Privacy Policy

1. Introduction

Welcome to Resume Maker ("we", "our", or "us"). We are committed to protecting your privacy.

This Privacy Policy explains how we handle your information when you use our mobile application. Please read this policy carefully. If you disagree with its terms, please discontinue use of the app.

2. Information We Process

Resume Maker is built around a privacy-first principle: your resume content stays on your device. The limited data that does leave your device is anonymous and is processed by trusted third parties for specific purposes:

• Anonymous device identifier and basic device info (operating system, app version) for analytics and crash diagnostics
• Advertising identifier for ad delivery (handled by Google AdMob)
• Subscription transaction details if you purchase Premium (handled by Google Play, the App Store, and RevenueCat)
• In-app event names like "paywall_viewed" or "pdf_export_completed" for product analytics (PostHog)
• Crash reports and error stack traces, if the app crashes, sent to Sentry for diagnostics
• Resume text, file uploads, job descriptions, and cover-letter inputs sent to our backend only when you actively use an AI feature (ATS Checker, Cover Letter Generator, Resume Upload). These are processed by Google Gemini and discarded after the response is returned
• An anonymous push notification device token, handled by OneSignal, so we can send you product update notifications (you can disable notifications at any time)

We never receive or store your name, email, phone number, resume content, cover letter text, or any other content you enter into the app outside of the brief AI processing described above.

3. Data We Do Not Collect

We do not collect or transmit:

• Your name, email address, phone number, or any profile information
• Your resume content, cover letter text, or any details about your work history, education, or skills
• Photos you select for your profile
• Any file contents from your device beyond the resume PDF you choose to export

We do not require account registration or login. We have no ability to read, retrieve, or restore the resumes or profile information you create in the app.

4. Advertising (Google AdMob)

Resume Maker displays advertisements served by Google AdMob, a third-party advertising service operated by Google LLC.

To serve relevant ads, Google AdMob may collect and process certain information from your device, including:

• Advertising ID (Google Ad ID on Android)
• IP address and approximate location
• Device type, operating system version, and app activity
• Ad interaction data (e.g. impressions, clicks)

This data is collected and used by Google in accordance with Google's Privacy Policy. We do not receive or store this data ourselves.

5. AI Processing (Google Gemini)

When you use one of the following features, the relevant text is sent from your device to our backend server, which forwards it to Google's Gemini API to generate a result:

• ATS Checker: the resume text or uploaded resume file (PDF, DOCX, or TXT) plus the job description and job title you provide
• Resume Upload & Parse: the contents of the resume file you upload, used to extract structured fields (name, work experience, skills, etc.) for the in-app builder
• Cover Letter Generator: the company name, job title, and skills you enter
• Resume Builder AI helpers: a single role title and brief context when you tap "Generate Summary", "Generate Bullets", or "Improve Bullet"

How we handle this data:

• Our backend does not write your resume content, uploaded files, or any AI inputs/outputs to any database, log file, or persistent storage
• Uploaded files are held in memory only for the duration of the request, then discarded
• Google processes the request under its enterprise API terms; per Google's policy, paid Gemini API requests are not used to train Google's models. See Google AI terms and Google's privacy policy
• You are not required to use any AI feature. The Resume Builder, PDF export, Career Advice, and Interview Prep all work entirely offline without any backend call

6. Analytics (PostHog)

We use PostHog, a privacy-focused product analytics service, to understand how the app is used in aggregate. This helps us identify bugs, improve user experience, and decide which features to invest in.

What is sent to PostHog:

• An anonymous, device-generated identifier (no link to your real identity)
• Your subscription plan (free or premium)
• Event names such as "app_opened", "paywall_viewed", "pdf_export_completed", "template_selected"
• Generic device info: operating system, app version, device model
• The names of screens you visit (e.g. "ResumeBuilder", "Profile")

What is NOT sent to PostHog:

• Your name, email, phone number, or any profile information
• Resume content, cover letter text, or any data you type into the app
• Photos, file contents, or any personal media
• Tap by tap interactions (we have disabled touch autocapture)

PostHog processes this data on our behalf as a data processor. You can read PostHog's privacy policy at posthog.com/privacy.

7. Crash Reporting (Sentry)

We use Sentry to detect and diagnose crashes and errors so we can fix them quickly. Sentry is only triggered when something goes wrong; it does not run continuously.

