Privacy Policy
Last updated: June 9, 2026
This policy explains what Internly (operated by NeedThat Studio, LLC — "we", "us") collects, why, and what control you have. The short version: we collect what's needed to find internships for you and to apply on your behalf when you ask us to — and we never sell your data.
1. What We Collect
- Account data — email and sign-in identifiers (Apple, Google, or email/password).
- Profile data you provide — name, contact details, location, education (school, major, GPA, graduation), skills, work authorization, links (LinkedIn, portfolio), pay preferences, and your resume if you upload one.
- Optional demographic data — gender, ethnicity, veteran and disability status. These are entirely voluntary and used only to answer the equal-opportunity (EEO) questions that many applications include.
- Activity data — internships you view, swipe on, and apply to, plus application statuses.
- Usage analytics — app events (e.g. onboarding steps completed) collected via PostHog to improve the product.
2. How We Use It
- To match you with relevant internships (field, location, work setting, pay preferences);
- To complete and submit applications you initiate — your profile data, resume, and answers are shared with the employer or their application system only when you swipe right or tap Apply;
- To draft answers to application questions using automated language-model assistance, based solely on the profile facts you provided;
- To show you the status of your applications;
- To operate, debug, and improve the Service.
3. Who We Share It With
- Employers / application systems — when you apply, your application data goes to that employer's application system (e.g. Greenhouse, Lever, Ashby), exactly as if you applied yourself. Their privacy policies govern their use of it.
- Service providers — Supabase (database, authentication, file storage), PostHog (analytics), and AI providers used to draft application answers (e.g. Moonshot AI, Anthropic). Providers process data on our behalf under their own data-protection terms.
- Sign-in providers — Apple and Google, if you choose those sign-in methods.
- No data sales. We do not sell your personal information, and we do not share it with advertisers.
4. Storage and Security
Data is stored with Supabase behind row-level security, so your records are only readable by your authenticated account. Resumes live in a private storage bucket. Data is encrypted in transit.
5. Retention and Deletion
- Your data is kept while your account is active.
- You can delete your account in the app (Profile tab) or by emailing us — this permanently deletes your profile, applications, resume, and sign-in record from our systems.
- Applications already submitted to employers cannot be recalled by us; contact the employer directly.
6. Your Rights
Depending on where you live (e.g. GDPR in the EU/UK, CCPA in California), you may have rights to access, correct, export, or delete your personal information, and to object to certain processing. Email us and we'll honor verified requests within the legally required time.
7. Children
The Service is not directed at children under 16, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.
8. International Transfers
Our infrastructure is hosted in the United States. If you use the Service from elsewhere, your data is processed in the US under the safeguards described above.
9. Changes
We'll post any changes here and update the date above; material changes will be announced in the app.
10. Contact
Privacy questions or requests: support@tryinternly.com
NeedThat Studio, LLC
Delaware, USA