Privacy Policy
Controller: CESNO INNOVATION SL · Tax ID (NIF): B22909832 · Registered address: C. Limoneros, 14, 18210 Peligros (Granada) · Contact: hopp@cesno.eu · Last updated: 23 October 2026
In short
- Hopp connects students looking for internships in Barcelona with companies. To do that we store your account, your profile and what you do in the app.
- When a student applies, the profile and the CV go only to the company they applied to. Email and phone are never shown on the public profile.
- Everything is used only to make the app work. There is no advertising and no tracking, and we don't sell or share your data with advertisers or data brokers.
- You can delete your account and your data from the app at any time: Settings › Account › Delete account.
1. Who is responsible
The data controller is CESNO INNOVATION SL (Spain), NIF B22909832, the company that develops and runs Hopp. For anything about your data, write to hopp@cesno.eu.
2. What data we collect
All of it is linked to your account, used only for the app to work and never for tracking.
| Data | What it is in Hopp | Why |
|---|---|---|
| Name | The student's name; the recruiter's name at a company | Your profile and conversations |
| Email address | The address you sign in with, or the one Sign in with Apple gives us (it can be a private relay address) | Your account and the one-time sign-in codes |
| Phone number | Optional contact detail in the profile | So a company you applied to can reach you; never shown on the public profile |
| Coarse location | The Barcelona neighbourhood you choose in your profile, and the neighbourhood of each internship. Hopp does not use your device's GPS or location services | Showing internships near you and approximate distances |
| Photos | Profile photo; company logo and office photos | Profiles and listings |
| Chat messages | Messages between a company and a shortlisted student | Letting both sides talk |
| Other content you add | CV (PDF), bio, studies, skills, languages, experience, availability, links and pay preference; companies' details and internships; applications and their status; saved internships; reports and blocks; app settings | Running applications, reviews and safety |
| User ID | The internal identifier of your account (and, if you use it, your Sign in with Apple identifier) | Keeping your data tied to your account |
We don't collect health, financial, browsing or contact-list data, and there are no analytics or crash SDKs in the app. A CV may contain whatever its author decides to include; we don't ask for sensitive data, so please don't add it.
3. Why we use it (legal bases)
- To provide the service you asked for (contract): show internships that fit you, send applications, let companies review candidates, open the chat after a shortlist and keep everyone up to date.
- To keep Hopp safe (legitimate interest): review reports, block abuse, prevent fraud and enforce the Terms of Use.
- To meet legal obligations, for example answering a request from an authority.
We don't use your data for advertising, we don't track you across other apps or websites and we don't sell it.
4. Who sees what
- Students: your profile and your CV are shared only with the companies you apply to. Your email and phone are never shown on your public profile.
- Companies: company profiles and internships are visible to students on Hopp.
- Messages are visible only to the people in the conversation. A company can only start a conversation after shortlisting a student. Our team may read a conversation only when reviewing a report about it.
5. Good fit / Not a fit
A company can mark some requirements of an internship as must-haves (for example languages, studies, skills, dates or hours). Hopp compares them with the information in the applicant's profile and shows the company a Good fit or Not a fit label with the reasons.
This label only helps the company sort applications. The company always makes the decision: no application is rejected automatically and Hopp takes no decision based solely on automated processing that has legal or similarly significant effects on you (article 22 GDPR). If you think the label is wrong, update your profile or write to hopp@cesno.eu.
6. Service providers (processors)
- Supabase: database, sign-in, file storage (photos and CVs) and sign-in emails. Hopp's project is hosted on Supabase servers in the European Union.
- Apple: Sign in with Apple, if you choose it. Apple tells us only your name and an email address (which can be a private relay address).
They act under contract and only on our instructions. If any data is ever transferred outside the European Economic Area, it is protected with safeguards recognised by the GDPR, such as the European Commission's Standard Contractual Clauses.
7. How long we keep it
- While your account is open we keep your data so the app works.
- When you delete your account, we delete your profile, CV, photos, applications and messages within 30 days.
- We keep only what the law requires us to keep for longer (for example, information needed to answer a legal claim), for the time the law sets, and then delete it.
8. Deleting your account
You can delete your account at any time from the app. Students: Profile › Settings › Account › Delete account. Companies: Company › Settings › Account › Delete account. Deletion is permanent.
9. Your rights
Under the GDPR you can ask to access, correct, delete or receive a copy of your data, object to or restrict its use, and withdraw any consent you have given. Most of your data you can edit or delete yourself in the app. For anything else, write to hopp@cesno.eu from the email of your account; we answer within one month.
You can also complain to the Spanish Data Protection Agency (AEPD), aepd.es.
10. Security
Data travels encrypted (HTTPS) and the database applies access rules per account, so each person can only see what this policy says they can see. Sign-in uses one-time codes or Sign in with Apple, without passwords.
11. Minimum age
Hopp is for people aged 16 and over. If you are under the age required in your country to consent on your own, ask a parent or guardian first.
12. Changes
If we change this policy in a way that matters, we will tell you in the app before the change applies. The date at the top shows the latest version.