EaseApply Privacy Policy
Effective and last updated: October 6, 2026
Application: EaseApply (com.expinterview.easeapply)
Operator: ExpInterview / Shivam Kumar Pathak
Contact: pathakcodes.apps@gmail.com
1. What EaseApply does
EaseApply is an Android job application assistant. It stores a career profile, helps fill job application forms, reviews career profiles, tracks application activity, and optionally connects Gmail to show application-related messages and next steps. Gmail connection is optional; you can use the other features without granting mailbox access.
2. Account and career information
When you sign in with Google or email, our authentication provider, Supabase, processes account information and credentials. Basic account records can include your account identifier, email address, name, profile image, sign-in provider, and timestamps. These records are separate from the Gmail mailbox connection.
Your career profile, imported résumé, application answers, learned form mappings, application history, and feature settings are stored in the app's private storage on your device. These can include contact details, education, work experience, skills, portfolio links, work authorization, and other answers you choose to provide. Information is also sent to the employer or job website when you use EaseApply to fill its forms or upload your résumé.
3. Optional Gmail access
If you choose Connect Gmail, Google asks you to authorize the read-only Gmail scope https://www.googleapis.com/auth/gmail.readonly. This permission allows reading mailbox messages and settings; it is not limited by Google to company emails. EaseApply narrows its requests and display to the features described below. It does not request permission to send, modify, or delete Gmail messages, and reading a message in EaseApply does not mark it read in Gmail.
EaseApply uses this access to:
- Find emails relating to companies recorded in your completed application history, using company names, sender domains, dates, and hiring-related wording.
- Display matching email sender information, subjects, bodies, dates, message identifiers, links, and unread status in Inbox.
- Identify application receipts, assessments, interview invitations, offers, rejections, and other next steps; maintain local task completion and reminder settings.
- During an application you initiate, look for a recent security-code email matching that application. A matching code can be entered into the current employer or application website. This transfers that code to that website to complete its verification step. The code is not saved as a reusable profile answer or sent to an AI model.
Company-email matching and next-step detection run on your device. The Gmail connection, message bodies, and matching results are not uploaded to EaseApply's application backend, Supabase, or AI providers. Requests for messages go directly from your device to Google's Gmail API. Company names and search dates form part of those Gmail requests. When you open an email link, the selected browser or destination receives the URL, which may contain information provided by the sender.
The app does not download email attachments or remote images for Inbox. Company-logo requests use the company domain and the app's favicon service. Background sync runs periodically when connectivity and Android scheduling allow it; delivery and matching are not guaranteed to be immediate or complete.
4. Google user data and Limited Use
EaseApply's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Gmail data is used only to provide the Inbox, application tracking, reminders, and application security-code features you enable.
We do not sell Google user data, use it for advertising or creditworthiness decisions, or use it to train generalized AI models. We do not provide developers or support staff with routine access to your mailbox. If you separately choose to send a message or screenshot to support, we use what you provide to respond to your request. Any other access or transfer must comply with Google's permitted exceptions and applicable requirements.
5. AI processing and external services
Cloud AI features can send résumé text, relevant career-profile information, public profile information, job descriptions, or structured form metadata to the configured provider, such as OpenRouter and its selected model provider or Google Gemini. This processing is separate from Gmail Inbox; Gmail message bodies and extracted email security codes are not included in AI requests. Provider processing is governed by the provider's applicable terms and privacy policy.
Supabase supplies account authentication and basic account records. Google Play Billing processes current in-app subscriptions; legacy purchase flows may use Dodo Payments. Our entitlement service, hosted on Cloudflare, processes account or installation identifiers, signed requests, purchase identifiers, credit balances, and usage needed to provide AI credits and prevent abuse. We do not receive your complete payment card details.
The app includes Firebase Analytics, PostHog, and Microsoft Clarity for usage and diagnostic information where configured. This can include feature and screen events, device/app information, identifiers, and application-run diagnostics. Gmail message content and security-code values must not be included in these events. Inbox and security-code entry are masked from Clarity recordings; application WebViews are also masked in builds incorporating the Gmail privacy update. Website analytics are separate from the Android mailbox feature.
Job portals, external links, Google, AI providers, and other services handle the information sent to them under their own policies. See Google's Privacy Policy, Supabase's Privacy Policy, OpenRouter's Privacy Policy, and Microsoft's Privacy Statement.
6. Permissions
Internet access supports job websites, account authentication, Gmail, and AI features. Notification permission is optional and supports application alerts and reminders. Foreground-service, wake-lock, boot, and battery-management permissions support application runs and scheduled work. Android's file picker gives access to the résumé or other file you select. Voice input uses Android's system recognizer; EaseApply does not request microphone recording permission. Google mailbox permission is requested separately through Google's authorization flow.
7. Storage, retention, and security
Local data is protected by Android's application sandbox and device security. Network API connections use HTTPS. This is not a claim that every local database has separate application-level encryption; device encryption and protection depend on your Android device and settings.
Inbox stores the connected mailbox address, up to 200 matched messages, and local read/task/reminder state in the app's private no-backup storage. It searches completed applications within a 180-day window. Gmail access tokens are held in memory and Google's account services; EaseApply does not store a Gmail client secret or refresh-token database. Security-code lookup is bounded to recent messages, and codes are handled as transient secrets.
Cached Inbox messages remain until displaced by the cache limit or removed by disconnecting, signing out, changing the EaseApply account, clearing app storage, or uninstalling. Account, billing, and diagnostic records handled by our services have separate retention; we retain them as needed to operate the service, address requests, prevent abuse, and meet applicable obligations. A local data clear does not automatically delete records held by a service provider or employer.
8. Your choices and deletion
You can decline Gmail access, disable Inbox notifications, and disconnect Gmail from Inbox. Disconnect removes the app's cached mailbox messages and tracking state, cancels its mailbox jobs, and dismisses its Inbox notifications. It does not delete messages in Gmail or automatically revoke all Google permissions. To revoke Google's grant, remove EaseApply in your Google account's connections settings.
You can clear local app data through Android Settings or uninstall the app. In-app history and memory controls remove the selected local records. To request deletion of your server-side account or other records, email pathakcodes.apps@gmail.com from your registered address. We may need to verify the request and explain any records that must be retained. Clearing local storage or signing out is not, by itself, deletion of the Supabase account or cancellation of a Play subscription. Manage subscriptions through Google Play.
9. Children
EaseApply is intended for adults seeking employment. It is not directed to children under 13. Contact us if you believe a child has provided personal information so we can address it.
10. Updates and contact
We will publish material changes to this policy on this page and update its effective date. Contact pathakcodes.apps@gmail.com with privacy, access, or deletion requests. Our app website is expinterview.com/ease-apply.