What Hey Vitae collects, why, and who controls it.

This policy applies when you use Hey Vitae as a job seeker, visit our public pages, join or operate a coaching practice, appear in a practice's client records, or contact us.

Functioning Labs LLC is responsible for information used to run Hey Vitae itself: accounts, direct job-seeker workspaces, billing, product security, support, and optional analytics.

A coaching practice may also use Hey Vitae to keep information that it collected from or about its clients. We call that Practice Data. The practice decides why that data is kept and how it is used. Hey Vitae does not own Practice Data; Functioning Labs processes it for the practice as a service provider or processor, where those terms apply. The practice remains responsible for its relationship with the client and its own privacy obligations.

Information you provide:

• Account and profile information: name, email, profile picture, authentication identifiers, settings, and support messages.
• Job-search workspace content: jobs, applications, statuses, notes, resumes, cover letters, interview prep and results, job-search preferences, contacts, and other material you save.
• Email content: messages and attachments delivered to a Hey Vitae mailbox address you create, plus the metadata needed to organize and send replies.
• Browser-extension content: job-posting pages and form fields you choose to capture into Hey Vitae.
• Gmail and Google Calendar content, if you use the Hey Vitae Gmail add-on or the browser extension's Gmail panel: the email or calendar event you have open, and whatever you choose to save from it.
• Public content: anything you publish on a Spotlight page or job-specific share URL.
• Practice information: practice name and settings, team membership, client records, notes, files, custom fields, session records, and other information a practice chooses to store.
• Billing information: Stripe handles payment-card details. We receive information such as plan, subscription and payment status, invoices, and limited card details such as brand and last four digits.
• In the iPhone and Android apps: photos you take to save a job posting or scan a paper resume, voice answers you record for practice (sent for transcription, or on Android 13 and later transcribed on the device), text you choose to save from another app, and files you choose from your phone or cloud storage. The app uses the camera and microphone only when you start one of these, with your permission. If you allow notifications, the app also registers a device push token with us so we can send them.
• In-app purchases: Apple or Google Play processes purchases made in the phone apps and RevenueCat validates them. We receive what was bought, its status and renewal, never your payment details.

Information others provide:

• A coaching practice may give us a client's name, email address, intake details, notes, files, custom fields, session history, and related records. This is information the practice provides and controls; Hey Vitae does not create or supply it.
• People may send messages and attachments to a Hey Vitae mailbox address you created.
• Authentication, payment, analytics, and infrastructure providers send us the account, transaction, device, and diagnostic information needed to provide their part of the service.

Information collected automatically:

• Essential technical data: IP address, request and security logs, device and browser details, and information needed to authenticate you, prevent abuse, and keep the service working. Requests from the phone apps also carry the app's version.
• Product usage: which features you use and when, on the web or in the phone apps, recorded in our own systems to operate, secure, and improve Hey Vitae. The phone apps contain no third-party analytics; the one exception is crash reporting, described under Diagnostics. Events we record on our servers about your use of them reach our analytics providers only if you have enabled Analytics.
• Optional third-party analytics: pages viewed, referrer, approximate location derived from IP, and session interactions, shared with our analytics providers only when Analytics is enabled.
• Diagnostics: error reports, traces, and performance information from infrastructure and error-monitoring services. When a phone app crashes or hits an error, it sends a crash report to PostHog: the error, the app version, the operating system and the device model, tied to a random identifier for that install and never to your account. This happens whether or not Analytics is enabled.

Information we read from public job boards:

• Public job postings: we read openly published listings from employer applicant-tracking systems such as Greenhouse, Lever, Ashby, and Workable, and keep them in a catalog that is shared across Hey Vitae rather than stored in one account.
• What prompts a read: naming a company as a target in your search profile, or saving a job whose link points at one of those systems, tells us which employer's board to read.
• What the catalog holds: employer postings only — job title, company, location, description, and the apply link the employer published. It holds nothing about you, and no other user can see who caused a company to be added.

