Privacy policy.

The short version

Silo Systems collects no data from Silo Apply. None.

No analytics. No telemetry. No account. No personal data. No usage metrics. No error beacons. No advertising IDs. No fingerprinting. No crash reports. No data about you, your device, your résumé, or the jobs you apply to is collected by us, stored in our infrastructure, or shared by us with anyone.

By default, everything Silo Apply does runs on your device: reading an imported résumé or job description, screening a posting, assessing fit, tailoring your résumé, drafting cover letters and interview preparation, validating source spans, tracking applications, modeling offers, and exporting files. Devices with Apple Intelligence use Apple's on-device Foundation Models; other devices use Silo Apply's deterministic extractive engine. Silo Systems operates no server, and there is no Silo Apply account. The exceptions are the optional Bring Your Own Key setting described below, which is off until you enable it and sends data only to a provider you choose and pay for directly, and, in version 1.12.0 and earlier, spoken practice on iPhone and iPad, whose audio Apple's speech recognition may send to Apple.

What we don't have, and therefore never see

Because Silo Apply has no server-side component, the following do not exist anywhere in our infrastructure (and our infrastructure consists of: nothing):

• Your name, email, phone, or address.
• Your IP address, device identifier, advertising identifier, or any other hardware fingerprint.
• Your résumé, your master profile, your experience entries, the job descriptions you capture, your application records, offers, and practice answers, or any résumé, cover letter, brief, or file Silo Apply generates or you export.
• The contents of your Photos, Files, or any document you import or scan.
• Session timing, feature usage, taps, or any other behavioural data.
• Crash reports. Silo Apply does not implement a crash-reporting SDK.

We never see any of this because none of it is ever sent to us. Silo Apply cannot contact Silo Systems: it has no endpoint of ours to reach.

What Silo Apply sends over the network

With Bring Your Own Key off, which is its default state, Silo Apply sends your résumé and job text nowhere. The only requests that carry them are the Bring Your Own Key requests described below, to the endpoint you chose. In version 1.12.0 and earlier, on iPhone and iPad, Apple's speech recognition may send the audio of a practice answer you record to Apple, as described under Third-party services, and dropping a web link onto the job description area downloads that page so its text can be read on your device; that request sends nothing from your profile. Job descriptions you provide by pasting, opening or dropping in a file, scanning with the camera on iPhone and iPad, or sharing text from another app on iPhone and iPad are read on the device; a job-posting link you paste is stored only as a label and is never fetched by the app.

Silo Apply reads PDF, scanned PDF, image, RTF, and plain-text résumé files on the device. It does not import DOCX. Proposed facts must resolve to exact spans in the extracted source and require your approval before they become evidence.

On-device generation

Résumé tailoring, cover letters, and interview preparation use Apple's on-device Foundation Models where available, with a deterministic extractive engine as the always-local fallback. Whichever engine writes the draft, the same citation, numeric, and language checks run on it. Unless you have enabled the optional Bring Your Own Key setting below, your profile and job description are never sent anywhere to produce output.

Optional Bring Your Own Key (off by default)

This is the one path by which Silo Apply sends your résumé and job text over the internet, and it stays closed until you open it. If you choose a hosted provider in Settings, accept the consent notice, and save your own API key for OpenAI, Anthropic, Gemini, or OpenRouter, the content you process with that feature (your résumé and job-application text) is sent over the internet to the provider you selected, under your own account. That provider also receives ordinary web-request metadata, including your IP address. What you send is then subject to that provider's privacy policy and data-retention practices, not ours. These hosted options work the same way on Mac, iPhone, and iPad.

While a hosted provider is active, Silo Apply shows a persistent Cloud badge on the tailoring and cover-letter screens, and you can return to on-device processing at any time. Nothing is ever sent to Silo Systems. We never see your content or your key, and we run no server, proxy, or relay in this path: traffic goes directly from your device to the provider you configured. Your key is stored only in the Keychain on that device, never in a file, a database, or a log.

On a Mac, you can instead choose an Ollama server running on that same Mac, reached at 127.0.0.1. It needs no key, and that traffic stays on the Mac, unless you choose a model that Ollama runs in its own cloud, in which case Ollama sends your content there. iPhone and iPad do not offer this option.

Permissions we request, and why

Silo Apply asks only for what a feature needs, and nothing it asks for sends anything to Silo Systems. The Mac app requests no camera or microphone access.

