Privacy Policy

3. Who Sees Your Data

Your data is shared with the following service providers (called "subprocessors", except Cerebras) strictly to make the Service work:

• Supabase — hosts our database and authentication. Your account, resume, and application data live here.
• Vercel — hosts the web application.
• Anthropic (Claude) — processes the text you give our AI features (your resume, job descriptions, LinkedIn profile text you paste or link, job offers you ask us to review, and your mock-interview answers) and, if you provided them, your self-attested security-clearance details (level, polygraph, status), citizenship, and work authorization, to generate match scores, tailored resumes, cover letters, interview prep, and our other AI features. It also reads scanned or photographed resumes you upload so we can pull out the text, drafts answers to application questions when you ask it to, powers the Climbr AI chat, and helps us sort and answer messages you send our support team. It also reads the text of application questions (never your personal details) so the extension and app can tell what they ask.
• Cerebras — runs an open-source AI model for us. We use it for most of our match scoring and resume tailoring, and for resume feedback, skill-gap and LinkedIn checks, detecting your field and skills, and reading job postings. It receives your resume text, the job posting, the LinkedIn headline and About text you paste into our LinkedIn checker, and — if you provided them — your self-attested security-clearance details, citizenship, and work authorization, your skills, and any answers you give to tailoring's accuracy questions.
• Amazon Web Services (Amazon Bedrock) — runs some of the same AI models for us (Anthropic's Claude and the open-source model Cerebras runs). We use it for part of our match scoring, including overnight scoring of new jobs for you, and it may also handle some of our resume features, such as tailoring, cover letters, the resume builder, and reading the work history in your resume. When Cerebras can't handle a request, it may also handle LinkedIn checks, detecting your field, job insights and role tips, reading job postings in our extension, and sorting the recruiter emails you forward to us. For those it receives the same data Cerebras would, plus the text of those emails. It receives the same kinds of data as above for the requests it handles, including your resume text, the job posting, the application questions you ask Climbr AI to answer and the parts of your details they need, your answers to tailoring's accuracy questions, what you enter in our resume builder, and — if you provided them — your self-attested security-clearance details, citizenship, and work authorization, and your skills. It also reads the text of application questions (never your personal details) so the extension and app can tell what they ask. AWS may handle these requests in data centers outside the United States. For all three AI providers: we send each one the data the feature you're using works from, and that can include the contact details at the top of your resume.
• Apify — if you give us your LinkedIn profile address instead of pasting your profile, Apify fetches that public profile for us. We send it only the address.
• Stripe — processes payments. They receive only what's needed to bill you.
• Resend — delivers email notifications.
• Twilio — delivers SMS notifications (when SMS is enabled).
• RapidAPI / JSearch — provides the job listings shown in your feed. We do not send them anything about you; we only retrieve listings.
• Google — if you sign in with Google, Google sees that you used your account to access Climbr.
• Apple — if you sign in with Apple, Apple sees that you used your Apple Account to access Climbr. If you chose Hide My Email, the emails we send you go through Apple's private relay service.

We do not share your personal data with anyone else, except: the analytics and advertising measurement described in Section 1; when you choose to send it yourself (for example, when you fill in an employer's application with Climbr and submit it); when required by law (subpoena, court order); or to protect the rights and safety of users or the public.

4. How Climbr Uses AI

Climbr runs on AI. Reading your resume, scoring jobs against it, tailoring it to a posting, and writing cover letters are done by AI models run by outside companies. AI is part of how the Service works, so there is no separate AI switch or consent screen: by creating an account or using Climbr (on the website, in the iPhone app, or in the browser extension) you agree to what this section describes. If you do not agree, do not use Climbr, or delete your account.

