Legal & Compliance

Privacy Policy

InternshipUncle is committed to transparent, secure data practices under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and international standards.

Effective Date: September 2026

Contents

Section 01

Information We Collect

InternshipUncle (operated as a Data Fiduciary under the Digital Personal Data Protection Act, 2023) collects only the personal data necessary to provide our internship preparation, resume optimization, and readiness assessment services. We adhere to strict data minimization principles.

Category Examples How Collected
Account Info Name, email address, profile photo Google Sign-In / direct registration
Profile Data Education, college/university, degree, graduation year, skills, target roles Onboarding & profile setup
Resume Content Uploaded PDF or structured resume bullet points and project descriptions Resume Lab / Resume Matcher
App Activity Saved jobs, mock interview responses, readiness score metrics In-app interactions
Device Info Operating system version, device model, app version Automatically on app launch
Diagnostic Logs Session duration, feature usage counts, crash logs (anonymized) Firebase Analytics & Crashlytics
Notice of Purpose: We never collect sensitive personal information such as government identity numbers (Aadhaar, PAN, SSN), financial credentials, or biometric data.

Section 02

How We Use Your Data (Purpose Limitation)

In accordance with Section 4 and Section 6 of the DPDP Act 2023, data is processed solely for specific, lawful purposes for which you have provided explicit consent:

  • Provide and personalize core features: Discover, Analyze, Resume Lab, Interview Prep, and Dashboard.
  • Power AI-driven features including resume roasting, JD skill-gap analysis, mock interview scoring, and Uncle Verdict assessments.
  • Calculate and display your personalized readiness score and track your progress over time.
  • Match job listings to your profile and target roles to improve recommendation relevance.
  • Send essential notifications such as application deadline reminders (only if explicitly enabled).
  • Diagnose technical bugs and crashes to ensure app reliability and uptime.
  • Comply with applicable legal and regulatory obligations in India.

Zero Commercial Selling: We do not sell, rent, or trade your personal information or resume data to advertisers, data brokers, or third-party recruiters.

Section 03

AI & Third-Party Services (Data Processors)

To deliver advanced AI analysis and secure infrastructure, InternshipUncle engages trusted third-party Data Processors. When you interact with AI features, only the specific content needed to generate the response is processed.

Service / ProcessorPurposeData Processed
Google Gemini API Resume parsing, critique, interview evaluation, JD analysis Resume text, job description text, interview answers (ephemeral processing, no model training on private resumes)
Supabase Inc. Cloud database, secure authentication, encrypted file storage Account credentials, user profile, encrypted resume files
Google Sign-In / OAuth Secure, authenticated identity verification Name, email address, profile avatar (read-only)
Google Firebase App crash analytics, performance telemetry, and stability monitoring Device metadata, crash traces, aggregated usage statistics
Groq (Failover) Backup inference provider if primary AI endpoint is unreachable Same payload as primary AI endpoint — invoked on failover only

All AI requests are mediated through authenticated server-side endpoints (Supabase Edge Functions). Private API keys are never exposed on client devices, and data is transferred via TLS 1.2+ encrypted channels.

Section 04

Data Storage, Security & Breach Notification

InternshipUncle implements robust technical and organizational security measures to protect your digital personal data against unauthorized access, alteration, or disclosure:

  • Encryption: All personal data in transit is encrypted using modern TLS (Transport Layer Security) 1.2 and 1.3 standards.
  • Access Controls: PostgreSQL Row-Level Security (RLS) ensures each student can only access and query their own records.
  • Storage Isolation: Uploaded resume PDFs reside in private, access-restricted storage buckets.
  • Token Security: Session authentication uses short-lived, cryptographically signed JSON Web Tokens (JWTs).
  • Breach Notification: In the event of a verified personal data breach, InternshipUncle will notify the Data Protection Board of India and affected Data Principals in accordance with Section 8(6) of the DPDP Act, 2023.

