Privacy
Last updated September 3, 2026
What this is
Proof of Work (imtrying.org) is a job application tracker run by Kyle Foley in Charlotte, North Carolina. You log applications; your log is private until you share its link. This page says what is stored, what the optional Gmail scan does, and how to delete everything.
What is stored
Your account email and a password hash (held by Supabase Auth). The applications you log: role, company, description, location, pay, date and status. A display name and headline if you add them. A share token for your public link, and whether sharing is on. Nothing is collected in the background; there is no analytics or advertising tracking on the site.
The Gmail scan
If you connect Gmail, Proof of Work asks for one permission: read-only access to your mail (gmail.readonly). It cannot send, delete, label or change anything. You can disconnect at any time from the app, which revokes the permission with Google and deletes our copy of the token, or from your Google Account’s third-party access page.
What the scan does: for each application in your log it searches your mailbox for messages that mention the company since the day you applied, plus a narrow search for recent mail that looks like it is about a job application. For each match it stores the message ID, thread ID, sender name and address, subject, the short preview snippet Google provides, the date, and a label (interview, rejection, confirmation, reply). It never stores a message body. Matches are shown only to you, are never part of your shared log, and are deleted when you clear them or delete your account.
The token that grants access is stored encrypted (AES-256-GCM) under a key that lives only in the application’s server environment, in a database column that the app’s own client cannot read.
Proof of Work’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to show you replies to your own applications. It is not used for advertising, is not sold, is not shared with anyone, and is not used to train models.
Who can see what
Your log is visible only to you unless you turn sharing on, in which case anyone with your link can read your applications (not your email address, not your Gmail matches, not anything else). Share pages are marked noindex. You can turn sharing off or replace the link at any time.
Where it lives
Data is stored with Supabase (Postgres, hosted in the United States) and the site runs on Vercel. Access to each row is enforced in the database with row level security: a signed-in user can reach only their own rows.
Deleting everything
Settings → Delete account removes your account, your applications, your Gmail connection and every match, immediately and permanently. Or email k.t.foley1998@gmail.com and it will be done by hand.
Changes
If this page changes in a way that matters, the date at the top changes with it. Questions: k.t.foley1998@gmail.com.