AI Resume Privacy Policy

Effective date: September 9, 2026

AI Resume helps you create resumes, cover letters and interview practice. This policy describes the rebuilt iOS and Android app and its connected AI service. For privacy questions or requests, use AI Resume support.

Documents and practice on your device

Your resumes, contact details, work and education history, job descriptions, application records, revisions and interview history are saved in the app on your device. Manual editing does not require an AI request. Import reads only the file you select. Export, sharing and printing send the document to the destination you choose, whose privacy practices then apply. Deleting an item in the app does not delete copies you already exported or shared. Operating-system device backups may include app data according to your device settings; AI Resume does not provide a separate cloud-sync or backup service.

Optional AI processing

Before you use AI, the app asks for your consent. If you continue, it sends the selected resume or facts, your instructions, any selected job description and relevant conversation messages to our HTTPS backend. Interview history being saved on your device does not mean the AI runs on your device. Avoid confidential employer information, government identifiers, financial information and other details that are unnecessary for your request.

Our backend sends the material needed for your request through OpenRouter to its selected processing providers. Current routes use OpenAI models served by Microsoft Azure and Google Gemini models. Requests require zero-data-retention routing and disallow provider data collection for training. A route that does not meet those requirements is refused. These restrictions concern AI prompt and response content; they do not mean that authentication, security or billing metadata is never retained. Provider routing may change while preserving these restrictions.

The app saves the response locally when you keep a draft, proposal or conversation. AI suggestions only change a resume when you apply them. Except for excerpts you explicitly submit in a safety report, our backend does not store resume text, interview messages or generated responses in its database or ordinary application logs. It processes them in memory to complete the requested operation. AI can be wrong; review suggested facts and wording before relying on them. You can keep using manual editing without sending a new AI request.

Reports you choose to send

Each generated result has an in-app reporting control. Review and edit the excerpt before submitting. Only that excerpt, your optional explanation, report reason and anonymous security identifiers are saved for developer safety review. Reporting makes no AI-provider call and uses none of your AI allowance. Reports are stored separately from ordinary AI requests. Daily cleanup removes reports older than 30 days; deleting your AI service data removes your installation’s reports immediately. Do not include personal information that is unnecessary to understand the issue.

Identity, security and usage limits

Google Firebase Authentication creates an anonymous app identity, and Firebase App Check verifies the app instance. Your device creates a private signing key in its secure storage; the key is not sent to our server. The backend receives its public key, installation identifier, anonymous identity, platform, signed request metadata and attestation tokens. We use these to protect access and prevent impersonation, replay and abuse.

The service keeps installation records, request identifiers and digests, nonce records, usage counts, error categories and cost/accounting records. Failed AI calls may retain the model name, upstream response status and duration for diagnosis. These records contain no resume or conversation text. Network services also process IP addresses and connection metadata to deliver and secure requests. Minimal security, anti-abuse and accounting records may be retained after an installation is retired; retirement is not a promise to erase all security records. Contact support about access or deletion requests. Anonymous identifiers may be needed to locate the relevant records; do not send private signing keys or authentication tokens.

Delete AI service data

In AI Resume, open Settings → Data & privacy → Delete AI service data, review the confirmation, then choose Delete service data. Keep the app online until it shows Deletion confirmed. These controls are available without a subscription or remaining AI allowance. If confirmation fails, retry from the same installation; its pending request and signing identity are retained until deletion is confirmed.

This retires the installation's AI access and immediately deletes the content reports it submitted. Ordinary resume text, interview messages and generated responses are processed in memory and are not stored in our backend database. Minimal security, anti-abuse and purchase-linked accounting records remain as described above; deletion does not reset usage limits or cancel a store subscription. Your local documents and interview history remain on your device. Delete those items separately in the app, or use your device's app-data controls. For help or a privacy request, use the AI Resume support page.

Purchases

Apple App Store or Google Play processes subscriptions and payments. The app receives product, transaction and entitlement information needed to display prices, unlock app features and restore access. Before paid AI work, our backend verifies current store subscription status or an existing subscribed app account. It stores an encrypted purchase reference, product and subscription status, verification time and expiry linked to the anonymous installation. Purchase-linked usage records prevent reinstalling or restoring on another device from creating extra AI allowance. We do not receive your payment-card number. Subscription management, cancellation and store refunds follow the store you used. Uninstalling the app does not cancel a subscription.

Optional Settings → Subscription recovery restores an existing subscription using a private recovery code. The server stores the code encrypted, a one-way matching digest, its revocation generation and the installations linked to the subscription. Existing subscribed app accounts also have an account identifier, explicit expiry and revocation status. Recovery shares subscription access and AI allowance; it does not upload or synchronize your documents. Keep the code private. Deleting AI service data removes recovery access from that installation without cancelling the underlying subscription. Contact support to request deletion of a subscribed app account or to revoke recovery access; minimal billing, security and anti-abuse records may remain as described in this policy.

Diagnostics

The release app uses Google Firebase Analytics and Crashlytics to understand feature use and diagnose failures. These services process app and device identifiers, device/operating-system information, usage events and crash diagnostics under Google's service policies. Analytics derives approximate location, such as a city, from masked IP addresses; the app does not request precise device location. Our custom events and error reports do not include resume text, names, job descriptions or interview messages. The app does not sell your personal information or use your resume or interview content for advertising.

Your choices and retention

Review invitations use an on-device WhatsApp availability check. The result is not sent to our servers or analytics. Choosing whether to leave a review does not change subscription access or any app feature.

You choose what to enter, import, share and send to AI. You can delete local documents and practice sessions in the app, or remove app data using your device's controls. Previously exported files and operating-system backups are managed separately. Local records remain until you delete them; removing the app may not erase device secure-storage records or previously shared copies. Contact support if you need help with service-held records or a privacy request. We use the information described here to operate, secure and improve AI Resume and to meet applicable obligations, rather than promising a retention period that the service does not enforce.

Service providers and international processing

Our hosting and network providers, Google Firebase, OpenRouter and the selected AI processing providers process data to deliver their respective services. Processing may occur outside your country. We may disclose information when required by law or necessary to protect the service and its users. We do not make your documents or practice conversations public.

Children and changes

AI Resume is intended for people preparing job applications and interviews. It is not directed at children under

1. If you believe a child has provided personal information, contact support. We may update this policy as the app

changes and will show the effective date here.