Legal

Privacy Policy

Last updated: 27 July 2026

This policy tells you what we collect, why, who else touches it, how long we keep it, and how to get rid of it. Everything is on this page — nothing hidden behind a link.

Who we are

Valiown is provided by Sayed Mohamed, trading as Valiown ("we", "us", "our"), based in the United Kingdom. This policy explains what personal data we collect through the Valiown app and website, why we collect it, the legal basis we rely on, how long we keep it, and the rights you have over it — in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What we collect, why, and our legal basis

Account information
Name, email address, and sign-in identifier (email code, LinkedIn, or Google). Used to create and secure your account. LinkedIn and Google are used for identity only — we receive your name and email, nothing more.
Contract
CV content and work history
The CV file you upload, the text extracted from it, and any work history you enter or build in the app. Used to infer your profile, match you to jobs, and generate tailored CVs and cover letters.
Contract
Qualifications
What you studied, and where. Used to widen the range of roles we suggest. Each qualification has its own on/off toggle controlling whether it is used for matching — see below.
Contract
Profiling responses
Your CV-inferred results, your answers during the guided conversation, and any corrections you make. Used to build and refine your working-style profile, which drives your matches.
Contract
Values, constraints, and career direction
Salary expectations, work arrangement, location, deal-breakers, and career horizon. Used to scope your job search and rank results.
Contract
Application and job activity
Jobs you view, save, dismiss, or apply to, and which CV version you used for each. Stored so you can review your own history and prepare for interviews for roles you actually applied to.
Contract
Coaching and interview practice conversations
Content of conversations with the in-app Career Coach and Interview Prep features. Used to give relevant, personalised responses and, for the Coach specifically, to recall context in later conversations.
Contract
Safety monitoring of Coach conversations
When a conversation with the Career Coach ends, an automated check reviews it solely to identify moments that touched on distress or mental-health topics outside what a career coach is built to support — not to judge how the Coach responded, only to flag that it happened. If such a moment is found, a short excerpt of that specific exchange (not your full conversation) is stored for review by a member of our team, and an internal notification is sent so it's looked at promptly. This is never used for any automated decision about your account, and a person always makes the actual judgement on whether anything further is needed. Because this can involve health-related information, we ask you to agree to it separately and explicitly before you use the Coach, and you can withdraw that agreement at any time from within the Coach screen — doing so immediately locks the feature. These records are kept for up to 24 months, on their own schedule, independent of how long you keep your account.
Contract (coaching) + explicit consent (Article 9, safety data)
Support queries
The query you submit and its category, plus technical context attached automatically: your user ID, email, subscription status, app version, device and operating system, and recent app state. Used to diagnose and resolve the problem you've reported.
Legitimate interest — resolving your request
Age and sex (optional)
Collected as optional context, and used for periodic fairness monitoring of our own matching outputs. Never used as an input to matching or ranking.
Legitimate interest — fairness monitoring
Purchase records
A record of each subscription or credit purchase, including plan, price, and date. Payment itself is handled through Google Play's billing system — we never receive or store your card details.
Contract, and legal obligation for the accounting record
Product analytics
How you move through the app, which features you use, and errors you encounter — linked to your account. Used to understand where the app works and where it fails, so we can fix it.
Legitimate interest — improving the service
Sign-in and security logs
Records of sign-ins and security-relevant events, used to secure your account and detect abuse.
Legitimate interest — security

How we use education and qualifications

This deserves its own section, because we've drawn a deliberate line.

What you studied is used to widen the roles we suggest. What level you reached is not, and never is.

The subject of a qualification is a skills signal, in the same category as your work history — a chemistry degree tells us something real about the roles that might suit you. The level you reached is a poor proxy for capability and a good proxy for age and background, so we removed it from every matching and ranking decision entirely.

Each qualification you add has its own toggle. Switch it off and it stops being used for matching. It stays on your record so you can switch it back on — it is not deleted unless you delete it.

How AI processing works

Valiown uses the Anthropic Claude API to power CV analysis, profile inference, job matching, and CV and cover letter generation. We use Anthropic's API under its Commercial Terms, under which Anthropic does not train its models on our customers' content. Anthropic's Data Processing Addendum is incorporated into those terms. Anthropic applies a limited retention period to API content (7 days at the time of writing), subject to Anthropic's applicable API terms and documentation from time to time.

