Privacy

Who we are

Intake (intake.ink) helps students aged 16 and over find and apply for degree apprenticeships. Intake is the controller of your personal data. Contact us at privacy@intake.ink.

What we collect

Your email address and name from your Google account, and your age band (we keep your birth month and year, not your full date of birth).

What you choose to add: your CV and other documents, grades, experience, projects, STAR stories, links, the areas and cities you're interested in, the programmes you track, and your answer drafts and CVs.

Practice: mock interview transcripts and reports, online test answers and scores, and your conversations with Ivy, our AI assistant. We do not keep audio recordings of any voice session.

Optional eligibility answers (right to work, nationality) are stored separately and only used to hide programmes you can't apply to. They are never sent to an AI model.

Payments are handled by Stripe. We see what you bought and when, never your card details.

Basic technical data (device, browser, IP address) to keep the service secure and working.

Why we use it (and our legal basis)

To provide Intake: matching you to programmes, writing CVs and drafts from facts you've confirmed, running practice interviews and tests, sending alerts you asked for, and taking payment. Legal basis: our contract with you.

To keep Intake safe, stop abuse and fix problems, and to understand in aggregate which features help. Legal basis: our legitimate interests, balanced against your rights, with the strictest settings for under-18s.

Phone and browser alerts, and anything else you switch on yourself. Legal basis: your consent, which you can withdraw at any time in Settings.

We don't sell your data, show you ads, or share your details with employers. You apply to firms yourself.

AI

AI features send only what's needed for that task to our AI providers (OpenAI for writing and chat, Google Gemini for voice). They process it on our behalf and may not use it to train their models.

AI never saves anything to your profile on its own: suggestions wait for you to keep, edit or remove them. AI output can be wrong, so check drafts before you use them.

Under-18s

Students aged 16 and 17 get our strictest privacy settings by default: no session recordings, no marketing and no profiling beyond what the service needs. We follow the ICO's Age Appropriate Design Code.

Intake is not for anyone under 16. If we learn an account belongs to someone under 16, we delete it.

Who we share it with

Only the providers that run Intake for us, under contracts that protect your data: Supabase (database and sign-in, London), Vercel (hosting), OpenAI and Google (AI), LiveKit (voice calls), Stripe (payments), Upstash and Inngest (rate limiting and background jobs), Sentry (error reports) and PostHog (product analytics).

Some of these providers are in the United States. Where data leaves the UK we rely on the UK's adequacy regulations or the International Data Transfer Addendum.

We'll share data with the police or authorities only if the law requires it, or to protect someone at risk of serious harm.

How long we keep it

While your account is open. Delete anything at any time; delete your account and everything is removed within 30 days (backups roll off shortly after).

Evidence for free-place claims is deleted within 24 hours of a decision. Stripe keeps payment records for six years because tax law requires it.

Cookies

We use essential cookies to keep you signed in and secure. We don't use advertising cookies. Product analytics never record sessions of under-18s.

Your rights

You can see, download (Profile > Export), correct or delete your data, object to how we use it, or ask us to limit it. Email privacy@intake.ink and we'll reply within a month.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.