Privacy

What GovtApply does

You fill in your details once on the GovtApply web app. The browser extension reads that profile and offers to type it into government exam application forms for you.

You review every value before it is written, and you press submit yourself. The extension has no submit button anywhere and cannot submit a form on your behalf.

What the extension reads from the page

Only on a portal it has a mapping for, or on a page where you pressed “Fill forms on this page” yourself:

• The structure of the form fields — their ids, names, labels, types, and the options in dropdowns.
• Whether a field already has a value, so that it never overwrites something you typed.

It does not read page content generally, does not read your other tabs, and does not record what you type into fields it did not fill.

What is in your account

Only after you connect it:

• Your saved profile: name, parents' names, date of birth, gender, category, address, contact details, and education records including subject-wise marks.
• The last four digits of your Aadhaar, and — only at the moment a form asks for it — the full number.
• Your saved photo, signature, thumb impression and declaration images.

Where your data goes

To the form you are filling, on your screen. That is the entire point.

To the GovtApply server, to fetch your profile and to fetch or generate the field mapping for a form. GovtApply's database and file storage are hosted on Supabase, and your full Aadhaar number is stored encrypted at rest there.

To Google, in two specific situations, using the Gemini API:

• When you upload a document, the image is sent to Gemini so its printed text can be read into your profile. For an Aadhaar card, that image contains the full number.
• When you open a form GovtApply has never seen, the form's structure — labels, ids, dropdown options — is sent to Gemini so a field mapping can be proposed. No values from your profile are included.

Beyond those, your data goes nowhere. There is no analytics SDK, no advertising network, no third-party telemetry, and GovtApply is not funded by selling or sharing your data.

What is deliberately not sent

• Field values never leave your browser during mapping. Mapping requests carry structure only, and the server rejects any payload that contains values.
• Fill telemetry is counts only — how many fields were filled or left manual, and the labels of any that failed. Never the values themselves.
• Your full Aadhaar number is never written to a log, on your device or on the server.

What is stored on your device

The extension keeps your sign-in session in the browser's extension storage so you do not have to reconnect on every form.

It also briefly keeps the state of a fill in progress — the form's address, a structural fingerprint of it, and which fields have been handled. Many government portals reload the page halfway through a form, and without this your progress would be lost. It is deleted as soon as the fill finishes, ignored if older than two minutes, and Aadhaar values are stripped from it even while it exists.

Your profile itself is held in memory for the duration of a fill and is not written to storage.

Why the extension asks for each permission

• Storage — keeps you signed in between pages, and holds the fill-in-progress state described above.
• Active tab and scripting — let you press “Fill forms on this page” on a site that is not already on the list. Nothing is injected until you press it.
• Tabs — reads the current tab's address so the popup can tell you whether this portal is supported. No browsing history is collected.
• Access to *.gov.in, *.nic.in and named exam portals — this is where the application forms are. Exam portals are spread across hundreds of subdomains that change every recruitment cycle, so a fixed list would stop working mid-cycle.
• Access to the GovtApply app and its Supabase project — to fetch your profile and the field mappings.

Deleting your data

Uninstalling the extension removes everything it stored on your device.

Your profile lives in your GovtApply account. Delete it there and it is gone from the extension too, because the extension keeps no copy of its own.