Privacy Policy

Effective: October 29, 2026

This Privacy Policy explains how Zenawi (“we,” “us,” or “our”) collects, uses, stores, shares, and protects information when you use Resume Guide, including the Android app, the iPhone app, and the Resume Guide website at resumeguide.ai (together, the “App”), with its job-seeker features and the Screen & Interview recruiting workspace. By using the App you agree to this Policy.

1. Information we collect

1.1 Information you give us

• Account information - your email address and display name, used to sign you in and identify your account. If you sign in with Google, this includes your Google account profile information. If you use Sign in with Apple (in the iPhone app or on the website), Apple shares your name and email address; if you choose Hide My Email, the address is a private relay address from Apple that forwards to your real one.
• Resume and career content - the information you type or import into the App: your name, contact details, work history, education, skills, certifications, and projects; cover letters; saved job descriptions; Career Toolkit inputs and the documents it generates; and your Mock Interview answers.
• Photos - if you pick a custom profile photo for your account in the Android or iPhone app, it is stored on your device only and is not uploaded to our servers. If you sign in with Google, the App can display your Google account photo. A photo you add to a resume design is different: it is saved with that resume so it can appear on the resume and in its downloads.
• Candidate data (Screen & Interview) - if you use the recruiting workspace, the candidate resumes you upload or paste, candidate names and contact details, fit scores and AI analysis, your notes, shared interviewer feedback, and interview schedules. See Section 5 for how this data is handled.
• Team information - team names, the email addresses you invite, member roles, and a shared activity log of workspace actions.
• Support requests and reports - anything you send us by email or in-app feedback, and reports of inaccurate AI output (which may include an excerpt of the reported output).

1.2 Information collected automatically

• Device and usage data - app version and device operating system (attached to feedback you send), and records of key account events such as a resume being created or exported. The Android and iPhone apps do not collect advertising identifiers, do not use advertising SDKs and do not use third-party analytics; the website uses HeyCatch analytics and the Meta Pixel, described below.
• Security and abuse-prevention logs - when you use a generation feature, we record the action together with your IP address, device user-agent string, and processing metadata (such as token counts and processing cost). We use these records to enforce rate limits, prevent abuse and fraud, and keep the service reliable.
• Push notification tokens - if you allow notifications, a device push token (Firebase Cloud Messaging) so we can tell you when a background task finishes or when we send you a message.
• Purchase information - in the Android app, Google Play sends us a receipt token confirming the product you bought and whether it is valid; in the iPhone app, Apple confirms the purchase to us through its App Store Server API; on the Resume Guide website (resumeguide.ai), Stripe takes the payment and confirms it to us. For website purchases we give Stripe your account email address (so it can fill in the checkout and send your receipt) and your account ID. We do not see or store your payment card details.
• Creator referrals (website only) - if you arrive at resumeguide.ai from a link shared by one of our creator partners, the website sets a cookie from our partner Trybe that holds a random visitor ID, and for the next 7 days records the pages you visit on resumeguide.ai, so the creator can be credited. If you then buy on the website within 7 days, we tell Trybe the order number, amount, product and that visitor ID. We do not give Trybe your name or email address. Visitors who did not arrive from a creator link do not load Trybe at all. Purchases in the Android and iPhone apps are never shared with Trybe.
• Website analytics (website only) - to learn which pages and buttons help people, the website uses HeyCatch analytics. On public pages (such as the home page, guides, templates and pricing) it records the pages you visit and the links and buttons you click, including the words on them. On pages that show your own content (your resumes and the editor, the free Resume Checker and Builder, the recruiting workspace, your account, dashboard, sign-in and checkout) it records only the visit itself (which page, how long it stayed open and how far it was scrolled), never a click, and without the part of the page address that identifies a document. It also records when a new account is made on the website and how (email, Google or Apple), the website you came from, your browser and device type, screen size, language and time zone, an approximate location (such as country and city) worked out from your IP address, and random IDs kept in your browser's storage (no cookies) so that visits can be counted. If you are signed in, it receives your account ID, never your name or email address, and any email address in what it records is removed before it is sent. It never records what you type into fields, text you copy, or recordings of your screen. Visitors in Europe (judged by the device's time zone) are asked first: nothing is recorded, and nothing but their answer is stored in their browser, until they choose Allow. Anyone can change their answer at any time with “Analytics choices”: a link at the bottom of the home page and the website's other pages with a footer, and in your account menu when you are signed in (or go to resumeguide.ai/#analytics-choices), and HeyCatch stays off when your browser sends Do Not Track or Global Privacy Control. The Android and iPhone apps do not use HeyCatch.
• Ad measurement with the Meta Pixel (website only) - we advertise Resume Guide on Facebook and Instagram. To learn which of our ads bring visitors and sales, the website loads the Meta Pixel on public pages only (such as the home page, guides, templates and pricing), never on pages that show your own content. It tells Meta which public page you visited and sets Meta's cookies (_fbp, and _fbc if you came from one of our ads) in your browser. If you then buy on the website, our server tells Meta the order number, amount and product, with those two cookie values and your browser's user agent, so Meta can match the sale to the ad. We do not give Meta your name, email address or IP address, and Meta's automatic collection of buttons and page details is switched off. The Meta Pixel follows the same choice as analytics: visitors in Europe are asked first, “Analytics choices” turns it on or off at any time, and it stays off when your browser sends Do Not Track or Global Privacy Control. Meta uses this information under its own Privacy Policy. The Android and iPhone apps do not use the Meta Pixel.
• Diagnostics - crash reports via Firebase Crashlytics and, if enabled, error reports via a monitoring service configured not to include personal data.

