Privacy Policy

This Privacy Policy explains how Maana Studio ("we", "us", "our"), registered in the Netherlands (KVK 91191475), Den Haag, collects, uses, stores, and protects your personal data when you use KosmaJobs (the "service"), available via the iOS app and website kosmajobs.com.

Maana Studio is the data controller for the purposes of the General Data Protection Regulation (GDPR). For any privacy-related questions, contact us at kosmajobs@gmail.com.

1. Information we collect

Account information

When you create an account, we collect your email address. Passwords are stored as hashes by our authentication provider, Supabase. We do not store plain-text passwords.

Profile information

To personalise the service for you, we store a professional bio and work preferences (job categories, seniority level, location preferences, contract type, language preferences, and skills). This information is provided voluntarily and can be deleted at any time by deleting your account.

CV / résumé data

If you choose to upload a CV to auto-fill your profile, the document is transmitted securely to a server-side function hosted on Supabase (EU region), which uses the Anthropic Claude API as a sub-processor to extract a professional summary. Your CV content is not stored by KosmaJobs or Anthropic. It is processed in memory and discarded immediately after the summary is generated. Only the extracted text summary (which you can review and edit before saving) may be stored as part of your profile.

Usage data

We store your interaction history within the app (such as job ratings and saved listings) solely to improve the relevance of future recommendations. This data is linked to your account and is deleted when you delete your account.

Push notification token

If you grant notification permissions, we store a push token, your preferred notification hour, and your timezone. This is used only to send you job delivery notifications at your chosen time.

Website waitlist

If you submit your email on kosmajobs.com to join our waitlist, your email is processed by Beehiiv, our newsletter provider. This is subject to Beehiiv's Privacy Policy.

2. Legal basis for processing (GDPR Article 6)

We process your personal data on the following legal bases:

• Contract (Art. 6(1)(b)): processing your account information and profile data is necessary to provide the service you signed up for.
• Legitimate interests (Art. 6(1)(f)): we process usage data to improve the relevance of recommendations, and to maintain the security and integrity of the service.
• Consent (Art. 6(1)(a)): push notifications are only sent where you have explicitly granted permission. You may withdraw consent at any time in your device settings or within the app.

3. How we use your information

• To provide the core service: fetching and personalising job listings for your profile
• To improve the relevance of future recommendations based on your interactions
• To send job delivery notifications at your chosen time (only if enabled)
• To sync your data across devices when you are signed in
• To communicate important service updates

We do not use your data to train AI models, serve third-party advertising, or sell it to any party.

4. Third-party sub-processors

KosmaJobs relies on the following third-party providers to operate:

• Supabase: authentication and cloud database (EU region). Privacy policy
• Anthropic Claude API: server-side AI personalisation and CV processing. Profile data and CV content are processed in real time and are not stored by Anthropic. Privacy policy
• Expo Push: push notification delivery infrastructure. Privacy policy
• Apple App Store: app distribution. Privacy policy
• Beehiiv: waitlist / newsletter management. Privacy policy

All sub-processors are required to process data only on our instructions and in accordance with applicable data protection law.

5. Data storage and security

Your account data is stored on Supabase infrastructure in the European Union. We apply row-level security policies to ensure users can only access their own data. All data is transmitted over HTTPS/TLS.

Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data retention

We retain your personal data for as long as your account is active. If you delete your account, all associated data (profile, interaction history, push tokens, settings) is permanently deleted from our servers within 30 days. Anonymised, aggregated analytics may be retained longer to improve the service.

7. Your rights under GDPR

As a data subject in the European Economic Area, you have the following rights:

• Access (Art. 15): request a copy of the personal data we hold about you
• Rectification (Art. 16): update or correct your profile directly in the app
• Erasure (Art. 17): delete your account and all associated data at any time
• Portability (Art. 20): request an export of your data in a machine-readable format
• Restriction (Art. 18): request that we restrict processing of your data in certain circumstances
• Objection (Art. 21): object to processing based on legitimate interests
• Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, email us at kosmajobs@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Dutch supervisory authority: Autoriteit Persoonsgegevens (AP).

8. Children's privacy

KosmaJobs is not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the email address associated with your account or through a notice in the app at least 14 days before changes take effect. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact and data controller

Maana Studio
Den Haag, Netherlands
KVK: 91191475
kosmajobs@gmail.com