Privacy Policy

1. Summary

VitaDraft helps you parse, standardize, tailor, and export resumes and cover letters. The Service is designed so that original resume files and resume photos remain primarily under your control on your device:

• Original resume files are stored in the VitaDraft app's private storage on your device. When you ask VitaDraft to parse a resume, the file is temporarily transmitted to our backend, processed in memory, and not intentionally saved to our server database or object storage.
• Resume photos are processed and stored locally on your device and are not uploaded to the VitaDraft backend.
• Resume text, structured resume data, job descriptions, and related instructions are transmitted when you request AI-assisted generation.
• Generated resumes, cover letters, and related generation history are stored on our servers so you can access and manage your results.
• VitaDraft uses Google AdMob to provide optional rewarded advertisements.

2. Information We Collect

2.1 Account and authentication information

When you sign in with Google or Apple, we may receive:

• your email address, including an Apple private relay address if you choose Hide My Email;
• a provider-specific account identifier;
• the identity and session tokens needed to authenticate your account; and
• the identity provider you used to sign in.

Authentication is managed using Supabase. Authentication tokens are also stored in secure device storage to keep you signed in.

2.2 Resume, career, and generation information

Depending on what you submit, we process:

• original resume files and file metadata, such as file name, type, and size;
• parsed or structured resume content;
• information contained in your resume, which may include your name, contact details, location, education, employment history, skills, qualifications, links, and any other information you choose to include;
• job descriptions, target roles, employer or company names, and tailoring instructions;
• generated resumes, match information, strengths, gaps, tailoring notes, and cover letters; and
• template and export selections.

Please do not include sensitive personal information that is not necessary for creating your resume. VitaDraft does not require government identification numbers, financial account details, health information, or similar highly sensitive information.

2.3 Photos and device files

If you choose to add a resume photo, VitaDraft may request access to your camera or photo library. Selected photos are resized and stored locally in the app's private device storage. Photos are used only to create previews and exports on your device and are not uploaded to the VitaDraft backend.

VitaDraft does not request access to your contacts, microphone, or precise GPS location.

2.4 Usage, entitlement, and rewarded-ad information

We process information needed to operate free credits, limits, premium-template credits, and rewarded ads, including:

• internal user, generation-job, and reward-challenge identifiers;
• plan and credit balances, usage counts, and timestamps;
• generation and export status;
• ad unit, reward type and amount, transaction identifier, verification timestamps, and signed server-side verification data; and
• an account identifier and an opaque challenge value sent to Google AdMob for reward verification.

2.5 Device, network, consent, and technical information

When you use the Service, we and our service providers may process:

• IP address and basic request information;
• device, operating system, app version, and language information;
• advertising identifiers or similar device identifiers where available and permitted;
• advertising consent and privacy-choice signals; and
• limited operational logs and AI usage metadata, such as request identifiers, model/provider information, token counts, latency, and cost.

We do not intentionally include resume text, job descriptions, generated content, authentication tokens, or API keys in our application logs.

3. How We Use Information

We use personal information to:

• authenticate users and maintain accounts;
• parse resumes and return structured resume information;
• generate, tailor, store, retrieve, and export resumes and cover letters;
• maintain generation history and restore active generation jobs;
• manage usage limits, credits, entitlements, and optional rewarded ads;
• verify rewarded-ad transactions and prevent duplicate or fraudulent rewards;
• secure, operate, troubleshoot, and improve the reliability of the Service;
• respond to support, privacy, and account-deletion requests;
• enforce our terms and protect the rights, safety, and integrity of users and the Service; and
• comply with applicable law and lawful requests.

We do not use resume content to make employment, credit, insurance, legal, or similarly significant decisions about you. VitaDraft generates documents at your request, and you decide whether and how to use the output.

4. AI Processing

When you request AI-assisted generation, VitaDraft sends the resume text or structured resume data, the job description and instructions you provide, and a response schema to OpenRouter. OpenRouter may route the request to a selected downstream AI model provider.

AI providers process this information to return the generated result. Their handling, location, and retention of data may depend on the selected model, provider, and provider configuration. You can review OpenRouter's information at:

• OpenRouter Privacy Policy
• OpenRouter Data Collection documentation

VitaDraft stores active generation input in its job system only while the generation is queued or processing. After a job completes or fails, the stored generation input is removed from the job record. A one-way request hash and non-content operational metadata may remain to prevent duplicate charging and safely handle retries. Generated resumes, cover letters, and generation history are retained as described in Section 9.

AI output can be inaccurate or incomplete. Review every generated document before using or sharing it.

5. Advertising and Consent

VitaDraft uses Google AdMob to offer optional rewarded advertisements. Watching a rewarded ad may provide a generation, cover-letter, or premium-template benefit. AdMob and its advertising partners may process device information, IP address, advertising identifiers, consent signals, ad interactions, and fraud-prevention information.

VitaDraft currently requests non-personalized ads. Non-personalized and limited ads may still use device storage or identifiers for purposes such as frequency capping, aggregated reporting, security, and fraud prevention.

