Privacy Policy

Last updated: 8 October 2026

H&J BUSINESS SOLUTIONS LTD · support@hnjuk.co.uk

1. Who is responsible for your information

Applya is operated by H&J BUSINESS SOLUTIONS LTD, which is the controller of the personal information described in this notice. Contact support@hnjuk.co.uk for privacy questions, support, account closure or requests to exercise your rights. This notice covers applya.org and the Applya career workspace.

2. Information we process

You provide account details, including your name and email address, and a password stored in a hashed form. Your career profile may contain contact details, location, employment history, education, skills, qualifications, exam progress, salary preferences, availability and work-authorisation information. We store generated CVs, job preferences and application drafts.

We also record application decisions, the versions approved, timestamps and history. Applications and their history can contain earlier versions of your documents and messages. Public job sources supply adverts, employer names, locations and application links. Infrastructure services may process IP addresses, session identifiers, browser or device information and diagnostic logs to operate and protect the service.

Only include information needed for job applications. Avoid adding identity-document scans, bank details, medical information or other highly sensitive information. Ensure you have permission before including another person's details, such as a referee.

If you claim the student discount, we keep the university or college email address you confirm and the date you confirmed it. If you join through a member's invite link, or invite others, we keep a record of who invited whom, whether and when the invited member's first payment was made, and the reward it earned. So that members can't reward themselves, that record also keeps the fingerprint Stripe gives the card used for the first payment: a code that tells one card from another without revealing its number.

3. Purposes and legal bases

We process account information, profiles, CVs, searches, drafts and approval records to provide the service you request and fulfil our agreement with you. Optional AI tailoring uses the professional information described below when you enable that feature; we rely on your consent for this optional sharing, and you can turn it off in Profile & CV. Daily searches and review emails support the job-search service; you can pause them in Job preferences. Password-reset messages are necessary account communications.

We rely on legitimate interests to protect accounts, prevent abuse and duplicate submissions, troubleshoot faults and keep an appropriate record of activity. We do not sell your personal information or use your CV to target advertising.

We use the student address and invite records to apply the discounts and rewards you are entitled to, which is part of our agreement with you. We rely on legitimate interests to check them for abuse: that each university address is used on one account only, and that an invite reward isn't earned through another account at the inviter's own email address or with a card the inviter, or another of their invites, has paid with.

4. CV tailoring and AI services

When AI tailoring is enabled, Applya sends your professional summary, skills, experience, education and qualifications, together with the job advert, to the configured AI provider (Anthropic). Each draft records the method used. Dedicated contact, salary and immigration fields are excluded from AI prompts, but information you put inside a summary or other professional text may still be included. AI output can be inaccurate; you must review generated content before using it. Applya does not make hiring decisions or guarantee job eligibility.

5. Who receives information

Service providers support hosting (Netlify), the database (Neon), email delivery, payments (Stripe, which receives your name, email address, billing address and card details to take payment for a paid plan; we store a customer reference and the subscription's plan, status, billing interval and current billing period, never the card) and optional AI functions. Access is limited according to the service being performed. Job searches may disclose search terms and locations to public job sources; Applya does not send your CV to those sources to discover jobs. When you apply to an employer, they receive what you choose to send them. If a member invited you, they see how many people have signed up through their link, how many of those have paid and how many rewards they have earned, and they are emailed when a reward is earned; if you are the only person they invited, they can tell from this whether you have paid. They do not see your name, email address or anything else about your account. Information may also be disclosed where required by law, to protect rights and security, or in connection with a lawful business transfer subject to applicable safeguards.

6. International processing and security

Our infrastructure, email and AI providers may process information outside the UK, subject to applicable transfer protections. We use authenticated accounts, ownership checks and encrypted connections. No online system can guarantee complete security; report suspected unauthorised access promptly.

7. Retention and deletion

Profiles, generated documents and application records are retained to keep your workspace and history available while your account remains in use. You can request account closure or deletion of particular information at support@hnjuk.co.uk; we may verify your identity and explain any limits. A confirmed student address is kept with your plan while your account exists, and a record of who invited whom is deleted when either account is closed. Session access expires after seven days without renewal and password-reset links after one hour.

8. Your choices and rights

You may request access, correction, deletion, restriction or, where applicable, a portable copy of your information, object to processing based on legitimate interests and withdraw consent for consent-based processing. Send requests or complaints to support@hnjuk.co.uk; we normally respond within one month. You may also complain to the UK Information Commissioner's Office at ico.org.uk.

9. Cookies and changes to this notice

Applya uses necessary sign-in, session and security cookies only. Invite links set no cookie: the invite code travels in the sign-up page's address. We may update this notice as the service changes; the date above identifies this version, and material changes will be brought to your attention through the service.

You can print or save this page using your browser.