2. How we use your information

• To create, store, and improve your resumes, cover letters, interview practice sessions, Career Toolkit documents, and Screen & Interview evaluations.
• To generate AI-tailored content (resume drafts and rewrites, match scores, cover letters, interview questions and feedback, candidate screening, and interview guides) using the AI service described in Section 3.
• To run team workspaces: showing shared jobs, candidates, interviews, credits, and activity to the teammates you invite, according to their roles.
• To verify purchases and grant the credits you bought through Google Play, the App Store, or the Resume Guide website.
• To send transactional email (verification links, password resets, team invitations) and optional push notifications.
• To diagnose problems, enforce our Terms, prevent abuse, and improve the App.
• To respond to support requests and review reports of inaccurate AI output.

3. AI processing

The App offers AI-powered features such as resume creation and optimization, Smart Modify, cover letter generation, Mock Interview questions and grading, Career Toolkit documents, candidate screening, and interview-guide generation. When you use these features, the relevant text (for example your resume, a job description, a candidate resume, or your interview answer) is sent to our AI provider, Anthropic, for processing, and the generated text is returned to the App.

We use Anthropic under its commercial API terms. As of the effective date, API inputs and outputs are not used to train Anthropic’s public models. Content is only sent when you use one of these features, including the suggestions shown when you open a resume and, in Screen & Interview, reading a candidate’s name from an uploaded resume when it can’t be found otherwise. Please do not paste sensitive information (such as government identifiers or financial account numbers) into resume, job description, or candidate fields; the App does not need it and we do not want it.

The App’s screening prompts instruct the AI not to extract or score protected-class attributes (such as age, gender, race, religion, disability, or nationality). AI output can still be wrong or incomplete. Every generated document should be reviewed by a human, and you can flag bad output with the “Report inaccurate Resume Guide output” button.

4. Where data is stored and who can see it

Your data is stored with established cloud providers. Account, billing, and credit records, and some document data (such as interview practice questions and answers, job posting text, candidate names, contact details and notes, free Enhance reports, and temporary copies of text while it is being processed), live in a managed PostgreSQL database used by our application server (hosted on Render, a US-based cloud platform). Most document content and uploaded files (for example resume text and candidate resume files) are stored in Cloudflare R2, an S3-compatible object storage service provided by Cloudflare, Inc. All traffic between the App, our servers, and our storage uses TLS encryption in transit, and access to stored data is strictly limited.

Only people on our team who need access for support, billing, or debugging can read account or resume data, and only to perform their duties.

5. Candidate data in Screen & Interview

The Screen & Interview workspace lets recruiters upload and evaluate other people’s resumes. If you use it:

• You are responsible for the candidate data you upload. Only upload resumes you have permission to process, and honor candidates’ requests about their data. We process candidate data on your behalf to provide the features you use.
• Candidate data stays in your workspace. It is visible to you and, if the workspace belongs to a team, to the teammates you have invited, according to their roles and access grants. We do not use candidate data for any other purpose, and we never contact candidates.
• Deletion. You can delete candidates at any time; deleted candidates sit in the Recycle Bin for 30 days (where they can be restored or purged immediately) and are then permanently removed. Deleting your account removes all candidate data you own.
• Candidates: if your resume was uploaded to Resume Guide by a recruiter and you want it removed, ask the recruiter to delete it, or contact us at support@resumeguide.ai and we will help.

6. Sub-processors and third parties

We share the minimum information necessary with the following service providers, who are bound to handle it only as we instruct:

• Google Play Billing - to verify purchases and subscriptions made in the Android app and grant credits.
• Apple - Sign in with Apple, if you choose it, and the App Store, to verify purchases and subscriptions made in the iPhone app and grant credits.
• Stripe - to take payments on the Resume Guide website: your account email address and account ID, what you bought, and the payment confirmation (and your billing address when sales tax applies). Your card details go to Stripe only.
• Trybe - to credit our creator partners for website sales they refer, as described in Section 1.2: a random visitor ID, the pages visited on resumeguide.ai in the 7 days after the creator link, and the order number, amount and product of a website purchase made within 7 days. No name or email address.
• HeyCatch - website analytics, as described in Section 1.2: the pages visited, clicks on public pages, browser and device details, approximate location, random browser IDs, your account ID if you are signed in, and when a new account is made. No name or email address. HeyCatch stores this data with PostHog in the United States and uses an AI service to summarize it for us.
• Meta (Facebook and Instagram) - to measure our own ads, as described in Section 1.2: the public pages visited, Meta's cookies (_fbp and _fbc), and for a website purchase the order number, amount, product and your browser's user agent. No name, email address or IP address from us.
• Google Firebase - authentication (sign-in), push notifications (Cloud Messaging), crash reporting (Crashlytics), and app and browser verification (App Check, which uses Google reCAPTCHA on the website).
• Anthropic - AI content generation as described in Section 3.
• Render and our managed database provider - to host the application server and the account database.
• Cloudflare - hosts and delivers the website, provides the CAPTCHA shown to free accounts, and provides Cloudflare R2 object storage, where most document content and uploaded files are stored.
• Google Fonts - some website pages load their fonts from Google, which receives your IP address and browser details when the page loads.
• jsDelivr - when the free Resume Checker on the website reads a scanned PDF, it downloads its text-recognition files from this public network. Your resume stays in your browser.
• Resend - to send transactional email such as verification links, password resets, and team invitations.
• Sentry (if enabled) - error monitoring, configured not to include personal data in reports.