• What we send. Depending on the feature you use: your resume text (including the contact details at the top of it, or the image itself if you upload a scan or photo), your profile and preferences, and the job descriptions you look at. If you have added them, also your self-attested security-clearance details, citizenship and work authorization, your skills, and your answers to tailoring questions. Anything you paste into an AI feature (for example LinkedIn text, a job offer, or an interview answer) is sent too.
• Who receives it. Anthropic, Cerebras, and Amazon Web Services (Amazon Bedrock). Each one gets the data the feature you are using works from. Section 3 above lists what each provider receives and what it does for us.
• Why. To read your resume and pull out your work history, to score how well jobs match you, to tailor your resume to a posting, to write cover letters, and to power the other AI features you choose to use, such as interview prep and resume feedback. Some of this runs in the background, for example scoring new jobs against your resume overnight. AI output can be wrong, so you review it, and Climbr never sends anything to an employer unless you choose to apply.
• What is never sent to an AI provider. Your passwords (your Climbr password, and any job-site sign-in you keep in the browser extension, which stays on your device), and the answers in your private answers vault and your voluntary self-identification answers (gender, race, veteran status, disability). The vault holds sensitive application questions such as criminal history, drug screening, non-compete agreements, visa type, salary expectations, and references. Your card number goes to Stripe, never to us or to an AI provider.
• How long it is kept. Climbr keeps your resume and the AI results (match scores, tailored resumes, cover letters) in your account until you delete your account. After you delete your account there is a 30-day grace period, then your personal data is permanently deleted from Climbr. Each AI provider handles what it receives under its own terms, which Climbr does not control. We do not sell your data, and your resume is never used for advertising.
• How to delete it. You can delete your account at any time from Settings → Data & privacy on the website or Me → Delete account in the iPhone app, or by emailing support@climbrhq.com.

13. iPhone App

If you use the Climbr iPhone app, the following applies in addition to the rest of this policy. The app uses the same Climbr account as the website, so what this policy says about your account, résumé, matches, and applications (Section 1), about the AI providers that process some of it (Section 3), and about your saved memory and fill summaries (below), applies in the app too.

• Signing in. You can sign in with your email and password, with a code we email you, with Sign in with Apple, or with Google. With Apple, we receive an identifier from Apple, the name you choose to share (Apple shares it the first time only), and either your email address or, if you choose Hide My Email, an Apple private relay address. With Google, you sign in on Google's own page in your phone's secure browser sheet, and we receive an identifier and the basic details Google shares, such as your name and email address. Climbr never sees your Apple or Google password. We use this only to sign you in and to find or create your Climbr account. The app keeps your signed-in session (a token, not your password) in the iPhone Keychain, on that device only: it is not synced to iCloud Keychain.
• What the app keeps on your phone. Besides the session above, the app saves a few things in its own storage on your phone, under your account:
  • Your job-site accounts note: for each employer where you made an account or signed in while applying with Climbr, the site's address, the employer's name, the job system it uses, whether it signs people in with a password or an emailed code, whether the sign-in was seen or is waiting for you to confirm your email, the first and last day, and how many times Climbr filled a form there. It never holds a password, a code, a cookie, a session token, your email address, or anything typed on the employer's page. It stays on this phone and is not sent to us. In the app you can remove any employer from the list; that clears only our note, and your account with the employer stays until the employer closes it.
  • Your field answers (for example license, certification, or shift details you gave for your line of work). They are saved on the phone first, then sent to your Climbr account when the app can. This phone's copy is removed when you sign out or delete your account.
  • Where you are in setting up your profile: the step you reached, the choices you made (such as your field and the roles you want), and any name, email address, or city you corrected on the "check your details" card. Your résumé itself is not kept on the phone.
  • Where you are in the daily loop: which matches you have looked at or hidden today, your weekly plan, follow-ups you logged, and applications Climbr filled that you have not yet told it whether you submitted. So your matches show without a connection, the app also keeps a copy of your latest matches (at most 50, without the job descriptions); it is removed when you sign out or delete your account.
  • A short record of which jobs and sites an autofill was already counted for in the last 24 hours, so one application is not counted twice; a count of how many fill summaries the app sent today, so it stays inside the daily limit (a number for each day, with no form content); and a few display settings, such as that you have seen a tip; the count is removed when you sign out or delete your account.
  • Anything you typed in the app and did not save yet (for example half of an answer) is kept in the app's memory only, never written to storage, and is cleared when you sign out or close the app.
  Deleting the app from your phone removes what it keeps in its own storage. iOS can leave the sign-in token in the Keychain after an app is deleted; the app clears it the first time it opens after a reinstall.
• Fill with Climbr, inside the app. The app opens an employer's application page in its own built-in browser. Nothing is filled until you tap Fill with Climbr. When you do, the app reads that page's form (its field labels, field types, and questions) in the browser on your phone, then types into the form only the details from your Climbr account that the form asks for, for example your name, contact details, and links, and it can attach your résumé file. It fills a question that asks for something you saved under Your answers only with exactly what you saved, and marks it for you to check. That can include questions about pay, availability and screening, and voluntary self-identification (gender, race or ethnicity, veteran status, disability), and, where you saved one, work authorization or sponsorship. If you did not save an answer, or the app is not sure a question means the same thing, it leaves the question for you. It does not guess. On a form with several pages it can press the page's own Next or Continue button on a page in the middle, and it stops on the last page: it never presses Submit, Apply, or Send, and it never submits an application for you. You review the form and tap the employer's own Submit yourself. To do this the app downloads your autofill details and your résumé file from your Climbr account into the phone's memory for that fill; it does not save them to your phone's storage. The form itself and what is typed into it stay on your phone: the app does not send Climbr the form's contents or anything it typed, except that, if you have turned on Climbr AI answering a form's questions (next item), it sends the wording, kind and choices of the questions still left empty. What it does send is described under "Fill summaries" below. When you tap Fill, the app also tells Climbr that one autofill was used (and, if you turned on Climbr AI answering a form's questions, those questions, as the next item describes), so your account's weekly count stays right.
• Reading application questions (Pro and Elite). When you fill an application and Climbr can't tell on its own what a question is asking, only the words of the question and its answer choices are sent to Climbr, where Anthropic's Claude (run for us by Amazon Web Services, or by Anthropic directly) says which kind of question it is. Nothing you saved or typed is sent with it: not your résumé, your saved answers, or your memory. Questions about race, ethnicity, gender, sexual orientation, disability, veteran status or age are never sent. The box is still filled only from what you saved, is marked "Check this", and Climbr never submits an application for you. We keep what a question means, not who asked it, so the same question isn't sent again, and we count how many questions each account sends a day to keep the feature within its limits.
• Fill summaries. After a fill, the app sends Climbr a summary of how that form went, so we can find forms the app fills badly and fix them. The summary holds the employer site's address (its host and page path, never the part after a question mark), the job system it runs on, the app version, each page's heading, the label and type of each box, whether the app filled it or left it for you, and whether the page required it; for a box it filled, what kind of saved information it used (for example, your degree or a saved answer), never the information itself; for a box it left, why (for example, you had no saved answer for it); and counts of how many boxes it filled. It never includes anything that was typed into a box or anything you saved. Our servers refuse a summary that contains text that looks like an email address, a phone number, a link or a long number. Each summary is linked to your account. We keep these automatic summaries for 180 days and then delete them. The app sends at most 20 a day per account.

