Privacy Policy

Last updated: October 6, 2026

This policy explains what Internly (operated by NeedThat Studio, LLC — "we", "us") collects, why, and what control you have. The short version: we collect what's needed to find internships for you and to apply on your behalf when you ask us to — and we never sell your data.

1. What We Collect

• Account data — email and sign-in identifiers (Apple, Google, or email/password).
• Profile data you provide — name, contact details, location, education (school, major, GPA, graduation), skills, work authorization, links (LinkedIn, portfolio), pay preferences, and your resume if you upload one.
• Optional demographic data — gender, ethnicity, veteran and disability status. These are entirely voluntary and used only to answer the equal-opportunity (EEO) questions that many applications include.
• Activity data — internships you view, swipe on, and apply to, plus application statuses.
• Your application address and the mail it receives — by default we apply with an address we create for you at internlymail.com (for example firstname.lastname@internlymail.com). Mail employers send to that address — confirmations, interview invitations, rejections, questions — is received by us, stored, shown to you in the app, and forwarded to your own email. You can switch this off in Settings and apply with your own email instead.
• Answers you give us — when an application asks something your profile doesn't cover (for example pay expectations or start date), we ask you, and we keep your answer so we don't have to ask again for the next application.
• Payment data — purchases in the iOS app are processed by Apple; purchases on the website are processed by Stripe. We receive your subscription status, not your card number.
• Usage analytics — product events (e.g. onboarding steps completed, screens viewed) collected via PostHog in the iOS app and DataFast on the website.
• Advertising and attribution data (iOS app) — to learn which of our ads lead to installs and subscriptions, the app sends install, sign-up and purchase events with device identifiers to Meta (Facebook SDK), AppsFlyer and Appstack. The advertising identifier is only used if you allow tracking when iOS asks.

2. How We Use It

• To match you with relevant internships (field, location, work setting, pay preferences);
• To complete and submit applications you initiate — your profile data, resume, and answers are shared with the employer or their application system only when you swipe right or tap Apply;
• To draft answers to application questions using automated language-model assistance, based solely on the profile facts you provided;
• To receive employer mail at your Internly application address, show it to you, and forward it to your own inbox;
• To show you the status of your applications;
• To translate internship listings into your language (listing text only — not your personal data);
• To measure the performance of our advertising;
• To operate, debug, and improve the Service.

3. Who We Share It With

• Employers / application systems — when you apply, your application data goes to that employer's application system (e.g. Greenhouse, Lever, Ashby), exactly as if you applied yourself. Their privacy policies govern their use of it.
• Service providers — Supabase (database, authentication, file storage), Vercel (website hosting), Cloudflare and Resend (receiving and forwarding mail for your application address), Stripe and Apple (payments), RevenueCat (subscription status), PostHog and DataFast (analytics), logo.dev (company logos; your browser or device requests the logo for a company you are viewing), and AI providers used to complete application forms and draft answers (Moonshot AI; and, if enabled, DeepSeek or Anthropic). When an AI provider drafts an answer it receives the profile facts needed for that answer and the employer's question. Providers process data on our behalf under their own data-protection terms.
• Advertising and attribution partners (iOS app) — Meta, AppsFlyer and Appstack receive the install and purchase events described above. They do not receive your resume, your applications, or your profile answers.
• Sign-in providers — Apple and Google, if you choose those sign-in methods.
• No data sales. We do not sell your personal information. Apart from the advertising-measurement events described above, we do not share it with advertisers.

4. Storage and Security

Data is stored with Supabase behind row-level security, so your records are only readable by your authenticated account. Resumes live in a private storage bucket. Data is encrypted in transit.

5. Retention and Deletion

• Your data is kept while your account is active.
• You can delete your account yourself, immediately: in the iOS app from the Profile tab, or on the website under Profile → Settings → Delete account. You can also email us. Deletion permanently removes your profile, applications, saved answers, resume and uploaded documents, your Internly application address and the mail stored for it, and your sign-in record. Deleting on the website also cancels a subscription bought on the website; a subscription bought in the iOS app is managed by Apple and must be cancelled there.
• Your Internly application address is retired when you delete your account and is never given to anyone else. Mail sent to it afterwards is not delivered.
• Applications already submitted to employers cannot be recalled by us; contact the employer directly.

6. Your Rights

Depending on where you live (e.g. GDPR in the EU/UK, CCPA in California), you may have rights to access, correct, export, or delete your personal information, and to object to certain processing. Email us and we'll honor verified requests within the legally required time.

7. Children

The Service is not directed at children under 16, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

8. International Transfers

Our primary infrastructure is hosted in the United States. Some service providers may process data in other countries, including AI providers based in Asia (Moonshot AI, DeepSeek). If you use the Service from elsewhere, your data is processed in these locations under the safeguards described above.

9. Changes

We'll post any changes here and update the date above; material changes will be announced in the app.

10. Contact

Privacy questions or requests: support@tryinternly.com

NeedThat Studio, LLC
Delaware, USA