Privacy Policy

Last updated: October 30, 2026

This policy explains how Petalform LLC ("we", "us") handles information in the Nextly mobile app ("Nextly" or "the app") for iOS and Android. Nextly helps software engineers plan their next career step: you choose a destination role, build a development plan, save job postings you're interested in, and record accomplishments as evidence of your progress.

Your Nextly account

To save your plan, you create a Nextly account by signing in with a 6-digit code sent to your email, or with Sign in with Apple on iOS. There are no passwords. We store:

• your email address (if you use Sign in with Apple and choose "Hide My Email", this is a private relay address from Apple);
• your name, only if Apple shares it the first time you sign in with Apple, to greet you in the app;
• sign-in records kept by our authentication service: when you signed in, the sign-in method, and technical session data such as IP address and device type, to keep your account secure.

Nextly accounts use a sign-in service operated by Petalform LLC that is shared by several Petalform apps. If you use the same email address to sign in to another Petalform app you choose to use, the sign-in is shared, but each app's data is stored separately and one app can't see another app's data. Nextly doesn't show you or anyone else which other Petalform apps you use.

Your career data

Everything you add to Nextly is stored in your account so it's backed up and available on your devices:

• your current role, level, company and focus area;
• your destinations, goals, milestones and development areas;
• accomplishments and other evidence, including the text you write and any dates or links you add;
• target job postings you save: the job's title, company, location, the structured list of requirements we extract, and the link you gave. We don't keep the full posting text;
• manager feedback and career-framework material you add, including PDF or text files you upload (up to 5 MB each);
• your inbox notes, the career reviews and drafts the app generates for you, your edits to them, and the history of changes to your plan.

This data is stored with Supabase, our database provider, in the United States (AWS us-east-1), with access restricted to your account. Job-posting PDFs you upload are deleted as soon as they've been read. Framework PDFs are kept so you can re-analyze them, until you delete them in the app. Some data is also stored on your device so you can view your plan offline and so notes written offline are kept until they upload.

AI analysis (Anthropic Claude, with Google Gemini as a backup)

Nextly uses Anthropic's Claude API to suggest goals and milestones from your goals, saved job postings, feedback and documents; to sort inbox notes; to suggest how an accomplishment links to your plan; and to write reviews and drafts such as self-review text. When you ask Nextly to analyze something, our server sends the text or file needed for that request to Anthropic, together with the relevant parts of your plan. If Claude is unavailable, the same request is sent to Google's Gemini API instead.

AI analysis is on by default. Analysis runs only when you use a feature that needs it, such as building your plan, sorting an inbox note or drafting a review. You can turn AI analysis off at any time in Profile → Privacy & your data; with it off, nothing is sent to Anthropic or Google, and you can still use Nextly and add everything yourself.

We use Anthropic's and Google's paid API services, under which neither uses this content to train its models. Each may keep requests for a limited time to detect abuse. AI suggestions are always labeled and never change your plan unless you accept them. For each analysis we keep a usage record (the type of analysis, the model, whether it succeeded, timing and size), not the content, to apply plan limits and control costs.

If you import a job posting from a link, our server requests that public page from the website, so the website sees a request from our server. Some sites, such as LinkedIn, aren't fetched; you paste the text instead.

Reporting AI content

If you report an AI suggestion or draft as inaccurate or harmful, we store your report, the reason you chose and a short excerpt of the reported content, so we can review it even if you later edit or delete the original. Reports are linked to your account and deleted with it.

Service providers

Service	What it receives	Why
Supabase	Your account and career data, as described above.	To store your data and run Nextly's server.
Anthropic (Claude API)	Text and files you choose to analyze, plus the plan context needed for that request.	AI analysis.
Google (Gemini API)	The same, only when Claude is unavailable.	Backup AI analysis.
RevenueCat	Your Nextly account ID and your subscription purchases and status. Payment details stay with Apple or Google.	To manage Nextly Pro and restore purchases.
PostHog	Your Nextly account ID and which features you use (for example "a goal was created"), never the text you write. You can turn this off in Profile → Privacy & your data.	Product analytics.
Sentry	Crash and error reports (device type, OS and app version, error trace), scrubbed of your content.	To find and fix bugs.
Apple and Google	Sign-in, in-app purchases and app distribution, under their own privacy policies.	Sign-in and purchases.

We do not sell your personal information or share it for advertising. We don't use advertising identifiers, we don't track you across other companies' apps or websites, and we don't collect your contacts or location.

Notifications

Reminders (weekly check-in, monthly review, review season, goal reminders) are scheduled on your device and appear only if you allow notifications. You can change or turn them off in the app or in your device settings.

How long we keep your information

• Your account and career data: until you delete your account. Job-posting PDFs are deleted after they're read.
• AI usage records and AI content reports: kept with your account and deleted with it.
• Analytics: up to 12 months (PostHog). Crash reports: up to 90 days (Sentry).
• Subscription and purchase records kept by RevenueCat, Apple and Google: as long as needed for billing, tax and fraud prevention. They contain your Nextly account ID and purchase history, never your career data.

When you delete your account, your data is removed from our database right away.

Your choices and deleting your account

• Export your data: Profile → Privacy & your data → Export my data.
• Turn off AI analysis or analytics: Profile → Privacy & your data.
• Delete your account: Profile → Account → Delete my Nextly account. This permanently deletes your Nextly account and everything in it right away: your plan, evidence, target jobs, uploaded files, reviews, drafts, usage records and reports. If you signed in with Apple, we also revoke Nextly's access to your Apple ID. If you don't use another Petalform app with the same sign-in, the sign-in itself is deleted too. You can also email us; see how to delete your Nextly account.

Deleting your account doesn't cancel a Nextly Pro subscription. Cancel it in your Apple ID or Google Play subscription settings.

Depending on where you live (for example the EU, UK or California), you may have rights to access, correct, delete or port your data, or to object to or restrict certain processing. Most of these are available in the app; for anything else, contact us. If you're in the EU or UK, we rely on these legal bases: performance of our contract with you to provide your account and plan; your consent for AI analysis, which you can withdraw at any time in the app; and our legitimate interests for security, crash reporting and product analytics, which you can turn off in the app. You can also complain to your local data protection authority.

Security

Data is encrypted in transit (HTTPS) and stored by Supabase with access restricted to your account. Your sign-in session is kept in your device's secure storage (Keychain or Keystore). No method of storage or transmission is completely secure, but we work to protect your information.

Children

Nextly is meant for working professionals. It's not directed to anyone under 16, and we don't knowingly collect their personal information. If you believe a child has given us information, contact us and we'll delete it.

Changes

We may update this policy. We'll change the "Last updated" date and, for significant changes, let you know in the app.

Contact

Petalform LLC · support@petalformllc.com