Privacy Policy

How the c-v.ai iPhone app and this website handle your information.

• Your CVs, job ads and exported PDFs are stored on your iPhone. Editing, designs, local import and PDF export never send CV content anywhere.
• AI features only send content after you allow it, and we don’t keep your CV content once a request is done.
• Signing in with Apple stores a one-way hash of your Apple identifier, never your name or email.
• No advertising, no tracking across apps or websites, no analytics in the app, and we never sell personal data.

Who we are

c-v.ai is provided by WAYF DIGITAL SP. Z O.O., ul. Złota 75A/7, 00-819 Warsaw, Poland (KRS 0000861621, NIP PL7831824606, REGON 387099056). We are the data controller for the personal data described here. For privacy questions and deletion requests, email support@c-v.ai or hello@wayfdigital.com.

What stays on your iPhone

The CVs you create or import, your answers, drafts, job ads, saved job versions, exported PDFs and your settings are stored locally in the app. Editing, choosing a design, importing without AI and exporting PDFs all work without sending your CV content anywhere. Your data may be included in your iPhone or iCloud backups, according to your Apple settings. Deleting a CV in the app, or deleting the app, removes it from your device.

When you use an AI feature

AI import, AI review and AI tailoring are optional. Before anything is sent, the app shows what will be shared and asks you to allow it. Depending on the feature, we receive:

• AI import: the full text extracted from the CV you’re importing, including any contact details it contains. Photos and the original file are not sent.
• AI review and tailoring: the text of your CV and any answers you confirm. Dedicated contact fields and your photo are left out, but personal details you have written into the text itself may be included. For tailoring, the job ad you paste is sent too.
• Include PDF layout (on by default in AI review, and you can turn it off): images of your rendered CV pages, which can show your contact details and photo.
• Suggest with AI: the text and context of the field you’re writing in, to suggest wording for it.
• Voice dictation: up to 90 seconds of audio, turned into text by our speech-to-text provider, ElevenLabs. We don’t keep the audio or the text.

This content goes to our backend on Cloudflare Workers, which sends it to Anthropic’s Claude API to generate suggestions and returns them to your iPhone. We don’t keep your CV content, answers or job ads after the request completes. Anthropic processes them on our behalf under its commercial API terms: it doesn’t train its models on API data and keeps it only for a limited period for trust and safety. See Anthropic’s privacy policy. Suggestions are only applied to your CV when you approve them.

Your account (Sign in with Apple)

AI features require Sign in with Apple. We store:

• a one-way hash of the user identifier Apple gives us, never your name or email address;
• session tokens, stored only as hashes, so the app can stay signed in;
• AI usage counters and costs, so fair‑use limits can be applied;
• App Store purchase and transaction identifiers, so we can provide and restore what you bought;
• when Apple provides it at sign-in, a token used to revoke your Sign in with Apple when you delete your account.

These records contain no CV content.

Purchases

Payments for Plus and single tailored CVs are handled by Apple through the App Store. We never see your payment card details. To unlock what you bought, we verify each transaction with Apple and record the product, its dates and, for a single-CV purchase, the identifier of that CV, linked to your account.

Place suggestions

When you type a town or city for your CV, the text you type is sent to Apple’s map service to suggest place names. The app doesn’t access your device’s location.

This website

We count visits to c-v.ai with PostHog, on servers in the EU, to see which pages are read and which links are used, such as the App Store link. This records the page, the link clicked, the referring site, your country, and your browser and device type. It sets no cookies and stores nothing on your device. To count unique visitors, PostHog turns your IP address and browser details into a one-way code that changes every day; the IP address itself is discarded, and visits aren’t linked to you or to other websites. The data goes through our own domain.

Cloudflare, which hosts the site, processes technical request data such as IP addresses to deliver the pages and protect against abuse.

Deleting your data

In the app, go to Preferences → Account → Delete account. This deletes your account record, sessions and usage history on our servers and revokes Sign in with Apple. Your CVs stay on your iPhone until you delete them or the app. You can also ask us to delete your data by email.

To prevent abuse of free and paid allowances, we keep two minimal records after deletion that can’t identify you directly:

• a one-way hash of your Apple user identifier, recording only that the free AI review was already used;
• the AI usage recorded against each App Store transaction identifier, so restoring a purchase on a new account doesn’t reset its fair‑use allowance.

Purchase records are also kept, without an owner, so you can restore your purchases if you sign in again.

Legal bases

We process personal data to provide the service and the purchases you ask for (performance of a contract), and to prevent abuse and apply fair‑use limits (our legitimate interests). Website visit statistics are based on our legitimate interest in understanding how the site is used. The records kept after account deletion are based on our legitimate interest in preventing abuse of free and paid allowances. Where the law requires us to keep records, we do so to meet those legal obligations.

Service providers and transfers

We use Cloudflare (hosting and our backend), Anthropic (AI processing), ElevenLabs (speech-to-text), PostHog (website statistics) and Apple (Sign in with Apple, App Store purchases and place suggestions). They may process data outside the European Economic Area, including in the United States. Where they do, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework, as applicable.

How long we keep data

• CV content sent to AI features: not kept after the request completes.
• Voice dictation audio and text: not kept.
• Account record, sessions and usage history: while your account exists, then deleted when you delete your account.
• After deletion: the hashed Apple identifier (free review used), usage per App Store transaction, and ownerless purchase records, kept to prevent abuse and to let you restore purchases.
• Website visit statistics: up to 12 months.
• Support emails: as long as needed to resolve your request.

Your rights

Under the GDPR you can ask us for access to your personal data, and to correct, delete, restrict or transfer it, or object to how we use it. Because your CVs stay on your device, you can view, edit and delete them directly in the app. For anything we hold, email support@c-v.ai and we’ll respond within one month. You can also complain to the Polish supervisory authority, Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw, or to the authority where you live.

Children

c-v.ai is not directed at children under 16, and we don’t knowingly collect their personal data.

Changes

If we change this policy, we’ll update this page and its effective date. If a change materially affects how your data is used, we’ll tell you in the app.

Our other apps: Universe DMs, a horoscope calculated from your birth chart · Woof Watch, a dog barking monitor · Vocabcord, new words while your phone charges · Vocalcord, charging sounds for iPhone · Hikma, a Quran app with prayer times and reflection

Effective date: 8 November 2026