Hey Vitae is built for job-search and coaching records, not medical files, government identifiers, financial-account numbers, or similarly sensitive records. Please do not add that material unless it is genuinely needed and you have the right to process it.

• Provide, secure, support, and maintain Hey Vitae and sync data across the features you choose to use.
• Process payments, manage subscriptions and practice credits, and keep required transaction records.
• Generate analyses, briefs, suggestions, and drafts through AI features.
• Read public employer job boards and maintain a shared catalog of those postings, so we can suggest open roles matching the search profile you set. Your target companies and the links on jobs you save tell us which boards to read.
• Send account, billing, security, invitation, and other transactional communications.
• Measure and improve the product from usage recorded in our own systems; share that measurement with third-party analytics providers only when you allow optional Analytics, and measure marketing when you allow optional Marketing.
• Detect abuse, prevent fraud, troubleshoot problems, enforce our terms, and comply with law.

We do not sell personal information. We do not use private job-seeker workspace content or Practice Data to train public AI models, and we do not use Practice Data for our own advertising.

Hey Vitae sends the prompt and limited context needed for an AI feature through Vercel AI Gateway or directly to the provider serving that feature. Providers may include Anthropic, OpenAI, Google, AssemblyAI, Perplexity, and Parallel, and may change as the product evolves. What each one receives, and why:

• Anthropic: Your resume, postings, answers and notes, to read them and write feedback.
• OpenAI: The same, plus live practice calls and spoken answers, to run and transcribe them.
• Google: The same, plus answer recordings, for voice feedback.
• AssemblyAI: Recordings of your practice answers, to transcribe them.
• Perplexity: Company names, roles and job searches, to research them.
• Parallel: Facts about a company, to check them.

Requests routed through Vercel AI Gateway go only to providers that have agreed not to use them to train their models; a request that could not be routed that way is not sent. Requests we send directly to OpenAI, such as transcribing a spoken practice answer or running a live practice interview, are covered by OpenAI's API terms, under which API data is not used for training. Recorded practice interviews are transcribed by AssemblyAI, which we have opted out of using them to train its models. Providers may retain requests briefly under their terms, for example to detect abuse.

Before the first AI request, the Hey Vitae iPhone and Android apps ask for your permission, list what is sent, and name the provider that receives each kind of data. You can turn this off in the app's Account page.

Job-seeker AI features may process the resumes, job descriptions, notes, interview material, preferences, or other workspace content you select or that the feature needs. Coaching AI may automatically prepare a coach-only pre-session brief from limited information already available to the connected practice. It may also draft a recap or next steps when a coach asks, using the practice's own session notes. Those drafts do not automatically change a client's workspace, send a message, or assign a task.

The automatic coach brief does not send resume or cover-letter text, private free-text interview reflections, mailbox content, contacts, or account and billing settings to the model. A client's private practice reflection is not sent for the brief, even if the client chose to share that reflection with the practice.

We may store AI inputs and outputs when needed for saved analyses, history, cached briefs, and drafts. AI output can be incomplete, biased, outdated, or wrong. A person should review it before sending, publishing, or relying on it.

A practice may send an invitation or give you a join code, but it does not receive access to your existing Hey Vitae workspace until you accept. The invitation screen explains the current access before you decide. Declining does not remove your job-seeker account.

While connected, every active coach at the practice can use its shared roster to see the workspace information listed on that consent screen. This currently includes tracked jobs and stages, Apply IQ analysis, resumes and cover letters, interview prep, selected interview results, job-search preferences, and the email address used for the invitation. It does not include your mailbox or message threads, contacts, account and billing settings, practice-interview recordings or transcripts, or anything from your camera.

Coaches can add clearly labeled jobs, tasks, shared notes, document comments, suggested documents, and proposed AI rules. A proposed rule does nothing unless you accept it. Coaches cannot apply, send messages as you, edit or delete material you created, change your settings, or act as you. Practice access is logged for you to review.

