Privacy Policy

1. Disclose All Collected Data & Identifiers

We strictly limit data collection to what is necessary to deliver intelligent resume creation, ATS scoring, and synchronized multi-device functionality. We collect the following categories of information:

1.1 Personal & Profile Information

• Identity & Account Details: Full name, verified email address, account authentication tokens, and internal unique identifiers (Supabase UUID, RevenueCat App User ID).
• Resume & Career Data: Work history, educational qualifications, professional skills, target job titles, certifications, contact details placed on resumes, and tailored cover letters.
• Interactive AI Inputs: Multi-turn conversation messages exchanged within the "Chat with AI" career assistant sessions.

1.2 Device, Network & Telemetry Information

• Device Attributes: Mobile operating system version (iOS / Android), device hardware model, language, and locale settings.
• System Telemetry & Error Logs: Anonymized stack traces, performance metrics, crash timestamps, and diagnostic reports to resolve edge errors.
• Network Connectivity: Local connection state (Wi-Fi, cellular, offline) via the connectivity_plus framework to optimize offline caching and prevent synchronization failures.

1.3 Tracking & Attribution Identifiers (Subject to ATT / OS Consent)

To evaluate marketing attribution and support optional ad-supported experiences, the application may interface with advertising identifiers only where permitted by platform-level consent:

• Apple Identifier for Advertisers (IDFA): iOS devices only. Access to the IDFA is strictly deactivated by default and is only accessed if you explicitly grant permission through Apple’s native App Tracking Transparency (ATT) prompt.
• Google Android Advertising ID (AAID): Android devices only. Transmitted in accordance with Google Play developer policies and user-managed ad personalization settings.
• Cryptographically Hashed Identifiers: One-way cryptographically hashed (SHA-256) email addresses and internal system user IDs passed to verified attribution partners (Meta, TikTok) solely for non-monetary conversion attribution, strictly gated behind user tracking authorization.

2. Third-Party Processors & SDK Disclosures

We work with trusted third-party service providers and enterprise infrastructure platforms to provide reliable, scalable services. All processors are bound by strict contractual data-protection agreements:

3. Storage Architecture & No Public Storage Buckets

Unlike conventional web applications that drop customer files into publicly readable AWS S3 or Google Cloud Storage buckets, ResumeAI enforces a zero-trust, private relational database storage model:

4. Instant & Complete Account Deletion Procedure

ResumeAI provides our users with full, autonomous control over their personal data. We provide an immediate, self-service account deletion mechanism that operates in real time without requiring manual administrative approval.

4.1 How to Delete Your Account In-App

1. Open the ResumeAI application on your mobile device.
2. Tap the menu button to open the side Drawer or navigate to Settings.
3. Scroll down and select "Delete Account".
4. Review the permanent deletion warning and confirm your request.

Alternatively, users who have uninstalled the app or lost device access can initiate deletion by visiting our dedicated Web Account Deletion Portal or emailing [email protected].

5. Purpose of Data Processing

We process your data exclusively under valid legal bases (contract performance, user consent, and legitimate interests):

• Resume Generation & Refactoring: Rendering ATS-compliant resumes, converting raw work experience into punchy bullet points, and tailoring skills to target roles.
• Multi-Device Cloud Synchronization: Enabling you to create a resume on one phone, edit it on a tablet, and export copies anytime.
• AI Career Chat: Providing interactive interview preparation, cover letter drafts, and career mentoring based on your inputs.
• Subscription Management: Tracking your active tier, validating App Store / Google Play receipts, and resetting monthly consumable credits via RevenueCat.
• Application Quality & Stability: Diagnosing performance bottlenecks, addressing crashes, and ensuring low-latency responses.

6. Regulatory Rights (GDPR & CCPA/CPRA)

We comply with international data protection frameworks, including the European Union / UK General Data Protection Regulation (GDPR) and California privacy legislation (CCPA / CPRA):

6.1 Rights Under the GDPR (EEA & UK Users)

• Right of Access: Request confirmation of whether your data is being processed and obtain a copy of your personal data.
• Right to Rectification: Correct inaccurate or incomplete resume details directly in the app or upon request.
• Right to Erasure ("Right to be Forgotten"): Demand total destruction of your data, executable instantly via the in-app "Delete Account" button.
• Right to Restriction of Processing: Restrict certain types of processing where legitimate grounds are contested.
• Right to Data Portability: Export your resume data in standard portable formats (PDF, JSON, or text).
• Right to Withdraw Consent: Revoke ATT tracking or marketing consent anytime via your device OS settings.

6.2 California Residents Notice (CCPA / CPRA)

• Notice of Collection: We collect personal identifiers, commercial transaction info (subscriptions), internet activity (telemetry), and professional employment history.
• Right to Know & Delete: California consumers may request disclosure of data categories collected and request complete deletion twice per 12-month period.
• No Sale of Personal Information: We do NOT sell, rent, or lease your personal data or resume details to data brokers or third parties for monetary consideration.
• Right to Opt-Out of Cross-Context Behavioral Advertising: You may limit cross-context behavioral advertising at any time by declining the Apple ATT prompt or disabling ad personalization in your Android OS settings.
• Non-Discrimination: We will never deny services, charge different prices, or provide a lesser quality of service to users who exercise their statutory privacy rights.

7. Children's Privacy (COPPA Compliance)

The ResumeAI application and services are strictly designed for job seekers, working professionals, and students entering the workforce. We do not knowingly solicit or collect personal information from children under the age of 13 (or under 16 in certain EEA jurisdictions). If we discover that a user under 13 has registered or provided personal data, we will immediately initiate our cascade deletion purge to remove that data. If you believe a child has provided us with personal information, please notify us at [email protected].

8. Contact Information & Data Protection Inquiries

For questions, formal legal notices, or data subject access requests concerning this Privacy Policy, our Data Protection Officer and compliance team can be contacted directly: