirm: Australian Privacy Principles, including disclosure to overseas recipients, and how to complain to the OAIC.]
- Hong Kong. [solicitor to confirm: Personal Data (Privacy) Ordinance, including transfers outside Hong Kong and how to complain to the PCPD.]
If you are unhappy with how we handled your data, email hello@michicareer.com first. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or to the authority in your country.
Children
Michi is for adults only (18+). If we learn a user is under 18 we will delete the account.
Security
Traffic is encrypted. Your data is private to your account; access to stored data is restricted. Uploaded files are not stored, and neither is their full text.
Changes
We will tell you in the app about material changes.