  If a form looks wrong, you can tap This didn't fill right and the app shows you the report before it is sent. It is the same kind of layout report, but it lists every box on the page (label, type, whether required, and what Climbr did with it), never what was typed. We keep these reports you choose to send until you delete your account.

• Your memory and Climbr AI. In the app you can save things for Climbr AI to remember about you: jobs you have held, skills (with where you used each one), short stories in your own words, and certifications or licenses (the name, who issued it, the year, an expiry if it has one, and whether it is current, expired or in progress). Climbr does not save certificate, license or ID numbers; the app asks you to leave them out, and our servers turn away text that looks like one. Your security clearance is not a separate copy: it is the clearance answer you already gave under Your answers. When Climbr AI asks about a skill or credential and you answer "not yet", we remember that for 90 days, so it does not ask again right away, and then it may ask again. When your résumé lists a certification with no date on it and an application asks whether you hold it, Climbr never decides that from the résumé: whenever the entry is a plain certification name, the app asks you, once, before anything is filled, and otherwise the question stays empty. We work out which certification to ask about on our servers, from your résumé, and the question goes only to your phone; that question is not passed to an AI provider. If you answer "Yes, I hold it", we save it as one of your own credentials, with its name and no year until you add one, and Climbr AI may then use it to answer that question on later applications, marking the answer for you to check; it is not copied into your certifications list unless you later add a year to it. If you answer "Not yet", we remember that for 90 days and leave that question empty. You can change or delete either answer in Your memory at any time, and deleting your account deletes them. Everything you type into memory is stored encrypted in our database (AES-256-GCM, with a key kept on our servers, not in the database), so a copy of the database on its own would not show it. Our servers do decrypt it to show it to you and, if you allow it, to use it. Memory is only ever what you typed or said yourself.

