Privacy

If you are not signed in, your work is held in this browser’s local storage on this device. It is not saved to a Mulyba account, and clearing your browser data removes it permanently.

If you are signed in, your work is saved to your Mulyba account in our managed database, where access rules tie every record to your own account. That currently includes your Career Twin and core record, your Fast Apply session, CV versions, cover letters, saved roles and application tracking, adviser reports kept for a limited period, and the operational records needed to run the service. Your data and account records page lists exactly what is held.

When you import a CV file, the file itself is read on your device and its file bytes are not uploaded by the import step. If you are signed in, the CV content you choose to keep is then saved to your account like the rest of your work.

If you join a Mulyba local pilot, the record linking your account to that town, and the operational record of running that pilot, are held on our servers. A Local Manager sees counts and dates only, never your career content.

• Account identity: email address and a securely hashed password using a modern memory-hard algorithm. Never SHA-256, never reversible tokens.
• Career Twin content: the evidence and decisions you record.
• Application activity: roles saved, stages recorded, documents generated.
• Operational logs needed to keep the service running and secure.

When you search England apprenticeships, Mulyba’s server sends the Department for Education’s Display Advert API only your search terms and filters (keyword, route, level, distance, sort and page) and, if you give one, a location as map coordinates. To turn a postcode or place into coordinates, that postcode or place name is looked up with the public postcodes.io service. Your CV, account identity and Mulyba profile are not sent.

“Compare to my information” runs entirely within Mulyba: the advert is compared against your information on your device or in your own account, and none of that information is sent to the Department for Education. Adverts you open are governed by the Department for Education’s own personal information charter once you visit their service.

International roles are read by Mulyba’s server from the public Greenhouse job boards of a small list of employers (currently Canonical, Datadog, Fivetran and Cloudflare). Mulyba fetches each employer’s whole public list and filters it on its own server, so your search words are not sent to those employers or to Greenhouse. Nothing from your CV, Career Twin or account is sent. Fetched lists are kept in short-lived server memory for up to 15 minutes; your last search and results are kept only in this browser tab. When you follow an apply link you leave Mulyba, and the employer’s own privacy terms apply.

The Skills Explorer and the UK sponsor register search use dated reference copies stored in Mulyba’s database (ESCO v1.2.1 and a GOV.UK register snapshot). Searching them is not recorded against you and involves no third party. Mulyba does not ask for, or store, passports or immigration documents.

Sell your data. Share your CV with employers without an explicit action from you. Use your evidence to train a general-purpose model. Infer protected characteristics.

Draft intention: active accounts retained while in use; deletion removes career content immediately and operational logs within 30 days. Subject to legal review before launch.

Access, correction, deletion, portability and objection. The trust centre already demonstrates export and deletion so these are designed in rather than bolted on.