1. Who we are
This policy covers Smart CV: AI Resume Builder (bundle ID dev.meliharik.cv) for iPhone, published by Melih Arık, Türkiye. Contact: apps@meliharik.dev.
It replaces the earlier policy at meliharik.dev/cv_privacy_policy.html, which said that no data leaves your device. That was not accurate, and this version describes what the app actually does.
2. What stays on your device
The details you enter are stored on your device: work experience, education, projects, certifications, languages, saved cover letters, and your profile fields (name, title, address, birth date, phone, email, links) and photo. Profile fields and the photo are kept with iOS secure storage (Keychain). The PDFs you generate are kept in the app's storage.
We do not receive this data from the app, apart from the AI features described below, which send text you choose to Google.
3. AI features and Google Gemini
Three features send text to Google's Gemini API: the AI cover letter, Score your CV and Import from another CV. Smart CV reads the text out of the PDF you pick on your device and sends that text from the app directly to Google. The request is sent with the text, your instructions and the output language.
What is sent for each feature:
- AI cover letter: the text of your CV PDF, the company name, the position and the language you chose.
- Score your CV: the text of the PDF you pick and your app language, so feedback comes back in that language.
- Import from another CV: the text of the PDF you pick.
4. About what Google receives
The text of a CV usually contains personal details such as your name, contact details and work history. The PDF file itself and your profile photo are not sent. Google processes the request under its own terms and privacy policy for the Gemini API. We do not store the AI request or response on our servers; the result is shown in the app, and a cover letter is saved on your device. Do not use these features with a PDF that contains information you do not want Google to process.
5. Firebase (Google)
Smart CV uses Firebase Authentication to sign you in anonymously, so there is no email or password. It uses Cloud Firestore to keep one small record per device. We have not added Firebase Analytics or Crashlytics.
- Anonymous Firebase user ID.
- Device identifier for vendor (a number iOS assigns to all apps from the same developer on your device), used as the record ID.
- Device model string and iOS version.
- Created and updated times.
- Whether you have a subscription and the plan name (for example free).
6. Purchases (RevenueCat and Apple)
Subscriptions are sold through Apple. We use RevenueCat to check and sync your purchases and unlock Pro. RevenueCat receives your purchase and subscription information from Apple, the identifier for vendor, which the app sets as your RevenueCat user ID, and technical data such as your IP address. We do not receive your payment details; Apple handles payment.
7. Notifications (OneSignal)
Smart CV uses OneSignal to send push notifications, and local notifications on the device for reminders and offers. iOS asks for permission first and you can turn notifications off in Settings. If notifications are on, OneSignal receives your push token, the identifier for vendor (set as the OneSignal external ID), your app language, and device and technical information such as IP address and app version.
8. Fonts
The app interface uses fonts that may be downloaded from Google Fonts servers when the app runs, which means Google can see your IP address and the font request. CV fonts used in PDFs are bundled with the app.
9. Photos, files and permissions
Smart CV asks to read your photo library only when you choose a profile photo, and uses the file picker only when you choose a PDF. You can allow access to selected photos only. Saving a PDF or sharing it uses the iOS share sheet and Files; whatever you share goes where you send it.
10. Support email
When you tap Send us email in Settings, the draft is addressed to apps@meliharik.dev and includes your anonymous user ID, device ID, app version and whether you are a subscriber, to help us find your record. You can delete these lines before sending.
11. What we do not do
- No advertising and no ad SDKs.
- No selling of personal data.
- No tracking of you across other companies' apps and websites.
12. Retention and deletion
Data on your device remains until you delete it or delete the app. iOS may keep Keychain items after an app is deleted. The record in Cloud Firestore and the Firebase anonymous user are kept until we remove them. There is currently no delete-account button in the app. Email apps@meliharik.dev from the address you want us to act on, or include your user ID from the support email, and we will delete your Firestore record and ask RevenueCat and OneSignal to delete the data tied to your device ID. Data held by Google for Gemini requests, Apple, or your own backups is governed by their policies.
13. Your rights
Depending on where you live, including under Turkish data protection law (KVKK) and the GDPR, you can ask to access, correct or delete your data, or object to its processing. Email apps@meliharik.dev. You can also complain to your local data protection authority.
14. Children
Smart CV is a tool for job seekers and is not directed at children under 13. We do not knowingly collect data from them.
15. Changes
If the app's data practices change, we will update this page and the date above.