Your private practice-session reflection stays private unless you choose to share it in Settings. Practice-session scores and summaries are included in the connection either way.

A practice can create an offline client record without inviting the person or linking a Hey Vitae account. That record may include a name, email address, notes, files, custom fields, sessions, packages, outcomes, and other CRM information the practice chooses to add. Hey Vitae does not supply that information, and no invitation is sent unless the practice separately chooses to send one.

Practice-private notes, files, custom fields, internal CRM records, and other Practice Data are visible to authorized members of the practice, not to the client through Hey Vitae. A connected client's live workspace is different: it belongs to the client and remains available to the practice only while the connection is active.

If you are listed in a practice's records and want to access, correct, or delete that Practice Data, contact the practice first. It is the data owner or controller for that record. If you contact Hey Vitae, we may direct or forward the request to the practice and will assist it as required by law and our service-provider role.

A connected client can end a practice's access in Settings. The practice can also close the engagement. In either case, access to the client's live workspace ends immediately for the practice and its connected assistants, and any Job Scout search the practice was running for the client stops.

Ending the connection does not automatically delete Practice Data. The practice may keep its private notes, files, CRM fields, session and package records, outcomes, closing summaries, and other records it created or supplied until it deletes them or asks us to do so, subject to legal retention requirements. That includes resume drafts the practice prepared for the client, which can name employers and roles, and its comments on the client's documents together with the passage each one quotes. It can no longer use the ended connection to read the client's live list of jobs, employers, documents, or other workspace content.

If a practice pays for a client's subscription, we tell the practice whether it is providing that coverage and whether the connection is active. We do not give it the client's payment-card details.

An employer, school, training program, union or other organization can buy Hey Vitae coverage for a group and hand it out as single-use codes. If you redeemed one, that organization is funding your access. It did not create your account and does not administer it.

You choose the email address you redeem on. The organization gives us no list of the people it is covering, so we do not know which name on its roster you are unless you tell it yourself.

What the funding organization sees: aggregate counts for the whole block — how many codes were issued and redeemed, how many people are covered at the moment, how many practice interviews were handed out and used, and whether each code it issued has been redeemed. Outcome figures are withheld until enough people have redeemed for the number not to identify anyone.

What it never sees: your applications, the employers you are tracking, your resumes and cover letters, your interview prep, your practice interviews or their results, your mailbox, your notes, or anything about how your search is going. We do not report any individual's activity or outcome to the organization funding their coverage. There is no view a coach connection would give it either; funding a block does not create one.

The account is yours and it outlives the coverage window. When the window ends, the extra capacity stops and your workspace, documents and history stay with you. You can export or delete your account at any time in Settings without asking the organization, and the organization cannot delete it.

A practice may connect a third-party assistant such as ChatGPT or Claude. When it does, the client is told before connecting, or in their Settings if they are already connected. The assistant can read a summary of each connected client's search: their name, applications and stages, Apply Strength scores and the reasons for them, how often their resume meets what those roles ask for, interviews, intake answers they have sent, the target and pay floor they set, mock interview results including strengths, next steps and any reflections they share, a salary they accepted, and practice totals. It never receives client email addresses or the text of resumes and cover letters. Its reads appear, by date and time, in the client's access record.

Information read through a connected assistant is also processed by the company that provides that assistant under its own terms and privacy practices. The practice chooses and controls that connection and is responsible for its use.

You can also connect an assistant to your own account. It reads only what you approve on the consent screen, which can include the full text of your resume, your saved contacts, and the sender and subject of emails waiting on your reply, and that information is then processed by the assistant's provider under its own terms. You can disconnect it at any time in Settings.

Messages sent to a Hey Vitae mailbox are processed and stored so we can organize them in the workspace and route replies. People who email that address may not have a direct relationship with Hey Vitae, so the account owner is responsible for using the feature lawfully.

