Privacy Policy

Account: email, password (hashed by our auth provider), phone number — to create and secure your account, sign in.

Profile and CV: name, headline, bio, photo, work experience, education, skills, desired pay, availability, uploaded resume files, contact links — to build your profile, let employers evaluate you, and apply to jobs.

Location: approximate or precise coordinates (only if you grant permission or set a location) — to show nearby jobs and estimate commute distance.

Applications: cover letters, screening answers, attached resume — to submit applications to employers.

Messages: chat content between seekers and employers — for in-app messaging.

Employer data: company name, profile, team, job postings — to operate the employer side.

Device and usage: push notification token, device platform, bookmarks, searches — to deliver notifications and personalize the feed.

Operate the marketplace: post jobs, search, apply, manage applicants, chat.

Match seekers with jobs (including an optional AI "good match" assessment).

Send notifications you've enabled (in-app, push, and — if you connect it — Telegram).

Keep the service secure and prevent abuse.

We do NOT sell your personal data, and we do NOT use it for third-party advertising.

When you mark yourself "open to work," employers can find your public profile card (name, headline, photo, city, skills).

Your exact home coordinates, phone, email, bio and home address are NOT shown to other users; precise applicant location is shared with an employer only for the specific job you applied to.

Employer job postings and company profiles are public within the app.

To operate our service we share limited data with trusted providers:

Supabase — backend, auth, database, file storage.

Firebase Cloud Messaging (Google) — push notification delivery.

Yandex Maps — maps, geolocation and geocoding.

Telegram Gateway — phone verification codes and bot notifications (if connected).

Sentry — error and performance monitoring (no PII sent).

Vercel, Google Analytics 4, Yandex.Metrica, Meta Pixel, PostHog — anonymous usage analytics.

Anthropic (Claude) — optional AI assistance (resume parsing, job-post drafting).

Access: view and edit your account data — via Profile settings.

Correction: fix incorrect data — same place.

Deletion: fully delete your account — Settings → Delete account. All personal data is deleted within 30 days (some service logs are retained longer as required by law).

Portability: request a copy of your data — via the email below.

Objection: object to processing — via the email below.

Active account: data retained until you delete the account.

Deleted account: personal data deleted within 30 days. Anonymized service logs may be retained longer.

Applications and messages: deleted with the account.

Payments: tax records retained per Uzbekistan law.

All data is transmitted encrypted (HTTPS/TLS).

Passwords are one-way hashed (never stored in cleartext).

Files (resumes, images) are protected by RLS policies in Supabase Storage.

In case of a security incident, you will be notified promptly.

Yollla is intended for users 16 and older. If we accidentally collect data from a person under 16, we will delete it immediately.

Yollla may update this policy. You will be notified of material changes in the app and by email. The new version takes effect on the effective date.