Qap Criteria — a Qapable product.
Privacy Notice
Who operates Qap Criteria
Qap Criteria — a Qapable product. It is operated by HEXOSYS PTY LTD, an Australian Private Company. The primary Australian product domain is qapcriteria.com.au, and the parent-brand website is qapable.com.au. Verified company identifiers are available on the About page rather than repeated throughout the product.
Information handled by the app
You may provide an applicant name, optional document contact line, role and organisation details, position description, screenshots, resume content, selection criteria, STAR evidence, edited responses and a cover letter. The name and optional contact line are used in your exported documents. Other application material can also contain personal information, so provide only what is necessary. Avoid dates of birth, identity numbers, home addresses, referee details and sensitive information unless genuinely required.
Where it goes
Application content is processed locally on your device. Generated criteria and cover letters use the included deterministic local evidence composer and do not call a paid or external AI service. In the iPhone and iPad app, the interface and document readers are included inside the installed app, and screenshot text is recognised on the device by the text recogniser built into iOS, running inside the app; drafting does not require the Qap Criteria website. In the web version, those resources load from the same Qap Criteria website while the image and extracted text stay in the browser. If you explicitly save, a draft is stored on that device, and one temporary recovery copy is also maintained. Exports are created on your device. Hexosys has no application-content database, administrator view or technical feature for reading that content.
When you visit the web version or public legal/support pages, the web host may process ordinary technical request information—such as IP address, browser type, request time and security events—to deliver and protect the site. The installed iPhone and iPad drafting workspace does not request its interface from the web host. Qap Criteria does not add analytics cookies, advertising trackers or behavioural profiling in this release.
What this release does not do
These are commitments about the released behaviour, not aspirations. Qap Criteria has:
- no user accounts, sign-in or single sign-on — nothing to register, nothing to log in to, no identity held by us;
- no cloud storage or sync — your applications exist on the device that created them and nowhere else;
- no analytics, telemetry, crash reporting or advertising — no third-party software development kit of any kind is included in the iPhone and iPad app, which links only Apple’s own frameworks;
- no remote or paid AI service — drafts are composed by an included deterministic local composer;
- no payments or in-app purchases — this release is free and contains no payment path;
- no push notifications — the app never asks for notification permission and sends none; and
- no automatic submission — Qap Criteria never lodges an application, sends an email or uploads a document on your behalf. Sending anything is always an action you take yourself, in your own email app or with your own file.
Adding any of these would be a material change requiring an updated notice and a fresh in-app acknowledgement before the feature is used.
Retention and deletion
Unsaved content remains in the active session, subject to the temporary recovery copy. Saved applications remain until you delete them. The app stores five records in total: your saved applications, one temporary recovery copy, a usage count, your colour-theme preference, and your legal acceptance (the notice version and acceptance time only).
You can remove them yourself. Deleting a single saved application removes it and the recovery copy belonging to it; Delete all local data removes all five. Each removal is verified by reading the record back, and the app reports plainly if anything could not be removed rather than claiming success. Removing everything from outside the app also works: on iPhone and iPad, delete the app; in a browser, clear site data for the Qap Criteria site.
Downloaded files remain wherever you save them and must be deleted there separately. On supported devices, choosing Share application pack opens the device’s share sheet; Qap Criteria does not select the destination or retain another copy.
The app includes an optional local check for common contact details and labelled identifiers in source and drafted content. Findings contain category counts rather than the detected values. Tax file numbers, Medicare numbers and payment-card numbers are removed from saved drafts and recovery copies, and saving or generation is paused until they are removed from your content, because they have no place in a job application. Email addresses and phone numbers are reported to you and left where they are, because they are ordinary contact details, they block nothing, and removing them unasked would damage your own source material. A date of birth is left in place as well, and reported with the advice that an employer rarely needs it and it is better removed unless the advertisement asks for it. The applicant name and optional contact line are outside this check, because they are intentional document fields. This check is a minimisation aid, not a guarantee that all personal or sensitive information has been identified.
Optional product feedback
The feedback feature prepares a short note locally and does not save it in the app or submit a background web form. If you choose “Open my email app” and then send the message, your email provider will send the feedback category, message, product version and your sender address to support@qapcriteria.com.au. Do not include application content, employer details or unnecessary personal information. The support mailbox must be active, tested and monitored before a public market-validation release. Feedback may be retained while it is useful for product improvement, support or record-keeping and should then be deleted or de-identified.
Access, correction and complaints
You can inspect, edit and delete locally stored content directly in the app. For the free iOS market-validation release, product feedback, privacy complaints and security reports may use the single support mailbox with distinct subject prefixes and internal handling rules. That mailbox is not yet verified end to end. Do not include application material. A complaint should state what happened, when it happened and the requested outcome. Once the support mailbox is verified, Hexosys will review complaints during normal Australian business operations and respond as reasonably practicable. See the complaints process. If you are not satisfied, you may be able to contact the Office of the Australian Information Commissioner.
Input relevance and acceptable use
The app performs a limited on-device check for role-related material, obvious secrets, active-code markup, instruction overrides and requests to fabricate evidence. Findings remain on the device. The check may pause saving, generation or export, but it cannot understand every context or guarantee that content is lawful, appropriate or accurate. See Acceptable Use.
Changes and future AI services
A material change—such as accounts, cloud storage, analytics or a remote AI provider—requires an updated notice and a new in-app acknowledgement before that feature is used. This notice does not describe features that are not present.