What is sent to Sentry when an error occurs:

• The error message and stack trace (the technical line of code that failed)
• Generic device info: operating system, app version, device model
• The screen you were on when the crash happened (e.g. "ResumeBuilder")
• An anonymous, device-generated identifier (no link to your real identity)

What is NOT sent to Sentry:

• Your name, email, phone number, or any profile information (we explicitly strip user emails from every event)
• Resume content, cover letter text, or any data you type into the app
• Photos or file contents
• Routine network failures (filtered out at the source to avoid noise)

Sentry is fully disabled in development builds. Crash data is retained per Sentry's privacy policy.

8. Subscription & Promo Codes (Google Play & RevenueCat)

If you choose to purchase a Premium subscription, the transaction is processed by Google Play (Android) and verified through RevenueCat, a subscription management service.

What happens when you subscribe:

• Google Play or the App Store handles the payment. We never see your payment method, billing address, or full account details.
• RevenueCat receives your anonymous purchase token and your anonymous app user ID, in order to verify and track entitlement (i.e. confirm you have an active subscription).
• We receive only an anonymised purchase confirmation that unlocks Premium features in the app.

What we do NOT receive:

• Your credit card or banking information
• Your Google or Apple account email or name
• Your billing address

Promo codes: We may issue promotional codes that unlock Premium features for a limited period. Promo codes are redeemed in Profile → Enter Promo Code. The code is validated against our backend. We do not link promo code redemptions to any personal identity.

You can manage, pause, or cancel your subscription at any time via Profile → Manage Subscription, which opens Google Play's subscription management screen.

For more details, see Google Play's policies and RevenueCat's privacy policy.

9. Local Data Storage (Your Resume Data)

All data you enter into the app, including your name, resume content, work experience, education, skills, and other details, is stored exclusively on your device using local storage.

This means:

• Your data never leaves your device
• There is no cloud sync, backup, or server-side storage
• No login or password is associated with your data
• If you uninstall the app or use "Reset App" in Profile, all data is permanently deleted from your device

We have no ability to access, view, retrieve, or restore any data on your device.

10. Device Permissions

Resume Maker may request the following device permissions:

• Photo library / Storage: To let you select a profile photo for your resume and to pick an existing resume file (PDF/DOCX/TXT) when using "Upload Resume". The photo is saved locally as part of your resume data and is never uploaded. An uploaded resume file is sent to our backend for AI parsing only when you initiate that action.
• Document picker: Used when you upload a resume file (PDF, DOCX, or TXT). The app reads only the file you select, nothing else.
• Folder access (when exporting PDF): When you tap "Save to Device", Android asks you to pick a folder where the PDF will be saved. Access is granted only to that folder for that single save action. No other files on your device are read or modified.
• Notifications: Used for two purposes: (a) local notifications generated on your device, such as "Your ATS analysis is ready" or "Your PDF has been generated", and (b) remote push notifications sent through OneSignal, which we use to occasionally let you know about important updates, new features, or service issues. You can disable notifications at any time in your device settings. See the OneSignal disclosure at the end of this section for what data is processed.
• Detect screen capture (Android): Used only to display a non-blocking notice when a screenshot is taken. It does not collect or transmit any data.
• Internet: Required to use AI features (Gemini via our backend), load advertisements (Google AdMob), send anonymous analytics events (PostHog), report crashes (Sentry), deliver push notifications (OneSignal), and verify subscription status (Google Play, App Store, RevenueCat).

You may revoke any permission at any time via your device settings; the app continues to function with the related feature disabled.

OneSignal (push notification delivery): We use OneSignal, a third-party push notification service, to deliver remote notifications. When the app starts for the first time and notification permission is granted, OneSignal generates an anonymous device push token. OneSignal may also collect generic device info (operating system, app version, device language, time zone, country) and event metadata (whether a notification was received, opened, or dismissed) to deliver and measure notifications. OneSignal does not receive your name, email, resume content, or any data you enter into the app. See OneSignal's privacy policy for more detail. You can disable push notifications at any time in your device settings, which prevents any further data from being sent to OneSignal from your device.

11. App Features & Offline Operation

Most app features operate entirely on your device without transmitting your personal content.

• Resume Builder: All resume data is created and saved locally on your device
• ATS Checker: Your resume text or uploaded file plus the job description and job title are sent to our backend, which forwards them to Google Gemini to generate the ATS score. They are not stored, logged, or retained after the response is returned.
• Cover Letter Generator: Your company name, job title, and skills are sent to our backend and forwarded to Gemini to generate a cover letter. Inputs and outputs are not stored or retained.
• Resume Upload & Parse: The resume file you upload is sent to our backend, parsed (PDF/DOCX/TXT) and forwarded to Gemini to extract structured fields. The file and extracted text are held in memory only for the duration of the request, then discarded.
• AI helpers in Resume Builder: "Generate Summary", "Generate Bullets", and "Improve Bullet" send only the small text snippet you provide (role title and brief context) to Gemini.
• Career Advice & Interview Prep: Static content bundled with the app, no network required
• PDF Export: Generated locally on your device and shared only when you explicitly choose to share it

An internet connection is used for: AI-powered features, loading advertisements, sending anonymous analytics events, reporting crashes, and verifying your subscription status. None of the above data is stored on our servers beyond the duration of the request.