Where required, VitaDraft uses Google's User Messaging Platform to request advertising consent or provide opt-out choices. Depending on your region and app version, you may be able to reopen those choices through a Privacy Choices control in the VitaDraft Profile screen. You can also control certain advertising identifiers and tracking permissions through your device settings, or contact us to withdraw consent or request help with an advertising choice.

For more information about Google's data practices, see:

• How Google uses information from sites or apps that use its services
• Google Privacy Policy
• Google advertising technologies

6. Legal Bases for Processing

Where the law requires us to identify a legal basis, we rely on one or more of the following:

• Performance of a contract: to create and operate your account and provide the resume, generation, history, export, and reward features you request.
• Consent: for advertising personalization, device storage, or other processing where consent is legally required. You may withdraw consent at any time, without affecting processing that occurred before withdrawal.
• Legitimate interests: to secure the Service, prevent abuse and reward fraud, enforce usage limits, troubleshoot failures, maintain service reliability, and protect our legal rights, where those interests are not overridden by your rights.
• Legal obligations: to comply with applicable law, valid legal process, and regulatory requirements.

7. How We Disclose Information

We disclose information only as reasonably necessary for the purposes described in this Policy:

We do not sell personal information for money. Depending on the law that applies to you, disclosures for targeted advertising may be considered a "sale," "sharing," or targeted advertising even when no money is exchanged. Where applicable, you can opt out using VitaDraft's consent or Privacy Choices controls when available, through supported device settings, or by contacting us.

8. International Data Transfers

VitaDraft and its service providers may process information in countries other than the country where you live. These countries may have different data-protection laws. Where required, we use or rely on appropriate contractual, organizational, or legal safeguards for international transfers.

9. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy:

• Original resume files, parsed text, structured resume data, photos, and the latest generated result stored on your device: retained until you remove the content, clear VitaDraft content, delete your account through the app, or uninstall the app, subject to your device's backup and operating-system behavior.
• Resume parsing uploads: processed transiently for the request and not intentionally saved in the VitaDraft server database or object storage.
• Active generation input: retained in the generation job only while queued or processing, then removed when the job completes or fails.
• Generated resumes, cover letters, job information, and generation history: retained until you delete an individual result, clear app content, or delete your account.
• Account and authentication information: retained while your account remains active and deleted when account deletion is completed, subject to limited retention required by law or a service provider's independent obligations.
• Entitlement, usage, export, and rewarded-ad records: retained while needed to operate your account, prevent reward replay or credit abuse, resolve disputes, and meet legal obligations. Clearing app content does not delete the active account's entitlement counters or signed reward ledger. Permanently deleting the account deletes the VitaDraft account records associated with that account.
• Security and operational logs: retained only for a limited period based on security, troubleshooting, fraud-prevention, and legal needs.

Our service providers may retain information under their own policies and legal obligations.

10. Security

We use reasonable technical and organizational safeguards designed to protect personal information. These include authenticated and owner-scoped API access, secure device storage for session tokens, redaction of authentication headers from logs, server-side reward verification, and deletion controls.

No transmission or storage system is completely secure. You are responsible for protecting access to your device, identity-provider account, exported documents, and any documents you share with other services.

11. Your Choices and Rights

11.1 In-app controls

The VitaDraft Profile screen provides the following controls:

• Clear app content: removes local resumes, photos, and generated documents and deletes resume/generated content stored by VitaDraft. It keeps your account, entitlement counters, and signed reward ledger active.
• Delete account permanently: deletes VitaDraft content, credits, reward history, and the authentication account, and clears VitaDraft's local app content.
• Sign out: removes the locally stored session but does not delete your account or server data.
• Advertising choices: depending on your region and app version, an in-app Privacy Choices control may be available. You may also use supported device settings or contact us.

11.2 Privacy rights

Depending on where you live, you may have the right to:

• request access to or a copy of personal information;
• request correction or deletion;
• request restriction of processing;
• object to certain processing, including targeted advertising;
• withdraw consent;
• request data portability;
• opt out of the sale or sharing of personal information or targeted advertising;
• appeal a denied privacy request, where applicable;
• receive equal service and not be discriminated against for exercising privacy rights; and
• complain to your local data-protection authority.

To exercise a right, use the in-app controls or contact a.hakandemir23@gmail.com. We may need to verify your identity before completing a request. Authorized agents may submit requests where permitted by law, subject to verification of their authority.

12. Children

VitaDraft is intended for people preparing professional resumes and is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

13. Third-Party Services and User Sharing

The Service may open identity-provider pages, advertising content, or operating-system sharing tools. If you export or share a document to another app, cloud-storage provider, employer, recruiter, or other recipient, that recipient's privacy practices apply. VitaDraft is not responsible for third-party services you choose to use.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes to the Service, service providers, legal requirements, or data practices. We will update the "Last updated" date and provide additional notice where required. If a change materially affects processing based on consent, we will request new consent where required.