Privacy Policy
This policy explains how ("we") processes personal data when you use the Bob app for Windows and this website. We collect as little as possible, and we keep the most sensitive data — your CV and profile — on your own computer.
1. Data we store on our servers
| Data | Why | How long |
|---|---|---|
| Your Google account's email, name and profile picture | Signing in and recognising your account | While your account exists |
| Subscription status (plan, end date) | Giving access to paid features | While your account exists |
| Order history: plan, amount, status, time, payment transaction ID | Proof of payment, support, bookkeeping obligations | As required by law |
| Vouchers you redeemed and when | Preventing voucher abuse | While your account exists |
| Timestamps of AI requests (not their content) and voucher attempts | Rate limiting / abuse prevention | Deleted automatically after ~1 day |
Our servers run on Supabase (Asia-Pacific region).
2. Data that stays on your computer
- Profile and CV (name, summary, experience, skills, education, personal notes) — saved as a file in the app's folder on your computer, separately per account.
- Sign-in session — stored encrypted with your Windows account's protection.
- Interview transcripts, chat history and screenshots — kept in memory only while the app is open, never written to disk, and gone when you close the app or sign out.
- Interview audio — transcribed on your computer by default. If you choose cloud transcription in Settings, audio snippets are sent to our AI provider (see section 3).
- Error log — technical notes about errors, kept on your computer.
3. Data processed by our AI provider
To draft answers, Bob sends the content of your request through our server to the Google Gemini API. Depending on the feature this can include: the interviewer's question and recent transcript lines, the relevant parts of your profile/CV, a job description, chat messages, screenshots you attach, or a CV file you import. Our server only relays this content and does not store it. Google processes it under the Gemini API Terms.
4. Payments
QRIS payments are processed by Midtrans; card, PayPal, Apple Pay and Google Pay payments by Lemon Squeezy, which sells to you as merchant of record and handles applicable sales tax/VAT. We never receive card numbers, account details or PINs — only the payment status, amount and order ID. See Midtrans' privacy notice and Lemon Squeezy's privacy policy.
5. Third parties
- Google — sign-in (Google Sign-In) and AI processing (Gemini API).
- Supabase — servers and the account/subscription database.
- Midtrans — QRIS payment processing.
- Lemon Squeezy — card / PayPal / Apple Pay / Google Pay checkout (merchant of record).
- GitHub — hosts the installer and app updates.
We do not sell your personal data and do not use it for advertising.
6. Your rights
You can ask for a copy of your personal data, have it corrected or deleted, object to its processing, or withdraw consent — under Indonesia's Personal Data Protection Law (Law No. 27 of 2022) and, where they apply to you, similar laws such as the EU/UK GDPR. Email ; we reply within 3 working days. Payment records may be kept where the law requires it.
You can delete the data on your computer at any time: clear your profile in the app, or uninstall Bob and
delete the %APPDATA%\InterviewCopilot folder.
7. International transfers
Our providers may process data outside your country (for example in Singapore or the United States). We only use providers that protect data in transit (HTTPS) and contractually limit how they use it.
8. Security
Connections to our servers are encrypted. Database access is restricted so each user can read only their own data, and subscription status can only be changed by our server after a verified payment. The AI provider's API key lives only on the server, never in the app.
9. Age
Bob is intended for users aged 18 and over.
10. Changes
If this policy changes, the date above is updated. For significant changes we'll let you know in the app or by email.