Privacy Policy

Scrubmyo is the service available at scrubmyo.io. In this policy, "Scrubmyo", "we", "us" and "our" mean the operator of scrubmyo.io.

For privacy questions, data requests, or account deletion requests, contact hello@scrubmyo.com.

Scrubmyo helps people applying for NHS roles structure a supporting statement around their own experience, job description, person specification and career evidence. Scrubmyo is not part of the NHS and does not ask for, store, or need your NHS login details.

• Waitlist and marketing data: email address, subscription status, signup source, consent records, and email engagement information handled through Kit.
• Account data: email address, authentication identifiers, password hash handled by our authentication provider, login/session information, and security logs.
• Profile and career data: full name, summary, work experience, education, training, courses, skills, ATS keywords, employment gap history, role pattern, and competency examples or incidents that you choose to enter.
• Uploaded documents: CVs, NHS job descriptions, person specifications, supporting documents, extracted text and file metadata.
• Generated content: supporting statement drafts, word counts, character counts, match scores, profile scores and edits.
• Technical data: IP address, browser and device information, error logs, cookies, local storage, and similar information needed for security and operation.
• Support and billing data: messages you send us, support history, and payment or invoice records if paid plans are introduced.

Scrubmyo is designed for career and application evidence. Do not upload patient identifiable information, confidential NHS records, or information you do not have permission to use.

Some career examples may reveal sensitive information about you, such as health, ethnicity, religion, trade union membership or other special category data. If you choose to provide that information, we process it only to provide the service you requested and not for advertising, resale, or model training. You can edit, remove, or ask us to delete this information.

• To provide your account and workspace: contract, because we need this to provide the service you request.
• To parse documents and generate drafts: contract. If you voluntarily provide special category data, we rely on your explicit consent for that sensitive element and you may withdraw it by deleting the content or contacting us.
• To operate the waitlist and send product updates: consent, or the limited soft opt-in rules where UK law allows them. Every marketing email should include an unsubscribe option.
• To keep the service secure, debug errors and prevent misuse: legitimate interests in running a secure and reliable service.
• To answer support requests: contract or legitimate interests, depending on the request.
• To keep tax, accounting and legal records: legal obligation, if those records are created.

Scrubmyo uses AI-assisted processing to extract structure from CVs, job descriptions and supporting documents, and to help create supporting statement drafts. The output is a draft for you to review, edit and decide whether to use.

We do not use your career information to train public AI models. We do not make solely automated decisions that decide whether you get a job, interview, visa, NHS role or any similar outcome.

We do not sell your personal data. We share it only where needed to run Scrubmyo.

• Hosting, database, authentication and private document storage providers.
• Email and waitlist providers, including Kit, for signup and product emails.
• AI processing providers, including Anthropic, where needed to process your documents.
• Cloud and security providers used to deliver and protect the website.
• Payment processors, accountants, legal advisers or regulators if paid services are used.
• Law enforcement or public authorities if we are legally required to disclose data.

Some providers may process data outside the UK. Where that happens, we use appropriate transfer safeguards such as UK-approved contractual terms, international data transfer agreements, or other lawful mechanisms.

We use essential cookies, local storage and similar technologies for sign-in, session security, preferences and core app functions. These are needed to provide the service.

If we add analytics, advertising, affiliate tracking, or other non-essential cookies, we will ask for consent where required and provide a way to manage that choice.

• Waitlist and marketing data: until you unsubscribe or ask us to delete it.
• Account, profile, document and generated statement data: while your account is active.
• Deleted account data: removed from live systems where practical, with backup copies expiring in ordinary backup cycles.
• Support messages: normally up to 24 months after the last contact.
• Security logs: normally up to 12 months unless needed to investigate misuse.
• Payment, tax and accounting records: normally up to 6 years where legally required.

Under UK data protection law, you may have the right to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, withdraw consent, and complain to the Information Commissioner's Office.

Contact us at hello@scrubmyo.com to exercise these rights. You can also visit ico.org.uk if you are unhappy with how your personal data is handled.

We use access controls, private document storage, row-level security, encrypted connections, authentication controls and limited administrative access. No online service can promise perfect security, so please use a strong password and do not upload information that is unnecessary for your application.

Scrubmyo is intended for people aged 18 or over who are preparing job applications. It is not intended for children.

We may update this policy as the service develops or legal requirements change. The latest version will be posted on this page with the updated date. This version was last updated on 17 June 2026.