Privacy Policy

Last updated: 6 August 2026.

Who we are

Apprentio is a small, independently-run product for UK sixth-form students applying to degree apprenticeships, operated by Archie Richardson. For anything about your data, contact richardson.archie@yahoo.com.

What we collect

• Account: your email address and password (handled by our auth provider, Supabase — we never see your raw password).
• Profile: full name, school year, subjects and predicted/actual grades, sector interests, postcode and commute radius, right-to-work status, and whether you're eligible for security clearance.
• Uploaded documents: your base CV and cover letter (PDF or plain text).
• Applications: which vacancies you save, the stage you've marked them at, and any AI-drafted CV/cover letter content generated for a specific vacancy.
• Billing: if you subscribe, Stripe holds your payment details — we only ever see your subscription status, not your card details.

Why we collect it

To match you against apprenticeship vacancies, to let you track applications you care about, and — for subscribers — to draft a tailored CV and cover letter per vacancy using your base documents. Right-to-work and security clearance eligibility are used only to help you and prospective employers gauge fit; we don't verify either and we don't share them with anyone except when included in AI-drafted content you choose to approve.

Who we share it with

• Anthropic (maker of Claude) — receives your base CV, base cover letter, and the target vacancy's details, solely to generate a tailored draft when you ask for one. This only happens for premium accounts and only when you click Draft.
• Stripe — processes subscription payments. Your card details go directly to Stripe; they never touch our servers or database.
• Supabase — hosts our database, authentication, and file storage, in the EU.

We do not sell your data, and we do not use it for advertising.

Where it's stored

All of your data — profile, uploaded documents, applications — is stored in Supabase's EU region. AI drafting requests are sent to Anthropic per their own data processing terms; we don't control where Anthropic processes that request, only what we send it.

How long we keep it

For as long as your account is active. If you delete your account, your profile, uploaded documents, saved applications, and drafted content are deleted, and any active subscription is cancelled — see Delete my account. Stripe retains payment/invoice records separately, as required for their own accounting and tax obligations.

Your rights

Under UK GDPR, you can:

• Access the data we hold on you — everything visible in your profile and applications already is, in-app.
• Correct inaccurate data — edit your profile at any time.
• Delete your account and data — use Delete my account for a full, immediate purge, or email us.
• Export your data in a portable format — email us and we'll send it to you (self-service export isn't built yet).
• Object to or restrict certain processing — email us.

Sixth-formers and age

Apprentio is aimed at students aged 16–18. UK GDPR sets the age of digital consent at 13, so if you're in our target age range you can create an account and consent to this policy yourself, without a parent or guardian.

Cookies

We use a single essential cookie to keep you signed in. We don't use tracking or advertising cookies.

Changes to this policy

We'll update the date at the top of this page when this policy changes. As noted above, this is currently a first draft.