Privacy Policy

InboxJobTracker · Updated 7 October 2026

InboxJobTracker reads your mailbox to work out which messages are replies to job applications, and turns them into a history. Almost all of that happens on your iPhone. This describes the exceptions, exactly.

What stays on your iPhone

• Your mail. Messages are fetched, classified and stored on the device.
• Your application history — employers, roles, stages, dates and the sentence each verdict rests on.
• Your mailbox credentials. An app password or a Microsoft sign-in token is held in the iOS Keychain, restricted to this device and excluded from backups. It is never sent anywhere except to your own mail provider.

What leaves your iPhone, and when

Most mail is decided on the device by rules that need no network. When those rules cannot decide — a few messages out of hundreds — and only if you have an active subscription, the app sends that one message to our service, which passes it to a language model provider:

• the subject line
• the sender's address
• the date
• the message, capped at 4,000 characters, with quoted replies and signatures removed

Never your whole mailbox, and never a message the rules could decide.

That message is fetched from your mailbox at the moment it is sent and is not kept on your phone either: the app stores one sentence per message, not the text. It is sent because a model shown only that sentence is judging the rules' work from the rules' own choice of evidence, and cannot see when that choice was the mistake.

With a subscription this happens automatically after a scan, for a limited number of messages each time — currently thirty — so that the mail the rules could not call does not sit waiting to be noticed. You can turn that off in Settings → AI second opinion, and then nothing is sent until you ask for it on the review screen. Without a subscription nothing is ever sent.

What we store

Our service stores no message content at all. There is no field in our database capable of holding a subject, a sender, a body or an employer's name. What it holds is:

• an identifier derived from your App Store subscription, which is not your name, your email address or anything drawn from your mailbox
• your subscription status and dates
• a count of how many messages you have had read this month

Message content is held in memory for the length of one request and then dropped. Request and response bodies are never written to logs.

The model provider

The message extract is passed to a third-party language model provider to be read. They process it to produce the classification and we do not permit its use for training. We may change provider; the data sent is the same either way.

What we do not do

• No advertising, and no advertising identifiers.
• No analytics or tracking SDKs. The app contains none.
• Nothing is sold or shared with data brokers.
• No profile is built about you.
• Your mail is read read-only. Nothing is marked as read, moved, deleted or replied to.

Deleting your data

Erase history in Settings removes the classified messages from the device. Deleting the app removes everything it stored, including the credentials in the Keychain. To remove the subscription record held by our service, cancel the subscription and write to the address below; there is no message content to delete because none was kept.

Children

The app is not directed at children and collects nothing that would identify one.

Changes

If this policy changes in a way that affects what leaves your device, the app will say so before the change takes effect.

Contact

Questions about this policy: support@whaleproduction.com