Privacy policy
Manar Labs, Australia. Last updated 8 August 2026.
The short version: we hold your email address and how many minutes you've bought. Your CV, your recordings, your transcripts and your microphone audio stay on your Mac.
What we store on our servers
| Email address | To identify your account and send sign-in codes |
|---|---|
| Minute balance and ledger | Purchases, trial credit and usage, so we know what you're owed |
| Device records | A token per Mac you sign in on, and when it was last seen |
| Session timings | Start, end and duration — to meter minutes. Not content |
We do not store your CV, job descriptions, questions, answers, transcripts or recordings.
What stays on your Mac
- Your CV and any context documents you load
- Recordings (
.wav) and transcripts, written to your Documents folder - Transcriptions of your own voice, produced by macOS on-device
- Your settings, including the job description and interviewer details
Deleting the app's folder in Documents deletes them. We never had a copy.
What is sent to OpenAI
To transcribe questions and draft answers, the app sends OpenAI: the meeting audio, and the context you've loaded (CV, job description, panel details) as instructions. Your microphone audio is not sent unless you deliberately change Send to model from its default.
OpenAI processes this as our sub-processor under their API terms, which state that API data is not used to train their models.
Payments
Paddle.com Market Limited is the merchant of record. They collect and hold your billing details; we never see your card. Their privacy policy governs that data.
Your rights
Under the Australian Privacy Act and, if you're in Europe, the GDPR, you can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Email privacy@manarlabs.com and we'll action it within 30 days. Deleting your account removes your email, ledger and device records; we keep transaction records where tax law requires it.
Retention
Account and ledger data is kept while your account exists and for seven years afterwards where required for tax. Sign-in codes expire after 15 minutes. Server logs are kept for 30 days.
Security
Traffic is encrypted in transit. Sign-in is by one-time code rather than a password, so there's no password to breach. Device tokens are stored with owner-only permissions on your Mac. Our OpenAI key never leaves our server — the app receives short-lived tokens that expire in about a minute.
Children
Shortlisted isn't intended for anyone under 16.
Changes
If we change this policy materially we'll email account holders. The date at the top always reflects the current version.
Contact
Manar Labs — privacy@manarlabs.com