The browser extension reads supported page content when you actively use it to capture a job. It sends the selected content to your account; it does not use that permission to track unrelated browsing in the background.

If you use the Hey Vitae Gmail add-on or the browser extension's Gmail panel, the email or calendar event you have open is sent to Hey Vitae to match it to your jobs or clients. For an email, that is the sender, recipients, subject, body text and links, attachment names, date, and reply headers; for an event, its details. Nothing is kept from that look. The email or event is saved only when you choose an action, such as adding it to a job, and is then handled like the rest of your workspace. We do not read your other mail or calendar, and we do not access either in the background.

Hey Vitae's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Gmail or Calendar data, use it for advertising, or use it to train AI models, and people at Hey Vitae do not read it except with your permission, for security, or to comply with law.

Spotlight pages and job-specific share URLs are public when you publish or share them. Anyone with the URL may view or re-share them, and search engines may index public pages. Unpublishing removes the Hey Vitae page, but not screenshots, caches, or copies outside our control.

We group browser storage and related tools into three categories:

• Essential — authentication, security, preference storage, fraud prevention, diagnostics needed to operate the service, and cookieless aggregate measurement (Vercel Analytics and Vercel Speed Insights), which sets no cookies, stores nothing on your device, and builds no lasting profile of you. In the iPhone and Android apps this includes crash reports sent to PostHog: the error, the app and device version, and a random install ID, never your account, with email addresses and web links removed. Always on.
• Analytics — PostHog and Google Analytics, including optional session recording. Off unless you enable Analytics.
• Marketing — campaign, advertising, and attribution tools. Off unless you enable Marketing.

You can change your choice at /privacy-choices. Turning off optional categories does not disable the core product, and it does not stop us recording, in our own systems, which features you use — that is how the product is operated and improved. What it stops is sharing with the third-party tools named above. We keep a record of consent choices so we can honor them and demonstrate compliance.

We disclose information to providers that help us deliver Hey Vitae, limited to what they need for their role:

• Functioning Labs product family — shared account, billing, and optional bundled-access infrastructure.
• Neon — application database and file storage.
• Clerk — sign-in and account authentication: email codes, Google, LinkedIn, and Sign in with Apple in the iPhone app.
• Supabase — shared account records for the Functioning Labs product family, and backup copies of data moved to Neon.
• Vercel — application hosting, performance services, and the AI Gateway that routes model requests.
• Stripe — payments, invoices, subscriptions, and billing management on the web.
• Apple — iPhone app distribution, in-app purchases, and Sign in with Apple.
• Google Play — Android app distribution and in-app purchases.
• Google — the Gmail and Calendar add-on platform, when you install the Hey Vitae add-on.
• RevenueCat — validates and records purchases made in the iPhone and Android apps.
• Expo — delivers push notifications to the phone apps, if you allow them. Apple and Google carry them from there to your phone.
• Anthropic, OpenAI, Google, AssemblyAI, Perplexity, and Parallel — AI and realtime interview providers used for analysis, drafting, research, transcription, feedback on recorded practice answers, and interview features.
• PostHog — product analytics and optional session recording, only when Analytics is enabled; crash reports from the phone apps, which are not linked to your account.
• Google — Tag Manager, Analytics, and campaign measurement, only when the applicable optional category is enabled.
• Sentry — security, error, trace, and performance monitoring.
• Greenhouse, Lever, Ashby, Workable, Workday, Rippling, Personio, Recruitee, Teamtailor, Pinpoint, and JazzHR — public employer job boards we read to build the job catalog. We send them only a company identifier; no information about you is disclosed to them.
• Postmark — transactional email, invitations, and Hey Vitae mailbox delivery.
• Brevo — product updates and marketing email when you opt in.

We may also disclose information during a business transaction, when required by law, to enforce our terms, or to protect users, Functioning Labs, or the public. We do not let service providers use personal information for their own marketing.

