Oppli · Legal

Privacy Policy

Last updated · October 3, 2026

1. Introduction

This Privacy Policy explains how DestinyX Studios, LLC ("Oppli", "we", "us", or "our") collects, uses, discloses, and safeguards personal information when you access our websites, mobile applications, and related services (the "Service").

Oppli is an AI-enabled career coaching and planning service. We help you understand your career position, evaluate possible next roles, identify gaps, and organize a practical plan; we are not an employment agency or legal advisor and we do not guarantee outcomes.

2. Data controller

DestinyX Studios, LLC operates Oppli and is responsible for personal information processed through the Service. Privacy inquiries and legal notices: support@destinyxstudios.com. Operator location: DestinyX Studios, LLC, San Jose, CA 95112, USA.

3. Information we collect

  • Account information: name, email, username, sign-in identity and optional phone/contact information. Apple and Google provide the identity information you authorize. If you use Sign in with Apple, we retain an encrypted authorization token on our server so we can revoke Apple access when your account is permanently deleted.
  • Career information: uploaded résumés and extracted text; work history, education, certifications, projects, skills, portfolio links, job preferences, target roles, goals, coaching answers and prompts; saved jobs and application activity you record.
  • Generated materials: résumé analysis, job-fit insights, coaching plans, tailored résumés, cover letters, recruiter-email drafts and related exports.
  • Profile photos and location: photos you choose and the location you enter or authorize for relevant jobs. Photo URLs are publicly accessible: anyone with the URL can view the photo. Device location is optional; you can enter an area manually.
  • Purchases: subscription status, plan, transaction identifiers, renewal/expiration information and billing-provider records. Apple or the web billing provider handles your payment details; Oppli does not receive full payment-card details for Apple purchases.
  • Usage and diagnostics: searches, interactions, device/session/push identifiers, app version, IP/network information, timestamps, progress, performance and error events.
  • Communications: support requests, feedback and transactional emails. If you separately opt in, we use your name and email for Oppli newsletters.
  • Derived information: analyses and recommendations generated from your career inputs, plus security and abuse signals.

Submit only information needed for career guidance. Avoid unnecessary sensitive information or other people's private information.

4. Purposes and lawful bases

We use your information to maintain your account, deliver career tools, personalize job and learning recommendations, save your work, manage access and billing, provide support and account-rights controls, measure performance, and protect the Service. Newsletter marketing is optional and uses a separate opt-in; it is not required to create an account or use paid features.

We also use career background, goals and learning preferences, job-search preferences, coarse location labels and subscription status to understand our audience and evaluate and improve the Service. This internal analysis is separate from optional newsletter signup.

Where EEA/UK data-protection law applies, the legal basis depends on the activity: performance of our service contract, your consent where required, legitimate interests in security and service reliability, or legal obligations. An in-app permission does not waive your statutory privacy rights. You may object or withdraw consent as applicable by using account controls or contacting us.

5. OpenAI processing and your choice

With your explicit permission, Oppli sends relevant résumé text, work history, education, skills, career goals, job preferences and prompts to OpenAI to analyze your background, produce job-specific insights, build coaching plans and draft application documents. OpenAI also processes relevant career goals, preferences and prompts to research roles and learning resources. We save generated results in your account for review and editing. Perplexity is not used by the current career-processing integration.

The app presents a separate, initially unchecked AI sharing agreement before account setup and subscription selection. Career tools require this agreement. Newsletter signup is independent and optional. You can withdraw AI sharing in Account & privacy. Withdrawal stops subsequent AI sharing; it does not recall a request already sent, delete saved results automatically, or cancel billing. Account controls, subscription management, data export and account deletion remain accessible.

Guest résumé extraction runs on Oppli's servers without sending that guest résumé to OpenAI. Once authenticated and permitted, relevant career information can be used in the AI workflows described above.

OpenAI's API data controls describe its processing and retention; API inputs are not used to train its models by default unless the API customer opts in. Provider abuse/security retention and feature-specific retention may still apply. These are separate from deletion of your Oppli account. Read OpenAI API data controls and OpenAI's privacy information, or contact us for information about our current processor arrangements.

AI output may be inaccurate or incomplete. Review and edit it before use. Job-fit scores indicate alignment with available evidence; they are not interview, offer or hiring probabilities. Oppli does not make employment decisions or guarantee outcomes.

6. Disclosures to third parties

We share necessary information with contracted providers that operate the Service: OpenAI for the processing described above; Supabase and hosting/storage infrastructure for authentication and account data; RevenueCat and Apple for native subscription verification; Stripe for web billing; and transactional email and notification providers for delivery. Their responsibilities and retention are governed by the applicable agreements and settings.

