Privacy Policy

Who operates Workaholic

Workaholic is a free, personal, experimental service operated by an independent developer. For privacy questions or requests, email heinmoe32@gmail.com.

Age and children’s privacy

Workaholic is a general-audience career tool for adults. It is not directed to children, and you must be at least 18 years old to use it. Workaholic does not knowingly collect personal data from anyone under 18. If the operator learns that an underage person supplied personal data, the account and its data will be deleted. Contact the operator at the address above to report such an account.

Information Workaholic collects

Workaholic handles the information needed to provide the service:

• If you choose Google sign-in, basic Google identity information: an account identifier, name, email address, and profile picture made available through the openid, email, and profile scopes. Workaholic does not request access to Google Drive, Gmail, Calendar, contacts, or other Google product content.
• Your email address when you request a magic-link sign-in, along with account, session, settings, security, and operational metadata.
• Information you add, including Library records, journal entries, impact notes, evidence links, profiles and drafts, job applications and materials, images, contact details, and preferences.
• OAuth grants for AI or Model Context Protocol (MCP) clients you authorize, plus content-free security, audit, and reliability events.
• The separate profile snapshot you deliberately publish. Private source records and unpublished profiles are not part of that public snapshot.

Vercel Web Analytics records aggregate page views only for the public home page, sign-in page, and anonymized public-profile route shape. Query strings, fragments, usernames, custom events, authenticated pages, and these legal pages are excluded by the application before an analytics event is sent.

How information is used

Information is used to:

• authenticate you and maintain your account and preferences;
• store, organize, export, publish, unpublish, and delete information when you request those actions;
• operate, maintain, troubleshoot, secure, and improve the service;
• process actions from AI or MCP clients you selected and authorized, within the access shown on the consent screen; and
• comply with law and respond to security threats.

Google identity information is used only for authentication, account operation, and security. It is not used for advertising, sold, used for credit decisions, or used to train machine-learning models. Workaholic handles information received from Google APIs consistently with the Google API Services User Data Policy and its Limited Use requirements.

When information is shared

Workaholic does not sell personal data. Information is processed by Google for Google sign-in, Supabase for authentication, database, and file storage, and Vercel for application hosting and the limited analytics described above. Those providers process information under their own terms and privacy practices.

A client you authorize can access or change private information only with your consent and within its granted Workaholic permissions. You are responsible for choosing clients you trust and can revoke a connection from Account settings.

Profile information becomes public only when you deliberately publish a snapshot. Information may otherwise be disclosed when reasonably necessary to comply with law, protect people or the service, or investigate abuse or a security incident.

Retention and deletion

Live private information is kept while your account exists or until you remove it. Operationally necessary provider, security, and audit metadata may be retained for reliability, fraud prevention, legal, or security purposes.

Encrypted disaster-recovery snapshots are created at least weekly and before production migrations or destructive provider changes. The four most recent verified weekly snapshots are retained, along with pre-change snapshots until the related rollback window closes. Deleted information may therefore remain in an encrypted snapshot temporarily until that snapshot rotates out. Recovery copies are restricted, are not used as a live product database, and are removed under the operational retention schedule.

Unpublishing removes the public snapshot from Workaholic immediately, but search engines, social platforms, recipients, and other third parties may retain earlier copies or caches outside Workaholic’s control.

Your choices and controls

• Review and correct account and career information in the app.
• Download private profile exports or a complete account archive.
• Unpublish a public profile snapshot.
• Review and revoke authorized client connections.
• Permanently delete your account. Deletion withdraws publication, revokes connections and sessions, removes stored images, and deletes account records, subject to the backup rotation described above.

Security

Workaholic uses reasonable technical and operational safeguards, including encrypted provider connections, access controls, private storage, owner-scoped database policies, bounded operational logs, and restricted recovery copies. No service can promise perfect security, and Workaholic is not end-to-end encrypted.

Changes and contact

The effective date appears at the top of this policy. Material changes will also be communicated through the service or available account contact information when reasonably practicable. If a material change would use previously collected personal data for a new purpose, affirmative consent will be requested when required by law. Questions or requests may be sent to heinmoe32@gmail.com.