12. Data Retention & Deletion

Local data on your device:

• Delete individual resumes at any time from within the app
• Reset all app data via Profile → Reset App, which permanently wipes your profile, all resumes, and all history from your device, and clears the anonymous analytics identifier

Our backend: We do not store, log, or retain your resume content, uploaded files, AI inputs, or AI outputs. Each request is processed in memory and discarded.

Third-party data:

• AdMob data is retained per Google's policies
• PostHog analytics data is retained for up to 7 years per PostHog's defaults; we may shorten this in our project settings
• Sentry crash data is retained per Sentry's data retention policy (typically 90 days for free tier projects)
• Google Gemini may retain API request data for a short period for abuse prevention, per Google's API terms; the data is not used to train Google's models
• Subscription transaction records are retained by Google Play, the App Store, and RevenueCat for as long as legally required for billing and tax purposes

We hold no copies of your resume data and cannot assist in data recovery after deletion.

13. Sharing Your Information

We do not sell your personal information to anyone, ever. We share limited data only with the service providers necessary to operate the app:

• Google Gemini (Google LLC), to generate AI responses for the ATS Checker, Cover Letter Generator, Resume Upload & Parse, and Resume Builder AI helpers
• Google AdMob, to serve ads
• PostHog, to process anonymous product analytics on our behalf
• Sentry, to process crash reports on our behalf
• Google Play and RevenueCat, to process and verify subscription purchases
• Render, the cloud provider that hosts our backend server

These parties act as data processors and are bound by their own privacy policies. We do not share, sell, or rent your data for any other purpose.

Your resume content leaves your device only when (a) you actively use an AI feature listed above, or (b) you explicitly export or share a PDF, an action you initiate to a destination you choose. We are not involved in or party to the second transfer.

14. Your Rights

Since all your resume content is stored locally on your device, you have direct and complete control over it at all times:

• Access: View all your data directly within the app
• Correction: Edit your profile and resume content at any time
• Deletion: Delete individual items or reset all data via Profile → Reset App
• Export: Share or download your resume as a PDF at any time
• Ad personalisation: Android: Settings → Google → Ads → Opt out of Ads Personalisation. iOS: Settings → Privacy & Security → Tracking → toggle "Allow Apps to Request to Track" off, or revoke per-app tracking permission
• Analytics opt-out: Use Profile → Reset App to clear the anonymous analytics identifier
• Subscription management: Use Profile → Manage Subscription to view, change, or cancel your subscription
• Notifications opt-out: Disable notifications for Resume Maker in your device settings

For any questions, contact us at rivoacle@gmail.com. We will respond within 5 business days.

15. Children's Privacy & Age Verification

Resume Maker is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from anyone under 16. Since the App stores all profile and resume content locally on the device and we operate without user accounts, we have no server-side record of any user's identity or age.

Users aged 16 to 17: Use of the App requires consent from a parent or legal guardian. We do not target this age group with advertising or in-app purchase prompts where Google Play indicates the user is a minor without verified parental consent.

Texas App Store Accountability Act (SB 2420): For users who install the App in Texas, Google Play may share age category signals with us through the Play Age Signals API. We use these signals only to:

• Determine whether to display in-app purchase options
• Determine whether to display personalised advertising
• Enforce minimum age and parental-consent requirements under Texas SB 2420

We do not store, sell, or share these age signals with third parties. The signals are processed in-memory at runtime and are not written to our servers or any analytics platform.

Parental requests: If you are a parent or guardian and you believe your child has used the App, you may contact us at rivoacle@gmail.com to request a block on App use, revocation of consent, or deletion of any locally stored data. Because we do not maintain server-side accounts, deletion can be completed by uninstalling the App on the device, and we will guide you through any additional steps required.

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Your continued use of the app after changes are posted constitutes your acceptance of the updated policy.

17. Contact Us

If you have questions or concerns regarding this Privacy Policy, please contact us:

Email: rivoacle@gmail.com

We aim to respond to all enquiries within 5 business days.