We may also disclose information to professional advisers or authorities when necessary for legal obligations, disputes or protection of rights, and in a business transfer subject to applicable safeguards. We do not sell personal information or share it for cross-context behavioral advertising. Optional newsletters are Oppli's own marketing.

Oppli does not submit job applications automatically or accept an employer's terms for you. Applying opens the employer's site, where you decide what to submit. Third-party sites and learning providers have their own terms and privacy practices.

7. Security & Safeguards

We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, role‑based access controls, logging and monitoring, and vulnerability management. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

If we become aware of a breach affecting your personal information, we will notify you and regulators as required by law and our contractual commitments.

8. Retention, export and account deletion

We retain active account information and saved career materials while needed to provide your account and its history. You can correct your profile, withdraw AI sharing, request a data export, or request account deletion from Account & privacy without an active subscription.

Deletion has a 30-day recoverable hold. Requesting deletion disables normal account access and schedules permanent deletion after that window. Signing in again with fresh credentials during the hold cancels the request and restores the account. After the hold, our purge removes the profile, associated career/preference records, owned résumé/Studio/export files, normal feedback and account diagnostics from the active Service. For Apple-linked accounts, we revoke the retained Sign in with Apple authorization as part of permanent deletion. If the account has no retained Apple authorization, the app asks you to verify the linked Apple account first. We send a confirmation to your account email after successful permanent deletion. Failed cleanup is retained for retry instead of falsely reporting completion.

The encrypted recipient for this transactional confirmation is kept only for delivery, and is removed after successful delivery or within seven days of the permanent purge. Unresolved delivery failures require support attention. This email is separate from newsletter consent.

Payment providers may retain purchase records under their legal and operational obligations. Separate administrative/security records and provider backups may also remain where necessary for compliance, security or dispute resolution; their retention depends on the applicable obligations and provider arrangements. Backups are not the active account, and account deletion does not immediately recall content already processed by an external provider. Contact our privacy team for information about applicable retention and exceptions.

Deleting an account does not cancel Apple billing. Manage or cancel at Apple subscription settings. Web billing uses its own management controls.

Exports are emailed to your account address using an expiring private download link. Link expiry prevents further access through that link; it does not itself erase the stored export file. Export files are removed on a later export request or account deletion.

9. Your choices and rights

Use You → Settings or Account & privacy to edit your information, withdraw AI sharing, manage billing, request an email data export, request deletion and sign out. Newsletter signup is optional; use unsubscribe instructions or contact us to stop marketing. Device permissions can be managed in system settings.

Depending on your location, you may also have rights to access, correction, deletion, restriction, portability, objection and withdrawal of consent. Contact support@destinyxstudios.com to exercise rights or appeal where applicable. We verify ownership and respond within applicable timelines. Authorized-agent requests require appropriate proof of authorization.

10. Cookies & Tracking

We use browser or device storage for service settings and account sessions where needed. For example, the website stores your theme preference locally. You can manage cookies and local storage through your browser or system settings. Clearing session storage may sign you out or reset preferences.

11. International Transfers

We are based in the United States and may transfer personal information to countries where we or our service providers operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses and supplementary measures.

12. Automated Decision‑Making

Career reads, role guidance, and recommendations assist with planning but do not make legal or similarly significant decisions about you. You can review, edit, ignore, or delete outputs at any time.

13. Adults only

The Service is for people aged 18 and over and is not directed to children. We do not knowingly collect personal information from people under 18. If you believe someone under 18 has provided information, contact support@destinyxstudios.com so we can investigate and remove it as appropriate.

14. U.S. State Disclosures (CA/VA/CO/CT/UT)

Residents of certain U.S. states have additional rights under local laws (e.g., CPRA, VCDPA). We do not sell personal information or share it for cross‑context behavioral advertising. You may exercise applicable rights as described in Section 9.

15. Do Not Track

Some browsers transmit "Do Not Track" signals. The Service does not respond to such signals because no common industry standard has been adopted. You can manage browser storage as described above.

16. Changes to this policy

We may update this Policy and its revision date. We will give notice of material changes through the Service or email as appropriate. Changes that require a new permission will be presented for your choice; continued use alone does not replace an explicit permission required for AI sharing or optional marketing.

17. Contact

Questions or requests about this Policy or our data practices:

Contact

Privacy and legal: support@destinyxstudios.com
Location: DestinyX Studios, LLC, San Jose, CA 95112, USA