Privacy Policy

Last updated: 10 June 2026

1. Who is responsible for your data

The data controller is [Operator name / sole trader], [address], England ([ICO registration number, once registered]). Contact us about privacy at rung@rung-app.com.

2. What we collect

Account: email and password (passwords are stored hashed by our auth provider). Profile inputs: job title, salary, experience, location, skills, and any CV/documents you upload. Usage: features used, AI requests and token usage, and analytics/diagnostic data. Payment: handled by Stripe — we receive subscription status, not your full card details.

Analytics & session replay (only with your consent): if you accept analytics cookies, we use PostHog to collect usage events linked to your account email, and session replay — a recording of how you interact with the app (clicks, scrolling, navigation). Everything you type is masked in replays, and salary figures shown on screen are masked too. You can withdraw consent at any time via "Cookie settings" in the footer.

3. Why, and our lawful bases

To provide the Service and your salary/career insights (contract); to take payment and prevent fraud and abuse (contract / legitimate interests); to improve and secure the Service via analytics (consent for non-essential cookies — see our Cookie Policy — and otherwise legitimate interests); and to meet legal obligations (legal obligation).

4. AI processing (Anthropic)

When you use AI features, the content needed to generate your answer — your profile details (including job title and salary), your messages, and the text of any CV or document you've attached — is sent to Anthropic, our AI provider, to produce the response. Under Anthropic's commercial terms this data is not used to train their models. We never let the AI invent salary figures: market numbers come from our own verified data pipeline.

5. Who we share it with (processors)

We use trusted providers who process data on our behalf. We don't sell your personal data.

Where providers process data outside the UK, transfers are protected by UK-approved safeguards — a UK adequacy decision, or the UK addendum to the EU Standard Contractual Clauses (and the UK extension to the EU–US Data Privacy Framework where certified) — as set out per provider above.

6. How long we keep it

Account & profile data: kept while your account is active and deleted or anonymised within 30 days of account closure or a valid deletion request. Usage & AI/token logs: kept up to 24 months for billing, fraud-prevention and analytics, then deleted automatically by a scheduled purge job. Backups: cycled out of routine backups within 90 days. We keep limited records longer only where the law requires (e.g. tax/accounting).

7. Your rights

You have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent. You can edit your profile, change your email, and permanently delete your account and all associated data from your Account page — this cancels billing, removes your files and database records, and deletes your analytics profile (events and recordings) from PostHog. For data access, portability or any other request, email rung@rung-app.com and we'll respond within one month. You can also complain to the ICO (ico.org.uk).

8. Children

Rung is not intended for, or directed at, anyone under 18, and we do not knowingly process children's data. If you believe someone under 18 has created an account, contact us at rung@rung-app.com and we will delete it.

9. Cookies

We use essential cookies to run the site and, with your consent, analytics cookies (including session replay). See our Cookie Policy — and use "Cookie settings" in the footer to change your choice at any time.

10. Changes & contact

We'll post updates here with a new date, and for material changes we'll notify you. Questions or requests: rung@rung-app.com.