Skip to content

Legal

Privacy Policy

Last updated September 17, 2026

Udaan is a local-first desktop application. The short version: your resume data lives in a SQLite database on your own device, there is no Udaan account or server that stores it, and anything sent to a third party (an AI provider, Google) is sent because you configured it and goes directly from your device — it does not pass through a server we operate, with the one exception noted in section 4.

1. What we don't have

There is no sign-up, no login, and no Udaan-operated database of user accounts or resumes. Nothing about your profile, job applications, or generated documents is transmitted to us. We have no analytics, crash reporting, or telemetry inside the desktop app itself (the marketing site you're reading this on is different — see section 6).

2. Where your data lives

Your profile, jobs, generated resumes and cover letters are stored in a local SQLite database on your device ($APPDATA/app.db in the desktop app). AI provider API keys are encrypted (AES-256-GCM) with a per-install key held in your OS keychain before being written to disk, or kept in browser localStorage if you're using the web build — never in the database, and never uploaded anywhere by us. You can export a full backup to a JSON file, or delete your data, at any time from Settings.

3. AI providers (bring your own key)

Tailoring a resume or cover letter sends the relevant text — your profile and the job description you pasted — directly from your device to the AI provider you chose and configured (OpenAI, Anthropic, Google Gemini, xAI Grok, Groq, DeepSeek, Mistral, OpenRouter, Perplexity, or a local Ollama instance that never leaves your machine). That request uses your own API key and is governed by that provider's own privacy policy and terms, not ours. We don't see, log, or retain the content of these requests.

4. The managed provider (optional)

If you opt into the pay-as-you-go managed provider instead of your own API key, your requests route through a LiteLLM gateway we operate, which forwards them to the upstream AI provider — this is the one path where a server we run is in the loop, solely to proxy the request and meter usage against your prepaid credits. Payment for credits is handled entirely by Stripe; we do not receive or store your card details.

5. Gmail integration (optional)

The email job tracker is off unless you turn it on and connect a Gmail account. It requests read-only access (gmail.readonly) to find and classify recruiting-related emails so they can be linked to your tracked applications.

  • Your Gmail OAuth tokens are stored encrypted on your device the same way API keys are — never in the database, never sent to a server we operate.
  • Fetching messages, classifying them, and matching them to a job all happen on your device using the AI provider you've configured (see section 3) — Google's servers are the only third party in this flow.
  • Synced emails (sender, subject, a snippet, and the classification result) are stored in your local database like everything else, and only ever leave your device if you export a backup.
  • You can disconnect at any time from Settings, which stops the sync and clears the stored tokens; you can also revoke access directly from yourGoogle Account permissions.

Udaan's use and transfer of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements: this data is used only to power the email tracking feature described above, is not sold, and is not used for advertising.

6. This website

The marketing site you're reading now (not the desktop app) uses Cloudflare Web Analytics for pageviews and Core Web Vitals — no cookies, no cross-site tracking, and no personally identifiable information collected. If you sign up for the mailing list or RSS feed, we use that address only to send what you asked for.

7. Children's privacy

Udaan is not directed at children under 13, and we do not knowingly collect personal information from them — largely moot given the desktop app collects nothing to begin with.

8. Changes to this policy

If this policy changes in a way that matters, we'll update the date at the top and note it in the changelog. Since Udaan is open source, you can also read the code yourself to verify any of the above.

9. Contact

Questions about this policy: open an issue onGitHub.