Privacy Policy

This policy explains what personal data Averic's apps and website use, why, who else sees it, and the rights you have. It covers Guidance, Ergo, Mize, averic.app and our emails, including the Slate, iPhone and Mac waitlists. An unreleased app’s own data practices will be explained before it is offered. It is written to be read; if anything is unclear, email hello@averic.app.

1. Who we are

Averic Ltd, a company registered in England and Wales (company number 17501459), of First Floor, Swan Buildings, 20 Swan Street, Manchester M4 5JW, is responsible for your personal data under UK data protection law (the "controller"). Contact us about anything in this policy at hello@averic.app.

2. The short version

• Our apps keep your work on your own computer. Your tasks, notes, job applications, CV, usage time and settings stay there unless a feature you choose needs to send something.
• No advertising trackers in this website build. Our apps send usage and crash reports only if you switch them on, and even then never your work, your email or your name.
• You do not need an account. An account adds sign-in across apps, paid plans that follow you, feedback boards and, in Mize, your record kept in step across your devices.
• We never sell your data.

3. What we collect, and when

When any Averic app checks for updates

Guidance checks for updates, and lists apps you can download, each time it opens; each app checks for its own updates too. Those checks go to GitHub, which sees your IP address and which files were asked for. Nothing else is sent.

If you switch on usage and crash reports

Every app has one switch, in Settings, Privacy, and it is off until you turn it on. It covers all our apps at once. When it is on:

• each time an app opens, it tells PostHog which app and version opened, with a random number made on your computer so repeat visits can be counted. The event is designed not to include your name, email or work. Like other internet services, the provider receives connection information such as an IP address; our recorded configuration discards client IP data;
• if an app breaks, it sends Sentry the error and where in the app's code it happened, so we can fix it. Crash reports do not include your work.

Turn the switch off and both stop straight away.

If you create an Averic account

• Your email address, a password (stored only in scrambled, hashed form by our provider, Supabase), and a display name if you set one.
• Your plan for each app.
• If you ask for a sign-in code, we email one to your address.
• If you use Mize signed in: whether you are a student or looking for full-time work, and whether you want starter or experienced roles, so its ratings are the same on every computer you sign in on.

Mize uses the same account; you sign in to it separately.

If you post on a feedback board

Your post's title and text, your display name and your votes. Anyone signed in to an Averic account can see your posts, your display name and how many votes a post has. Nobody else can see who voted, or find your account or profile picture from a post. If you block someone, we keep who you blocked so their posts stay hidden from you; you can unblock them in the app's Settings.

If you report a post, we keep your report (the reason, anything you add, and a copy of the post) so we can act on it and keep the records the Online Safety Act requires.

In Mize

Mize is a job search app, so it needs more than the others. It sends data only when you use the feature that needs it:

• Searching sends your search words and the place you are searching in to our server, which asks Adzuna for listings. If you are signed in, Mize rates each listing for you: our AI provider receives the listings together with the details you have given Mize about yourself: when you are free, how you travel, your age and your skills.
• CV and writing features send what you choose (your CV, a job you want a pitch or interview brief for, or a reply from an employer that you paste in) to our AI provider.
• Reading replies from your email: if you connect Gmail or iCloud Mail under Account in Mize, Mize looks through that inbox on your device, at most every 30 minutes, for emails from the last 30 days that name an employer you are still waiting to hear from. Only those emails are sent to our AI provider, which reads whether each is an interview, an offer or a no, and Mize marks the answer on your record. Gmail is connected with read-only access. iCloud Mail is connected with an app-specific password you make with Apple, kept in your device's secure storage (the Keychain) and only ever sent to Apple. We never receive your inbox, your sign-in or your password, and you can disconnect an inbox there at any time. Mize's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
• Your date of birth: before you first use an AI feature, Mize asks your date of birth, to check you are 13 or older. It is kept in your profile, which stays on your device unless you sign in (see below), and is not sent to our AI provider.
• Report this: if you report an AI answer, we receive the answer, which feature gave it, the reason you chose and any note you add, linked to your account, so we can review it and make the AI safer. Only we can read reports.
• Travel times send your home location and the job's location to Google's Routes service.
• Setting your location: postcode and place-name lookups go to postcodes.io, and "Use my location" sends your computer's coordinates to BigDataCloud to find your town.
• Maps and logos: the job map loads from OpenFreeMap, which receives your IP address and the map area shown and sets no cookies; employer logos load from Brandfetch and Google, which see your IP address and the employer shown. Mize's font loads from Google Fonts.
• Fair use: AI ratings, CV tailoring and pitches need you to be signed in; signed out, a search still shows its listings, unrated. To apply your plan's AI allowance, our server counts the AI searches, CV tailorings and pitches you use, and keeps the time of each one on your account, with our account provider, Supabase: a search counts for 24 hours, and a tailoring or pitch for 30 days. A time that no longer counts is removed the next time you use that feature, and all of them are deleted with your account. To stop overuse, it also remembers a random ID made by your computer and the times of your requests, in memory, for one hour.

