resumica

Privacy policy

Last updated: July 8, 2026

1. Data Controller

Resumica ("we", "us") is the data controller responsible for your personal data. Contact us at gimsa.sri@gmail.com for any data protection inquiries.

2. Information We Collect

We collect the following categories of personal data:

a) Account Data: your email address, a unique account identifier, your sign-in method (email and password, Google, Apple, or guest/anonymous) and the identifier it returns, email-verification status, and account creation and sign-in timestamps. If your sign-in provider shares them, this may include your display name and profile photo. Passwords are handled by Firebase Authentication; we never see or store your raw password.

b) Resume Content: name, job title, work experience, education, skills, contact details, and anything else you enter into your resume. This is stored only on your device and is never uploaded to our servers or any cloud storage, with two exceptions: (1) the AI features described in (g), which send masked text; and (2) if you enter a custom job title that is not already in our list, that title on its own may be sent to our servers to improve our job-title suggestions for everyone.

c) Usage Analytics: pseudonymous interaction events such as the template, color, and font you select, export format and file size, import source, and (when you create a resume) job title, experience level, and country. These are tied to an identifier assigned by the analytics service, not to your resume. We never send your resume content, name, or contact details to analytics. Analytics are off by default and collected only after you opt in; you can change this anytime in Settings > Privacy.

d) Crash & Diagnostic Reports: error logs, stack traces, app version, and device information, used to diagnose problems. These reports are not linked to your account identity. Enabled by default; you can disable them in Settings > Privacy.

e) Device Information: device model, operating system, and app version. We also generate a hashed device identifier used only on your device for session and trust management; this identifier is never transmitted to us or any third party.

f) Subscription Data: purchase history, subscription status, and trial dates. Purchases are processed through Apple App Store or Google Play billing and our subscription provider, RevenueCat, which receives your account identifier to manage your entitlements.

g) AI-Processed Data: when you use AI features, the section text you are working on is sent to our Cloud Functions and AI provider for processing with identifiers masked. Before anything leaves your device, contact details (emails, phone numbers, addresses, links) are always replaced with placeholders, and names, organizations, and addresses are additionally masked where on-device detection identifies them. To guide the result, we also send limited context: your job title, your key skills, your approximate years of experience, and, for a cover letter, the company name you enter. For AI resume generation at setup, your job title, experience level, and country are sent. We do not store your resume content on our servers. Depending on the feature, the masked text is processed by one of our AI providers — OpenAI, Anthropic, or Google (Gemini). We use these providers under terms that do not permit using your content to train their general-purpose models, and requests are retained only briefly (typically up to 30 days) for abuse monitoring before deletion.

h) Operational & Security Data: to run the service securely we store, on our servers (Google Cloud Firestore), your account identifier together with your subscription status, AI-feature usage counts and rate-limit records, and aggregate performance metrics. If you use Sign in with Apple, we also store an Apple authorization token used to revoke access when you delete your account. None of this includes your resume content.

i) Network Status: connectivity state (online/offline) is checked locally to display status indicators and is never transmitted.

3. Legal Basis for Processing (GDPR Art. 6)

We rely on a lawful basis for each purpose:

Special-category data (Art. 9): a resume can reveal sensitive information (for example health, religion, trade-union membership, or data from which ethnic origin could be inferred). Our masking removes identifiers but cannot guarantee removal of sensitive content you choose to include in free text. AI features are optional: you choose when to send text to them, and you can enter your resume manually instead. Because resume text can contain sensitive details, we recommend you do not include special-category information in text you send to AI features; where you do, you provide it knowingly by choosing to use the feature.

You may withdraw consent at any time via Settings > Privacy without affecting the lawfulness of prior processing.

4. How We Use Your Information

5. Third-Party Data Processors

We use the following service providers, each processing data under its own data-processing terms:

We do not sell your personal data. We share it with these processors only as needed to operate the app.

6. Data Storage & International Transfers

Your resume content stays on your device and is never synced to our servers.

Account, subscription, and operational data are stored with Google Cloud, and masked AI requests are processed by Google Cloud and by our AI providers (OpenAI, Anthropic, and Google), in the United States and other countries where these providers operate. Where data leaves the UK/EEA, the transfer is protected by Standard Contractual Clauses and/or the EU-US Data Privacy Framework as set out in each provider's terms (GDPR Art. 46).

7. Data Retention

8. Your Rights (GDPR Art. 15-22)

You have the right to:

9. No Automated Decision-Making

Our AI suggestions and resume scores are advisory tools to help you write and format your resume. They do not make automated decisions that produce legal or similarly significant effects about you (GDPR Art. 22), and we do not use them to evaluate, rank, or screen you as a job candidate.

10. Advertising & "Do Not Sell"

The free tier of Resumica shows in-app ads served by Google AdMob.

Rewarded ads are optional: you choose to watch one in exchange for an extra free feature use.

We do not sell your personal information. Because our ads are non-personalized and are not based on tracking your activity across other companies' apps and websites, we do not share it for cross-context behavioral advertising, as those terms are used under the California Consumer Privacy Act (CCPA/CPRA).

11. Children's Privacy

Our service is not intended for children under 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children.

12. Account & Data Deletion

You can delete your account at any time in Settings > Account > Delete Account. This immediately and permanently erases all resume data from your device and deletes your sign-in identity. Your account records held on our servers (such as subscription status and usage counts) are erased automatically when you delete your account, typically within 24 hours. If you cannot access the app, you can also request deletion at https://gimsoft-resumica.web.app/delete-account or by emailing gimsa.sri@gmail.com.

13. Changes to This Policy

We will notify you of material changes via in-app notification and update the "Last Updated" date. Continued use after changes constitutes acceptance.

14. Contact Us

For data protection inquiries: