Privacy policy

Last updated 18 October 2026

Chameleon vitae keeps your career history in one place and turns it into a CV tailored to each job, and its browser extension fills job applications from it. This policy says what we collect, why, who else handles it, and what you can do about it. If anything is unclear, write to privacy@aduuna.dev.

What we collect

  • Your account. Your email address, and the name you give, when you sign in with Google or an email link. Sign-in runs on Google's Firebase Authentication.
  • What you put in. Your profiles, CVs, the job ads you save and the CV files you upload to import. This is what the service exists to work on.
  • Records of use. For each AI task: which task and model, how many tokens it used, its cost, how long it took and whether it worked. Not what was sent or returned. We use them for plan limits and to watch costs.
  • Payments. If you upgrade, Paystack takes the payment. We receive a customer code and your subscription's status and dates, never your card details.
  • Technical logs. Request times, the parts of the app requested, and status and error codes, kept for up to 30 days to run and secure the service. We never log the content of your profiles, CVs, job ads, files or AI requests.

We use no analytics, advertising or tracking tools, and we do not sell your data.

How we use it

Only to run the service for you: to keep and show your profiles and CVs, render them as PDFs, tailor and edit them when you ask, take payments, apply your plan's limits and keep the service secure. We do not train AI models on your data.

AI providers

When you import a CV, tailor a CV or ask for an edit, what that task needs (the CV, your profile, the job ad, your request) is sent to the company behind the AI model you choose: Xiaomi for MiMo models, Anthropic for Claude models, or Google for Gemini models. They process it to return the result, under their terms for business customers of their APIs. For Gemini we ask Google not to store the request.

The browser extension

  • Connecting it gives it a key that works only for what the extension does: reading your profiles and CVs, exporting a CV as a PDF and saving job ads. It cannot change or delete anything.
  • In your browser it keeps only that key, your account's email, the profile or CV you last chose and whether to offer filling. Your profiles and CVs are fetched when you fill a form and are not kept.
  • On the job sites it supports, and on sites you allow, it looks for an application form so it can offer to fill it. It reads a form's fields, or the job ad, only when you choose Fill form, Fill fields, Attach CV or Save job ad.
  • It does not record which pages you visit. Page content leaves your browser only when you save a job ad: the ad's title, company, address and text go to your account.
  • It writes into a form only when you ask, and never submits it. What it fills is then shared with that site, as if you had typed it, under that site's own privacy policy.
  • You can disconnect it at any time, from the extension or from the Extension page in the app. Removing the extension deletes what it kept in your browser.

Who else handles your data

  • Google Cloud runs the service and stores uploaded files, in Belgium.
  • Neon hosts the database.
  • Google Firebase handles sign-in.
  • Paystack handles payments.
  • The company behind the AI model you choose, as described above.

Some of them process data outside your country. We share data with authorities only when the law requires it.

How long we keep it

Your data stays while your account exists. You can delete profiles, CVs, saved jobs and uploaded files in the app at any time; a deleted file is removed from storage. To delete your account and everything in it, write to privacy@aduuna.dev and we will do it within 30 days. Records of use go with the account; logs are kept for up to 30 days. Paystack keeps payment records for as long as the law requires.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it, by writing to privacy@aduuna.dev. We answer within 30 days. You can also complain to the data protection authority where you live.

Cookies and browser storage

No advertising or analytics cookies. Your browser keeps your sign-in (stored by Firebase) and your choice of theme; the extension keeps what is listed above.

Children

The service is not meant for anyone under 16.

Changes

When this policy changes we update the date at the top, and we tell you by email when a change matters for how your data is used.