Privacy Policy

What we collect

• Account info. Your name, email, and password. Used to identify you and authenticate sessions.
• Profile content. For seekers: your CV (uploaded file and parsed text), bio, skills, experience, education, desired categories, seniority, salary expectations, and preferred locations. For employers: business info, the job postings you create, and any screening questions you add to them.
• Photo and intro video. Both optional. An employer sees them on your card before they swipe — that is what they are for. You can add either one in two ways: choosing a file already on your device, or recording it in the app. Only recording uses your camera and microphone, only while the capture screen is open, and never in the background. What you record stays on your device until you play it back and approve it; leaving that screen discards it. You can replace or remove either one at any time.
• Location. Coordinates for your home location and, for employers, per-job locations. Used to show seekers jobs near the places they chose and rank those jobs by distance. A business you applied to sees your city, but we never rank or filter candidates by where they live. You set these one of three ways: searching for a place by name, dropping a pin on the map, or tapping “use my current location”. That last option is the only one that reads your device's location, and only at the moment you tap it — we take a single reading, never in the background, and turn it into a place name. We store the coordinates as your device reports them.
• Swipes and matches. Which jobs or candidates you swiped left or right, and the resulting mutual matches. Used to personalize ranking and to power the booking flow.
• Screening answers. Some jobs ask a few short questions when you apply. Your answers go to that business with your application. We also keep them on your account so a later job asking the same question comes pre-filled — you can change an answer whenever you apply. A business can mark a question as a must-have: if your answer doesn't fit it, your application is marked and placed lower in that business's list of applicants, but it is never hidden from them.
• Messages and bookings. What you and a match send each other in the in-app chat, and the interview bookings you make. Stored to deliver the conversation to both sides; a human looks at a conversation only when reviewing an abuse report about it.
• Usage analytics. Anonymous-ish product events (screens viewed, swipe counts, errors) used to improve the product. See "Your choices" below for how consent controls this.
• Diagnostics. Crash reports and performance traces, used to fix bugs. Stack traces only — we don't capture form inputs or message bodies.

Why we collect it

• To run the matching algorithm and rank what you see.
• To detect a mutual match and open the interview booking flow.
• To show your profile card — including any photo or intro video — to the other side before they swipe.
• To pass your answers to a job's screening questions to the business you apply to, and to pre-fill them on your next application.
• To prevent abuse and review reports.
• To improve the product based on real usage patterns.
• To measure and aim our own advertising — see "Advertising" below.
• To contact you — see "How we contact you" below.

What we don't do

• We don't sell your data.
• We don't give advertisers your CV, messages, photos, or anything you wrote in Scout8. What does reach an advertising platform — hashed identifiers and account milestones — is described under "Advertising" below.
• We don't use it to train external AI models. The AI services we use for matching process data on our behalf and are contractually prohibited from using it to train their own models.
• We don't show ads inside Scout8.

Matches and your contact details

Scout8 exists to introduce the two sides, so a mutual match is where sharing starts: your profile card, your messages, and — where it helps hiring move faster — contact details such as your phone number and email may be shared with the business you matched with. None of this happens from merely appearing in someone's deck, and our Terms of Service allow a business to use shared details only for the hiring conversation you matched over.

Advertising

We advertise Scout8, and we work with advertising platforms — currently Meta (Facebook and Instagram) — to measure those campaigns and to reach audiences relevant to Scout8. For that, we may share limited data with such platforms: identifiers like your email or phone number in hashed form (a one-way fingerprint rather than the readable value), device and browser information, and high-level signals about account activity. It never includes your CV, messages, photos, videos, or the content of any job post.

In the EU/EEA and the UK, none of this runs until you accept the cookie banner, and declining costs you nothing in the product.

In Israel and elsewhere, it starts when you begin browsing. Israeli law recognises implied consent, so we tell you what we do rather than block the site to ask — that is what the notice at the bottom of the page is for, and this section is the full version of it. If you would rather we did not, email us and we will exclude you.

Advertising platforms handle what we send as independent companies under their own privacy policies, and if we start working with a new one we'll update this page.

Cookies

The website uses a short list of cookies and similar storage:

• Sign-in and session cookies — strictly functional.
• A cookie that remembers your consent choice.
• Analytics identifiers, so we can tell visits apart and see which parts of the product people struggle with.
• Advertising cookies from the advertising platforms we work with — currently Meta's _fbp and _fbc — which let a sign-up be matched back to the ad that brought you here.
• In the EU/EEA and the UK the last two are set only after you accept the banner. In Israel and elsewhere they are set when you start browsing.

There are no other advertising or cross-site cookies.

Third-party processors

To run Scout8, we rely on a small set of trusted service providers, each handling a specific role on our behalf under data-processing terms:

• An authentication provider for account and session management.
• A managed database for storing your profile and app data, hosted in the EU.
• A cloud hosting provider for our web and API infrastructure.
• An AI service for the semantic matching embeddings.
• An analytics platform for anonymous-ish product usage events.
• An error and performance reporting service.
• A cloud storage and media-processing service that holds your photo and intro video, and re-encodes uploaded video so it plays back smoothly on every device.
• Apple MapKit for location autocomplete and geocoding, in both the iOS and web apps. Searching a place name sends that query to Apple; dropping a pin or using your current location sends those coordinates to Apple to turn them into a place name. Apple handles those lookups under its own privacy policy — we keep only the result.

Advertising platforms are deliberately not on this list. The processors above act only on our instructions; advertising platforms use what we send under their own policies, which is why they get their own section instead of a bullet here.

If you need the current list of named subprocessors (for example to satisfy your own compliance obligations), email us at dbarabi5@gmail.com.

How long we keep it

Account and profile data is kept for as long as your account is active. When you delete your account, we remove your personal data within 30 days. Aggregated, non-identifying analytics may be retained longer to track product trends. Data already shared with advertising platforms is retained under their own policies.

How we contact you

We may contact you about your account and activity — matches, messages, bookings, and things that need your attention — by push notification, email, SMS, or phone. With your permission, we may also send marketing communications about Scout8; every one includes a way to opt out, and opting out never affects your account. If you'd rather not receive phone calls, tell us once and we'll stop.

Your choices

• Access or export. Email dbarabi5@gmail.com and we'll send you a copy of your data within 30 days.
• Correction. You can edit most fields directly in the app (Profile → Edit Profile).
• Deletion. Profile → Settings → Delete Account. Removes your data within 30 days. You can also email us.
• Device location. Entirely optional — search for your city or drop a pin instead, and we never ask for it. If you did grant it, revoke it any time in iOS Settings → Privacy & Security → Location Services (or your browser's site settings) without losing the location already on your profile.
• Camera and microphone. Optional in the same way — choose an existing photo or video instead and we never ask. If you did grant them, revoke either any time in iOS Settings → Privacy & Security → Camera or Microphone (or your browser's site settings). That is separate from what is already on your profile: to take a photo or video down, use Profile → Edit Profile.
• Marketing messages. Opt out any time — use the link in the message, or tell us once and it covers every channel. Messages about your account itself continue for as long as you have one.
• Analytics and advertising. Where consent is required — including Israel, the EU/EEA, and the UK — nothing runs until you answer the cookie banner, and you can change your answer through your browser's cookie settings. In the app, email us to exercise the same choices.

Children

Scout8 is for working-age adults and is not directed at children under 16. We do not knowingly collect data from people under 16. If you believe we have, email us and we will delete it.

Changes

If we materially change how we handle data, we'll update the "Last updated" date at the top and, when the change is significant, notify you in the app.