Your applications, CV, profile, saved searches and shifts (your record) are kept on your device, and Mize keeps daily backups of them there too. If you sign in, Mize also keeps a copy of your record in your account, with our account provider, Supabase, in London, so the same record is on every device you sign in on: it is brought in when you sign in and open Mize, and each change you make is sent moments after you make it. Only you can read it, and it is deleted with your account. Signed out, your record never leaves your device.

In Ergo, if you connect Spotify

Ergo talks to Spotify directly from your computer. We do not receive your Spotify data; Spotify's own privacy policy applies to it.

If you buy a paid plan

When you buy a paid plan, OneLink, the merchant of record service run by Stripe, handles the payment, and its privacy policy covers your card and billing details. We never see your card number. We receive your email address, your country, the plan, and order and subscription numbers, so we can give you what you paid for and keep the records tax law requires. We use your email address to match the purchase to your Averic account or, if you do not have one yet, to hold it until you create one with that address. When you delete your account, you choose whether to cancel your subscription too; if you do, we ask Stripe to cancel it.

If you email us or join a waiting list

We keep your emails and our replies. When you join a waitlist, the website sends your email address, selected app or platform list, and a source label (“Averic website”) to Loops. Loops also receives connection information needed to process the request. We use your consent to send updates about that list, including its launch. You can unsubscribe from those emails or email us. Not joining does not affect your access to our released apps. We may keep a minimal suppression record to respect an unsubscribe request.

When you visit our website

Netlify delivers the website and processes network information such as your IP address, request time and requested files for hosting and security. Fonts and screenshots are hosted with the site. The download section asks GitHub for each app’s latest version number, so GitHub sees your IP address for that request. The website has no accounts or embedded analytics. Its payment buttons take you to a checkout page hosted by Stripe, and nothing you enter there passes through the website. See the Cookie Policy for browser storage.

4. Why we use it, and the law that allows it

Mize's ratings of job listings are suggestions for you to use as you see fit. We do not make decisions about you by automated means that have legal or similarly significant effects.

5. Children and young people

You must be 13 or older to use our apps. If we learn that someone under 13 has an account, we delete it. Many of our users are 13 to 17, so we aim to give young users privacy-protective defaults and avoid unnecessary collection.

Mize's AI features are for 13 and over. Before you first use one, Mize asks your date of birth (you tell us; we do not ask for documents) and keeps the AI off for anyone under 13. Every AI answer is labelled as AI, with a way to report it, and Mize shows a short guide to using its AI safely. We have assessed the risks Mize's AI features pose to young people in a data protection impact assessment, and we review it when the features change.

6. Who else sees your data

We use these companies to run the Services. Their role depends on the service. Some process data for Averic; others, such as external download services and payment providers, also have their own responsibilities and privacy notices:

Our AI providers do not use what you send them to train their models.

Postcodes.io, BigDataCloud, OpenFreeMap and Brandfetch are contacted to show you locations, maps and logos; they receive only what that needs.

We may also share data if the law requires it, for example with the police, or with a buyer if Averic's business is ever transferred, who would have to follow this policy.

7. Data sent outside the UK

Some of these companies store or handle data outside the UK, mostly in the United States. When they do, we rely on the protections UK law requires: the UK-US data bridge where the company is certified under it, or the ICO's international data transfer agreement or addendum in the company's terms. Email us for a copy of the relevant safeguard. Our accounts database is stored in the UK, in London (Supabase's eu-west-2 region). Usage and crash reports are configured for European Union services. Contact us for information about the location and safeguards for the data relevant to your request.

8. How long we keep it

9. Your rights

You can ask us to:

• give you a copy of your personal data;
• correct anything wrong;
• delete it;
• restrict or object to how we use it;
• give it to you, or another company, in a portable format.

You can withdraw consent at any time, for example by unsubscribing. Email hello@averic.app to use any of these rights; it is free, and we reply within one month. You can delete your Mize account yourself in Mize's Settings.

10. Complaints

If you are unhappy with how we have handled your data, tell us first at hello@averic.app. We will acknowledge your complaint within 30 days and tell you what we are doing about it.

You can also complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

11. Keeping it safe

• Your sign-in on your computer is encrypted to your Windows account, so the file is useless on another machine.
• Our database only lets each person read their own account data.
• Everything our apps send travels over encrypted connections.
• The apps contain no secret keys, and our own accounts are protected with two-step sign-in.

These measures reduce risk; they do not guarantee that a system cannot be compromised. No system is perfectly secure. If a breach puts your data at risk, we will tell you and the ICO as the law requires.

12. Changes to this policy

We will update this policy when our apps or the law change, and change the "last updated" date. If a change matters to you, we will tell you in the app or by email before it applies.

13. Contact

Averic Ltd, a company registered in England and Wales (company number 17501459), First Floor, Swan Buildings, 20 Swan Street, Manchester M4 5JW. Email hello@averic.app.