Section 05

Your Rights as a Data Principal (DPDP Act, 2023)

Under Chapter III of the Digital Personal Data Protection Act, 2023, you have clear statutory rights regarding your personal data:

  • Right to Access Information (Section 11): Request a summary of the personal data being processed, a list of third-party Processors with whom data has been shared, and any other processing details.
  • Right to Correction & Erasure (Section 12): Correct inaccurate or incomplete data, update outdated information, or request the permanent erasure of your personal data when no longer necessary.
  • Right of Grievance Redressal (Section 13): Access a fast-track grievance redressal mechanism provided by InternshipUncle to resolve privacy or data concerns.
  • Right to Nominate (Section 14): Designate an individual who will have the authority to exercise your data rights in the event of death or incapacity.
  • Right to Withdraw Consent: You may withdraw your consent at any time via in-app controls or by emailing our Grievance Officer. Withdrawal does not affect lawful processing conducted prior to withdrawal.

You can execute these rights directly through the app settings, via our dedicated Account Deletion Page, or by contacting our Grievance Officer.

Section 06

Data Retention & Erasure Policy

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law:

  • Active Accounts: Profile data and uploaded resumes are stored for the duration of your active account.
  • Mock Interview Logs: Interview records and scoring transcripts are retained for 12 months of inactivity, then automatically purged.
  • Account Deletion: When you delete your account via the app or web portal, all personally identifiable data, resumes, and progress logs are permanently purged from primary databases within 7 days.
  • Anonymized Telemetry: Aggregated, non-personally identifiable diagnostic data may be retained for platform stability and performance optimization.

Section 07

Protection of Children & Minors (DPDP Act Compliance)

In accordance with Section 2(f) and Section 9 of the Digital Personal Data Protection Act, 2023, a "child" is defined as an individual who has not completed 18 years of age. InternshipUncle enforces strict protections for young students and minors:

  • Standard Eligibility: InternshipUncle is primarily designed for students, graduates, and young professionals aged 18 years and above.
  • Minors Aged 16 to 17: Individuals between the ages of 16 and 18 may use InternshipUncle solely with verifiable consent from a parent or legal guardian. By continuing to use the service, such users represent that their parent or legal guardian has reviewed and consented to this Privacy Policy and User Agreement.
  • Prohibition on Under-16 Use: InternshipUncle does not knowingly permit registration, account creation, or data submission from children under 16 years of age.
  • Zero Tracking of Minors: In strict compliance with Section 9(3) of the DPDP Act, InternshipUncle does not engage in tracking, behavioural monitoring, or targeted advertising directed at minor users.
  • Parental Rights: Parents or lawful guardians may at any time inspect the data collected from their minor child, request corrections, withdraw consent, or demand the immediate and permanent deletion of the minor's account by writing directly to internshipuncle@gmail.com.
If you believe a user under 16 has registered or that a minor has registered without requisite parental consent, please alert our Grievance Officer immediately for prompt account closure and complete data purging.

Section 08

Changes to This Policy

We may update this Privacy Policy periodically to reflect enhancements to our platform, new regulatory rules, or changing legal standards. When material changes occur, we will:

  • Update the "Effective Date" at the top of this document.
  • Provide prominent notification through an in-app notice, banner, or direct email to registered users.
  • Provide a reasonable review period before material updates take legal effect.

Continued use of InternshipUncle after the effective date of an update signifies your acknowledgment and acceptance of the revised policy.

Section 09

Grievance Redressal Officer & Statutory Contact Details

In accordance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and Section 8(9) & Section 13 of the Digital Personal Data Protection Act, 2023, the details of the designated Grievance Officer and Data Protection Lead are provided below:

Designation Grievance Redressal Officer & Data Protection Lead
Organization InternshipUncle
Official Email internshipuncle@gmail.com
Registered Location Bengaluru, Karnataka - 560029, India
Acknowledgment Timeline Within 24 to 48 hours of ticket receipt
Resolution Timeline Within 15 business days as prescribed under Indian IT and DPDP regulations

If you are not satisfied with the resolution provided by our Grievance Officer, you retain the statutory right to escalate the complaint to the Data Protection Board of India in accordance with Section 13(3) of the DPDP Act, 2023.

Questions or Grievances?

Our dedicated compliance team and Grievance Officer are here to assist with any data privacy inquiry or rights request.

Contact Grievance Officer