  Climbr AI uses your memory only if you allow it in the app. If you have not chosen, or you choose Not now, memory is not used by AI and is not copied anywhere. If you allow it: skills you saved are also added to your Skills list, and credentials you saved to your certifications list, which Climbr uses to score jobs against you (those lists are part of your profile and are not separately encrypted); and when you tailor a résumé, Climbr sends our AI providers (Section 3) the names of your saved skills that the job posting mentions and the saved credentials that fit that job, but not the notes you wrote next to a skill. A tailored résumé lists what it used from your memory. You can change or delete any item, or reset all of memory, in the app. The Climbr AI chat is a separate feature: your messages go to Anthropic to be answered, Climbr does not keep the text of the conversation on its servers, and the chat does not read your memory. Deleting your account deletes your memory.

• Climbr AI answering a form's questions. This is separate from the fill above, and it is off unless you have said yes when the app asked whether Climbr AI may use your memory and fill in questions. When it is on and you tap Fill with Climbr, the app also sends Climbr the questions on the page that are still empty: their wording, the kind of box, the answer choices, the heading of the section they sit in, whether they are required, and their maximum length. The request has no field for what you typed or what is already filled in. To begin with, Climbr passes a question to an AI provider only if it is one of these: a question about your education (your degree level, field of study, school, or graduation year; a question that names two degrees, such as a bachelor's and a master's, is answered only if both are in your details); a question about a certification or licence you hold (a certification that appears on your résumé without a date is never counted as held: the app may ask you first, as described under Your memory and Climbr AI); a question about how many years of experience you have in a named skill, tool or field (such as sales, nursing or Python; not how long you have lived or worked somewhere); a question about which tools or skills you have used, or whether you have experience with one (such as "Which EDR tools have you used?" or "Do you have experience with Splunk?"), which is answered only with a tool or skill that your résumé or your saved skills and jobs name, and is left empty otherwise (it is never answered No just because something is missing; it is answered No only when a skill or job you saved says you never used it); or a "why this company" or "tell us about yourself" question, an essay answer of a plain kind (a time you led or solved something, why we should hire you, your proudest accomplishment, or anything else), or a cover letter, which it drafts for you to check. An essay question about diversity, legal or personal information, family, health, politics or your personal life is not passed on. Every other question is left empty for you and is not passed on; for example, where you have worked or your current employer, pay, work authorization, sponsorship, citizenship or security clearance, gender, race, veteran or military status, disability, health, age, religion, criminal history, family or relationships, personal documents (such as an ordination, firearms, liquor or birth certificate), the faith of a school, scholarships and financial aid, references, other people, a degree you are still working on or an expected graduation date, the agreement and consent boxes, and file uploads. A question that mixes one of the four kinds above with something else (including a health, addiction, pay or background-check word), a question written as a negative, a question longer than 200 characters, a question whose wording holds an email address, a link, or a long number, and a question about a certification, school, or subject that is not in your own details are not passed on either. Which questions are passed on is decided from the wording by rules in our code, so a question worded in an unusual way could be judged wrongly. For the questions that are passed on, Climbr reads from your account the text of your résumé, what you told Climbr AI in your memory (your jobs, skills, certifications and stories; from each story only the sentences that say what you did yourself are used, and a plan, a hope, a number you were unsure of, something a teammate or manager did, and anything you took back are left out before anything is sent; a story is used only for the "why this company", "tell us about yourself", essay and cover-letter questions), and sends them, cut down to the lines each question needs (see below), with those questions to Anthropic (Claude), which writes an answer for each question it can support from what you gave it, or none. Before anything is sent, Climbr masks the name, email address, phone number, web addresses, street addresses and postcodes, and ID numbers (such as a passport, licence, candidate or registration number, or any long mix of letters and digits) it recognises in that text, including phone numbers written with letters and email addresses written out in words, drops the address and place lines at the top of your résumé, and masks the names of other people it recognises (a reference, a manager, a family member), so the provider does not receive them, and a masked value is never put into an answer. The rules cover address and phone shapes from many countries but they are rules, not a promise: a detail written in an unusual way, or a nickname, could still get through. Only the lines a question needs are sent: for a degree question your education lines, for a certification question your