• Camera (iPhone and iPad). Optional. Used only to scan a printed job description so it can be read on the device with Apple's Vision text recognition. Images are processed locally and are not transmitted.
• Microphone (iPhone and iPad). Optional. Requested only when you record a spoken practice answer. The audio is transcribed on the device and is not kept.
• Speech Recognition (iPhone and iPad). Optional. Used to transcribe spoken practice answers with on-device recognition only. If your device cannot recognize your language on the device, recording does not start and the app asks you to type your answer instead. In version 1.12.0 and earlier, recognition was not required to run on the device, so Apple's speech recognition may send that audio to Apple for transcription, as described under Third-party services. It is never sent to Silo Systems.

On-device data you create

Silo Apply stores the information needed to work for you locally; this is on-device storage, not collection by us. Your master profile, captured job descriptions, tailored résumés, cover letters, application records, practice history, offers, and preferences live in Silo Apply's app container (bundle identifier com.silosystems.siloapply), plus any folder or file you explicitly choose to export to. They are yours. We do not have access to them.

Silo Apply also keeps one number in this device's Keychain: how many free tailoring runs have been used. It holds nothing about you, never syncs, and makes no network request. Because it lives in the Keychain, it can remain after you delete the app, so a reinstall does not restore a spent free run. A Bring Your Own Key API key you saved can also stay in the Keychain after the app is removed; use Remove key in Settings first to clear it.

On iPhone and iPad, deleting Silo Apply (rather than offloading it) removes its app data. On a Mac, removing the app may leave its sandbox container in place, so use the in-app delete controls first, then macOS storage controls. Files you exported to a location you chose stay there until you delete them.

Moving your profile between devices

To use your profile on more than one of your devices, Silo Apply can export an encrypted copy that you move yourself, for example over AirDrop or through Files. The export is encrypted with a passphrase you choose; without it, the file cannot be read. Silo Apply does not sync through any server and does not use iCloud for your profile.

Purchases

Silo Apply is a free download. Its $24.99 Full Unlock is a one-time universal purchase for iPhone, iPad, and Mac. Payment is handled entirely by Apple under Apple's privacy policy. Silo Apply never sees your payment details or receives personal information from the transaction. Entitlement is checked on the device via StoreKit.

Outbound traffic

Silo Apply sends nothing to Silo Systems. The on-device engines have no model-download path: Apple provides Foundation Models as part of the operating system, and the deterministic extractive engine is built into the app. App Store updates and external links you choose to open are handled by Apple and your browser; Silo Apply does not fetch content from them. The only traffic Silo Apply itself originates is a Bring Your Own Key request you have enabled, sent to the hosted provider you configured or, on a Mac, to a local server on that Mac, and, in version 1.12.0 and earlier, the download of a web page you drop onto the job description area, which sends nothing from your profile. Separately, in version 1.12.0 and earlier on iPhone and iPad, Apple's speech recognition may send the audio of a practice answer you record to Apple, as described under Third-party services.

Children's privacy

Silo Apply is rated 4+. Because Silo Systems collects no personal data from any user, no special treatment is required for users under 13. The same policy applies regardless of age: Silo Systems receives nothing.

Third-party services

Silo Apply uses these Apple on-device frameworks. None of them send any data about you to Silo Systems. Only Speech can send your content off the device: in version 1.12.0 and earlier, on iPhone and iPad, the audio of a practice answer you record may be sent to Apple for transcription:

• Apple Foundation Models: on-device text generation.
• Vision: on-device text recognition for scanned job descriptions and for image and scanned-PDF résumés.
• Speech: transcription of spoken practice answers on iPhone and iPad, with on-device recognition required. Version 1.12.0 does not require on-device recognition, so Apple's speech service may send the audio of your answer to Apple for transcription, under Apple's privacy policy.
• StoreKit: on-device purchase entitlement check.

Changes

If we ever materially change how Silo Apply handles data, for example if a future version ever begins to collect anything at all, we will publish an updated version of this page, announce the change prominently in the release notes, and require explicit consent in-app before any new collection begins. The effective date at the top of this document reflects the current policy.

The current policy is: Silo Systems receives nothing, and Silo Apply collects no analytics.

Contact

Questions about this policy: admin@ohmslaw.net