Privacy notice
Morrow helps you find work and keep track of applications. This notice explains what personal data Morrow handles, why, who else touches it, and how you can delete it. It applies to joinmorrow.app. We handle personal data in line with the Swiss Federal Act on Data Protection (nDSG) and, where it applies, the EU GDPR.
Who is responsible
Innovemode operates Morrow at joinmorrow.app and is responsible for your personal data. For any privacy question or request, write to [email protected].
What we collect
| Data | When | Why |
|---|---|---|
| Name, email address, profile picture and your Google account ID, as provided by Google | When you sign in with Google | To create and recognise your account |
| Whether you chose "Looking for work" or "Hiring", your language, and your plan (for example free) | When you sign in | To set up your account and apply its limits |
| Your tracker and application states, jobs you added, CV text and versions, location and preferences | Only while signed in (stored on our servers). Without an account they stay in your browser. | To sync them across your devices |
| Your Morrow email address and the messages sent to it (sender, subject, text, links and any verification code) | Only if you create an address in Settings | To keep your real email private, show replies in your Inbox and forward a copy to you |
| Records of AI assistants you connect (which assistant, when) and the sign-in tokens issued to them | Only if you connect Claude, ChatGPT or another assistant | To let that assistant act on your account until you disconnect it |
| A sign-in cookie | When you sign in | To keep you signed in for up to 30 days |
| Technical request data such as IP address and browser type | Every visit, handled by our hosting provider | To deliver the site and keep it secure |
From Google we ask only for your name, email and profile picture. We never see your Google password, and we don't read your Google contacts, mail or files. Morrow never posts anything for you.
What we don't do
- We don't sell or rent your data, and we don't show advertising.
- We don't use analytics, advertising or tracking cookies.
- We don't apply to jobs for you without your approval, and we don't share your CV with employers.
Cookies and browser storage
Morrow sets one cookie, morrow_session. It is needed to keep you signed in, is not readable by scripts on the page, and expires after 30 days or when you sign out. Morrow also stores your data and settings in your browser's local storage so the app works without an account. You can clear it any time in Settings or in your browser.
Who else handles your data
- Google provides "Sign in with Google" and receives your IP address and browser details when the sign-in button loads. See Google's privacy policy. Fonts on our pages are also loaded from Google Fonts, which receives your IP address.
- Cloudflare hosts the site and the database that holds your account and synced data, and processes request data to deliver and protect it. The database is hosted in Cloudflare's European region. See Cloudflare's privacy policy.
- AI assistants you connect. If you connect Claude, ChatGPT or another assistant, it can read your profile, tracker and saved jobs and change tracker statuses on your behalf, within your plan. It never receives your email address or Google password. What the assistant's provider does with that information is governed by their own privacy policy. You can disconnect an assistant at any time in Settings → AI assistants.
- Email delivery. Cloudflare receives mail sent to your Morrow address, and sends the forwarded copy to your real address.
- Job sites. When you open a job link, you leave Morrow and that site's own policy applies.
Some of these providers may process data outside Switzerland and the EU/EEA. Where they do, they rely on recognised safeguards such as the Swiss and EU standard contractual clauses or adequacy decisions.
Why we may use your data
To provide the service you asked for (your account and sync), to keep it secure and working, and to meet legal duties. Signing in with Google is your choice; you can stop at any time.
How long we keep it
Messages sent to your Morrow address are kept for 90 days, then deleted. Everything else is kept for as long as your account exists. When you delete your account in Settings → Account, we delete your name, email, picture, synced data, Morrow address, stored messages and assistant connections from our database straight away. Copies may remain in the hosting provider's backups for up to 30 days before they expire. Data stored in your own browser is not affected by deleting your account; clear it with "Clear everything" in Settings.
Your rights
- Access and copy: Settings → "Export my data" gives you a copy of what Morrow holds for you in your browser and account. For anything else, write to us.
- Correct: change your tracker, CV and settings in the app. To change your name or email, change them in your Google account and sign in again.
- Delete: Settings → Account → Delete my account.
- Object or restrict certain uses, or ask questions: [email protected]. We aim to reply within 30 days.
If you think we handle your data wrongly, you can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or to the data protection authority where you live.
Security
Morrow is served over HTTPS. Google sign-in tokens are checked on our server before an account session is created. Sign-in cookies are signed and protected from page scripts. No system is perfectly secure, so please don't store anything in Morrow you wouldn't want to risk losing.
Age
Morrow is for people aged 16 and over.
Changes
If we change this notice in a way that matters, we'll update the date above.