We do not sell, rent, or trade your personal information. We may disclose information if required by law, or where necessary to protect our rights, our users, or the public.

7. How long we keep data

• Active accounts. We keep your documents and account data for as long as your account is active.
• Deleted items. Resumes, cover letters, job descriptions, match results, Career Toolkit drafts, and Screen & Interview jobs and candidates you delete go to the Recycle Bin for 30 days, where you can restore them or delete them permanently. After 30 days they are permanently removed automatically. Screen & Interview interviews you delete are permanently removed after 30 days too.
• Housekeeping records. The team activity log keeps 30 days of entries. Finished background-job records are cleaned up after about 30 days.
• Credits. Pack credits bought in the Android app or on the website expire 4 months after purchase; credits bought in the iPhone app do not expire. Purchase and credit records are kept while your account is active.
• Website analytics. HeyCatch keeps what the website records (Section 1.2) under its own retention rules. It is linked to random browser IDs and, if you were signed in, your account ID, never to your name or email address. Email us if you want it deleted, and we will ask HeyCatch to delete it.
• Account deletion. When you delete your account (see Section 8), your data is deleted immediately and permanently: profile, documents, candidate data, uploads, favorites, purchase records, credit history, and security logs. If our file storage can’t be reached at that moment, your stored files are removed by our daily cleanup once it is back. If you signed in with Apple, we also ask Apple to end Resume Guide’s access to your Apple Account. A subscription bought on the website is cancelled; one bought in the Android or iPhone app must be cancelled in that store. Some things stay: credits you bought for or moved into a team wallet stay with that team, feedback you left on a teammate’s candidate stays in that team’s records, and messages you sent to our support inbox stay there. We keep only an anonymized deletion record (a one-way hash of the account ID, the email domain, the sign-in method, who asked for the deletion, and counts of deleted resumes and cover letters, with no name or email address) to prove the deletion happened, and a one-way code for each one-time Google Play or App Store purchase on the account, with no link to you or the account, so the same purchase can’t be credited again to a new account. Google Play, Apple, and Stripe each keep their own record of your purchases under their own policies. Residual copies in our infrastructure providers’ rolling backups age out on a schedule measured in days, typically within 30 days.

8. Your rights and choices

• Access and correct - view and edit your documents and account details inside the App at any time.
• Delete items - delete any resume, cover letter, job description, match result, or candidate in the App (Recycle Bin, 30 days, with restore).
• Delete your account - in the Android or iPhone app, go to More → Account → Delete my account; on the website, open your Account page and choose Delete my account. You will re-enter your password (or sign in with Google or Apple again) to confirm, and deletion is immediate and permanent. You can also email support@resumeguide.ai with the subject “Delete my account.”
• Export - download your resumes and reports as PDF or Word files from the App. For a copy of other data we hold about you, email us.
• Notifications - you can decline or disable notifications in your device settings; the App works without them.
• Website analytics - use “Analytics choices” (at the bottom of the website's pages that have a footer, and in your account menu when you are signed in) to allow or stop HeyCatch analytics and the Meta Pixel in your browser at any time. Turning on Do Not Track or Global Privacy Control in your browser keeps them off.
• Withdraw consent - stop using the App or delete your account at any time.

If you live in California, the EU, the UK, or another region with data protection laws (including the CCPA and GDPR), you also have the right to request a copy of your data and to lodge a complaint with your local data protection authority.

9. Children’s privacy

The App is not intended for children under 13, or under the minimum age of digital consent in your country if that is higher (for example 16 in parts of the European Union). We do not knowingly collect personal information from children below that age. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Security

We use HTTPS/TLS for data in transit, restricted access for our team, and standard server hardening practices. We also apply rate limits, email verification, and a CAPTCHA for free accounts to protect the service from abuse. No method of transmission over the Internet is 100% secure, but we work to protect your data using reasonable safeguards.

11. International users

The App is operated from the United States. If you access the App from outside the United States, you understand that your information is transferred to, processed, and stored in the United States and in other locations where our service providers operate.

12. Changes to this policy

We may update this Policy from time to time. When we do, we will update the “Effective” date at the top of this page and, for material changes, notify you inside the App or by email.

13. Contact

Questions, requests, or concerns about this Policy can be sent to:
support@resumeguide.ai