Hey Vitae primarily uses US-based infrastructure. Information may be processed in the United States and other countries where our providers operate. When transfer rules apply, we use the safeguards required by applicable law.

For personal data from the European Economic Area, the United Kingdom, or Switzerland, those safeguards are the European Commission's Standard Contractual Clauses (with the UK Addendum and Swiss amendments where they apply), included in our providers' data processing terms, or the EU-U.S. Data Privacy Framework and its UK and Swiss extensions where a provider is certified under it. You can ask us for more information about these safeguards at hello@heyvitae.com.

Direct account and workspace information is generally kept while the account is active. When an account is deleted, we aim to delete or anonymize personal data within roughly 30 days, except for billing, security, fraud-prevention, legal, and backup records we need or are required to retain.

Practice Data is kept until the practice deletes it or asks us to delete it, subject to legal holds and records that must be retained. A practice owner can contact hello@heyvitae.com to close a practice and request deletion while in-product practice deletion is not available.

Backups are kept on a rolling schedule and overwritten in the normal course. Consent, access, billing, security, and audit logs may outlive an account or connection where needed to document permissions, prevent abuse, resolve disputes, or comply with law.

We use reasonable administrative, technical, and physical safeguards, including encryption in transit, scoped credentials, access controls, audit records, and error monitoring. No system is perfectly secure. If a breach affects you, we will notify you when the law requires it.

Depending on where you live, you may have the right to:

• Ask for access to personal information we hold about you.
• Correct inaccurate information.
• Ask us to delete personal information or your account.
• Request a portable copy of information, where applicable.
• Withdraw consent for optional analytics or marketing.
• Object to or restrict certain processing where applicable law provides that right.
• Appeal a decision or complain to a data-protection authority where applicable.

To delete your account, see /delete-account. For a Hey Vitae account or direct job-seeker workspace, use Settings or email hello@heyvitae.com. For Practice Data, contact the practice that collected it. We may need to verify identity and authority before completing a request.

We do not sell personal information for money. Optional advertising or campaign technology may be considered “sharing,” targeted advertising, or a sale under some state laws. Turn off Marketing at /privacy-choices to opt out. We do not discriminate against people for exercising privacy rights.

In the last 12 months, the categories handled may include identifiers, professional and employment information, internet activity, commercial information, communications, user content, approximate location, and inferences. We collect them from users, practices, communications, providers, and product use for the purposes described in Sections 2 and 3, and disclose them to the providers and practices described above.

When Hey Vitae processes Practice Data for a practice, the practice is the business or controller and Functioning Labs acts as its service provider or processor. Requests about that data should go to the practice.

When applicable, we rely on contract performance to provide the service, legitimate interests to secure and improve it, consent for optional analytics and marketing, and legal obligations. Where a practice controls Practice Data, the practice determines its lawful basis and we process the data on its instructions. You may withdraw consent without affecting processing that already occurred lawfully.

Functioning Labs LLC is the controller of direct account information. If you have a concern about how we handle your information, please contact us first at hello@heyvitae.com. The complaint right in Section 16 means the data protection authority where you live or work, or where you believe an infringement occurred (in the UK, the Information Commissioner's Office).

The direct job-seeker product is intended for people 13 and older, or 16 and older in the European Economic Area, the United Kingdom, and Switzerland (or the lower age your country sets for consenting to online services). We do not knowingly collect direct account information from children under those ages. Practice owners and team members must be at least 18. If you believe a child's information was added improperly, contact the practice if it is Practice Data or email us at hello@heyvitae.com.

Hey Vitae may link to Functioning Human, connected AI assistants, and other services. Their own terms and privacy practices apply when you use them. We are not responsible for independent third-party sites merely because Hey Vitae links to them.

We may update this policy as the product or law changes. We will change the effective date above and provide additional notice of material changes when appropriate.

Privacy questions about Hey Vitae can go to hello@heyvitae.com. Questions about a practice's own records should go to that practice first.