AI-generated content is a draft, not a decision. Every CV, cover letter, and application answer we generate is shown to you for review, and you must explicitly accept it before it can be exported. Your profile is shown to you and can be corrected before it is used. Nothing we generate is sent anywhere on your behalf.

Valiown profiles you — it infers a working-style profile and ranks jobs against it — but it does not make solely automated decisions with legal or similarly significant effects about you (within the meaning of Articles 22A to 22D of the UK GDPR, as amended by the Data (Use and Access) Act 2025). We surface options and explain our reasoning; you see your matches and every generated document, and you decide what to do. Because we profile you, you have the right to be told about it (this section and your in-app profile), to see and correct the profile we hold, and to object — all of which you can do in the app or by contacting us.

Who else processes your data

Anthropic
CV text, profile data, and job text sent for AI generationUnited States
Adzuna
Job search queries — your search criteria, not your identityUnited Kingdom
Reed
Job search queries — your search criteria, not your identityUnited Kingdom
Cloudflare (R2)
Your uploaded CV fileEuropean Union — EU-jurisdiction storage
Neon
Our main database — everything described above except CV filesUnited Kingdom (London)
Render
Our application serverEuropean Union (Frankfurt)
PostHog
Product analytics, linked to your accountEuropean Union
RevenueCat
Subscription statusUnited States
Resend
Sending sign-in codes and account emailsUnited States
Google Play
Payment processing and subscription managementUnited States

We do not sell your personal data. We do not share your CV, profile, or conversations with employers or recruiters — you choose which jobs to apply to, and you apply directly on the employer's own site.

Who is responsible for your data

When you use Valiown for your own job search, we — Sayed Mohamed, trading as Valiown — are the "data controller": we decide how and why your data is processed, and this policy governs it.

If a business (for example a recruiter or career coach) uses Valiown on behalf of its own candidates, that business is the data controller for its candidates' data, and Valiown acts as its "data processor" — handling the data only on that business's instructions under a separate written agreement. If your data reached us through such a business, their privacy notice governs how your data is used, and you should contact them to exercise your rights.

How long we keep your data

Account and profile data
While your account is active — see the inactivity schedule below
Product analytics
14 months
Sign-in and security logs
90 days
Coach safety-monitoring records
24 months, on their own schedule — kept independent of account status, and deleted even while your account is active
Purchase and billing records
6 years, as required by UK accounting law

If your account goes inactive

After 22 months without signing in, we email you to let you know your account is due for deletion. After 24 months, we schedule it for deletion. You then have a further 30 days to sign in and keep it — signing in during that window cancels the deletion. If you don't, the account is erased at around 25 months.

Billing records survive account deletion, because we are legally required to keep them. They are kept separately and are not used for anything else.

Deleting your account

You can delete your account from within the app, at any time, without contacting us.

When you request deletion, we show you the exact date your data will be erased and schedule it for 30 days later. During those 30 days you can cancel by signing in — we'll show you a reminder that deletion is scheduled, and you can choose to keep the account. Nothing is erased until the stated date.

On the erasure date we permanently delete your profile, CV files, conversations, job activity, and analytics records. This is automatic, not a manual request.

Cancelling your subscription is separate. Deleting your Valiown account does not cancel a Google Play subscription — you'll need to cancel that through Google Play directly. The app tells you this when you request deletion.

Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data — you can edit your profile, qualifications, and constraints directly in the app at any time
  • Request erasure — built into the app, as described above
  • Request a portable copy of your data
  • Object to or restrict certain processing
  • Withdraw consent where we rely on it

Because your profile shapes what we show you, we've built correction into the product rather than making it a request process: you can see your inferred profile, change it, and change what we use for matching, without asking us.

To exercise any right not available in the app, contact us below. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

International transfers

Some providers listed above process data outside the UK, including in the United States. Where they do, we rely on appropriate safeguards — Standard Contractual Clauses and the UK Addendum — so your data continues to receive equivalent protection.

If our business changes

If Valiown is sold, incorporated into a limited company, merged, or its business assets are transferred, your personal data may be transferred to the successor organisation, which will continue to process your data in accordance with this policy. We will let you know if this happens.

Children

Valiown is intended for adults seeking employment and is for users aged 18 and over. We do not knowingly collect data from anyone under 18.

Changes to this policy

We may update this policy as the app develops. We'll update the "last updated" date above, and for material changes, we'll tell you directly in the app.

Contact us

For any privacy questions, or to exercise your data rights, contact us directly — we aim to reply within 1 working day:

hello@valiown.com