DonutApply: privacy policy
Last updated 2026-10-12 (AI on US-based providers with zero data retention).
This policy covers the DonutApply Chrome extension and the DonutApply app it works with.
The DonutApply Chrome extension fills job application forms for members of DonutApply (app.donutapply.com), a job search app. It works only for someone signed in to that app.
What it reads
- Your DonutApply account: your profile, saved answers, resumes, cover letter and job tracker, fetched from app.donutapply.com with your own signed-in session.
- The application form you ask it to fill: the labels, options and current values of the form's fields, and, only when the app's AI can read images, a cropped screenshot of a field it could not identify from its label. It reads a page only on the applicant tracking sites it lists (Greenhouse, Lever, Ashby, Workday) or when you press "Fill this page".
- A profile page you have open, when the side panel is open on it: the person's name, headline, current company, connection degree and profile address, so the app can draft a message to them; and the text of the message box you opened, once you press Send, so the message can be logged in your outreach tracker. It never reads search results and never presses connect or send: you do.
- Your connections, unless you turn it off on the options page: their names, headlines, profile addresses and current companies, so your outreach tracker shows who you know at the companies you are applying to. It reads these in your own signed-in session and only reads: it never posts or messages anyone.
Where it goes
Only to app.donutapply.com, the DonutApply app you are signed in to, which uses AI to match form questions to your profile and to draft messages. That AI runs on US-based providers only, with zero data retention: they keep nothing they are sent. When you submit an application, the answers you settled on are saved to your profile and the job is marked applied in your tracker. Nothing is sent to any other party, sold, used for advertising, or used to train models.
What it keeps in the browser
The state of the current fill (which fields were filled and with what) is kept in the browser's session storage and cleared when the browser closes. The options page's app address is kept in Chrome sync storage.
Google account data
Sign in with Google. When you sign in to app.donutapply.com with Google, the app receives your name, email address and profile picture, and uses them only to create and sign in to your account.
Google Calendar, only if you connect it. In the app's Settings you can
connect your Google Calendar, which asks Google for permission to view and edit events on
your calendars (the calendar.events scope). With it the app does two things,
both only for your own account:
- It reads the events on your primary calendar (title, time, location, description and attendees) to tell whether an event is an interview with a company in your job tracker. That is decided by plain word matching in the app; no AI model reads your calendar. An event that matches is logged on that job's timeline (its title, time, location, meeting link and a link back to the event). Events that do not match are not stored.
- When you log an interview in the app, it adds that interview to your primary calendar, and moves or removes the event when you change or delete the interview.
The app keeps the access token Google issues encrypted, and, for each event it logged or created, the event's id and start time so it can keep the two in step. It never sends your calendar data to anyone else, sells it, uses it for advertising, or uses it to train AI models. Disconnecting in Settings revokes the app's access at Google and deletes the token and those records; you can also remove access at any time from your Google Account's security settings. Deleting your DonutApply account deletes all of it.
DonutApply's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Your control
You can edit or delete anything in your DonutApply profile, resumes and tracker from the app, and uninstall the extension at any time. Questions go to the support contact on the extension's Chrome Web Store listing.