certification lines, for a years question your job headings, the lines that name the skill and your memory items about jobs, for a question about a tool or skill you have used your job headings, the lines under them, your project lines, your skills lines and your saved skills and jobs, and for a "why this company" or "tell us about yourself" question, an essay answer or a cover letter your work, education, certifications and skills, and your saved stories (cut as described above). The volunteer, awards, interests, activities, affiliations, memberships, personal and references sections of your résumé are never sent, whatever the question. Lines about you rather than your work (leave, your own health or surgery, immigration or work-authorization status, security clearance, veteran status, a union, a membership in a group or a faith, a spouse or caregiving, a native language, a date of birth, marital status) are also taken out before anything is sent. That is a short list of wordings in our code, not a promise: a line worded in another way can still go with the rest. Some requests go to Amazon Web Services (Amazon Bedrock), which runs Anthropic's Claude for us, instead of to Anthropic directly. When a "why this company" question or a cover letter is passed on, Climbr also looks up the job posting you are applying to, but gives the provider only the company's name and the job title, not the description. Your saved answers (Settings → Autofill), the answers you keep under Your answers in the app, your private answers vault and your self-identification answers are never read for this, and the AI never sees them. Before an answer reaches your phone, Climbr's own server checks it against your résumé and your memory, not only the part the AI pointed to (a very long résumé or a very large memory is cut at a fixed length, and what is cut is neither sent nor checked). The answer must quote your own words. A certification is filled in only if your details hold a record of it that is current (a saved credential marked active, or a résumé line with a past date, or an expiry date that has not passed) and nothing else in the line, such as an expiry date that has passed or a note that it lapsed, is pending, or is in progress; a question that asks for a current, valid or active certification is answered only if the record shows an expiry date that has not passed (or the word lifetime) or is a saved credential marked active, and a year of issue alone is not enough; a program, a residency, a bridge course, a permit or an apprenticeship is not a certification. A degree is filled in only if its record has a finished date in the past that can be read; a date or note it cannot read leaves the box empty, an honorary degree does not count, a minor is not read as your field of study, and a graduation year is the year the record ends. Years of experience are counted only from the dates of your full-time jobs, one job at a time and never added up, and only where the job shows you did the thing (a word that only describes something else, such as the "sales" in "sales tax analyst" or the "cybersecurity" in "cybersecurity posters", does not count), a job whose own line says it ended (laid off, quit, contract ended, position eliminated) is not counted to today even if its dates say Present; a part-time, per-diem, relief, student, internship, co-op, assistantship, adjunct or volunteer job is not counted (when the job's own heading, or the one or two short lines directly above its dates, says so), and a range or "about" in the question is answered only if your figure fits it. If another line you wrote contradicts an answer, the box stays empty. If your saved details do not support an answer, the box stays empty. Every answer comes back with the part of your details it was taken from, so you can check it. A "why this company" or "tell us about yourself" answer, an essay answer, and a cover letter are drafts, written only from your own résumé and memory: each sentence either says you want to join the company or the role, or states something one record of your own details says. A draft never states your religion, nationality, race, sex, orientation, disability, health, veteran or military status, age, family or immigration status as a fact about you, and it does not name a faith group as your employer or school. It may name a military branch as an employer when your résumé says you worked there (for example "I worked as a logistics specialist in the U.S. Army"), but it never states that you are a veteran. A number, a percentage or a length of time in a draft must be written the same way in a record of yours, a sentence about the present is made only about a job with no end, and a sentence never carries what you did at one job over to another. It calls you only by a job title or credential of your own, never by the job of people you managed or served, and a line that says someone else did something to you (such as "trained by" or "applied for") is never used as something you did. It does not say you love, like, enjoy, are motivated by or are passionate about something, or that you have always felt so, unless your own memory says so. The draft is flagged for your review, it never contains a signature or your name, and the check refuses a sentence that says or suggests you worked for that company, were hired by it, or hold its job title, though an unusual wording could still slip past it, which is why you review every draft. You still review the form and press the employer's own Submit yourself. Climbr keeps a short record of each run: when it ran, your account, the app's run number, the kind of employer site (such as Workday) and the main web domain of the page it was on, whether a job posting was used, whether Anthropic or Amazon Web Services handled it, which model, how the run ended, which kinds of question it answers on that run, how many questions were on the page and how many were passed on, how many it answered, drafted, or left empty and why, which checks turned an answer down, how many boxes of each kind there were, which topic groups were kept away from the AI, which kinds of your details (résumé or memory) backed the answers, how many tokens it used, how long it took, and what the run cost. For each question on the page the record also holds the question's wording as the employer wrote it, with numbers, email addresses and links hidden and anything that looks like your name, contact details, address or text from your résumé taken out (only the question itself is kept, and a wording that looks like pasted text is kept only as a mark), the kind of question it is, whether it was filled, drafted, or left empty, and which kind of your details it came from or why it was left empty, so that Climbr can see which questions it fills and which it leaves for you and improve. It does not keep your answers, the quotes behind them, or any text from your résumé or memory in that record. Climbr keeps these run records until you delete your account. You can turn this off at any time by choosing Not now in the app, and your fills keep working without it.
• More answers you can save. Under Your answers you can also save, only if you choose to: the countries you are a citizen of now, and any you held in the past; your pronouns; whether you served in the U.S. military, the branch, and the month you left; whether you can perform the essential functions of a job with or without reasonable accommodation; your work schedule (shifts, days, weekends, holidays, overtime, rotating shifts) and whether you can work in an office or travel for team events; your GPA and test scores (SAT, ACT, GRE); and driving details (whether you have a valid license and since which year, whether you have reliable transportation and auto insurance) and your English level. Citizenship, pronouns, military service, the essential-functions answer, your schedule, your grades and scores, and the license year are stored encrypted in the same way as your memory; the remaining short choices are stored as plain labeled values in your account's private answers store, readable only through your account. The app fills a matching question on an employer's form with exactly what you saved and marks it for you to check; Climbr AI never reads these answers, and fill summaries never contain them. You can change or delete any of them under Your answers.
• Boxes you tick that Climbr remembers. When you tell Climbr to remember a box you ticked on an employer's application, for example that you read its privacy notice or that your application is true, Climbr saves that employer's name, the exact words of that box, a fingerprint of those words, the date, and whether you said yes in the app or in Chrome. It does not save your name, a signature, or anything you typed. On that same employer's later forms, if the words are exactly the same, Climbr ticks the box again and marks it for you to check. If the words change by even one character, or the form is a different employer's, it does not tick it, and it never submits anything. If a box is about you personally, such as a statement about your history or an opt-in to messages, Climbr can tell you to check it carefully. Climbr does not save words that contain your name, a date you signed, or an email address, phone number or link. You can see and remove what Climbr remembers yourself, and it is deleted with your account.
• Employer sign-in pages. If an employer's page asks you to sign in or create an account, you do that yourself. Climbr never types, reads, or stores your password for an employer. When you tap Type my email, the app types your Climbr account email into the page's email box and nothing else. The employer's page receives what is typed into its own form, and whatever you submit goes to the employer, whose own privacy policy covers what it does with it.
• The app's browser. Like any browser, it stores cookies and other site data from the employer sites you open in it on your phone, so you may stay signed in to an employer between visits. Climbr does not read or copy them, and deleting the app removes them. If an employer's upload field offers Take Photo, iPhone asks for your permission to use the camera, and the photo goes only to that employer's form. The app can open only web pages (https) in this browser.
• Adding a résumé from your phone. If you choose a résumé file from your phone, it is sent to Climbr to read your contact details and work history and to build your matches, and, like a résumé you upload on the website, a scan or photo may be read by an AI provider (Section 3).
• Deleting your account in the app. In the app, go to Me → Delete account and type your account's email to confirm. If you signed in with Apple, you confirm with Apple once more so Climbr can revoke its Apple sign-in tokens. Deletion works as described under Your Rights above: it is scheduled with a 30-day grace period, you can undo it by signing back in and tapping Keep my account, any subscription is set to cancel, and after the 30 days your account and personal data are permanently erased. The app also removes its job-site accounts note, its copy of your field answers, and its other saved notes (your setup progress, daily-loop state, and the saved copy of your matches) from the phone, and signs you out.
• What the app does not do. As of this version the app contains no advertising or third-party analytics code, and it does not ask for your location, your contacts, or permission to send notifications. We do not sell your data.