Privacy Policy

ResumateAI · Last updated 28 August 2026

ResumateAI is a résumé and job-application app published by Loomchip. This policy explains what the app stores, what leaves your device, and what we can and cannot see.

The short version. Your career history — every role, achievement, skill, résumé and job you save — is stored on your device. We do not upload it, we do not have a copy of it, and we cannot read it. When you use an AI feature, only the specific text needed for that request is sent to our server, with your name, email, phone, location and profile links replaced by placeholders before it leaves your device.

1. What is stored on your device

The app keeps a local database on your phone containing your profile details, work experience and achievements, projects, skills, education, certifications, languages, awards, volunteering, saved job postings, résumés, cover letters, interview practice and application tracking.

This database is not synchronised to any server. Uninstalling the app, or using the in-app sign-out, deletes it from the device.

2. What leaves your device

What	Where it goes	Why
Account identifier, and your email address if you sign in with email	Supabase (authentication)	To create and restore your account
The text needed for one AI request, with personal details replaced by placeholders	Our AI gateway, and from there to Anthropic	To generate the suggestion, tailored résumé, cover letter or interview question you asked for
Credit usage counts and request identifiers	Supabase	To meter your monthly AI allowance and prevent abuse
Crash diagnostics	Firebase Crashlytics	To find and fix crashes. Can be switched off in the app
A push notification token, if you enable notifications	Firebase Cloud Messaging	To deliver notifications you asked for
App version and platform	Firebase Remote Config	To tell the app which features and minimum version apply

3. How AI requests protect your identity

Before any text is sent for an AI request, the app replaces known personal values with placeholders on your device:

your name becomes {{NAME}}
your email becomes {{EMAIL}}
your phone number becomes {{PHONE}}
your location becomes {{LOCATION}}
your profile links become {{LINK_1}}, {{LINK_2}} and so on

A second pass catches email addresses, phone numbers and links that appear in free text but were not stored in your profile. The table mapping placeholders back to your real details never leaves your device — the substitution back into readable text happens locally, after the response returns.

Cover letter contact headers are produced on your device and are never sent to the AI model.

Because of this, AI results cached on our server are stored in placeholder form. A cached result contains {{NAME}}, not your name.

This is a strong protection but not an absolute one. If you type identifying details into a free-text field in a form that does not match those patterns — a postal address, for example, or an employer that identifies you — that text may be included in the request. Postal addresses are deliberately not pattern-matched, because doing so unreliably would give false confidence.

4. What we store on our servers

Our servers hold only what is needed to run your account and the AI allowance:

your account record and sign-in identity
your AI credit balance and usage counts
cached AI results in placeholder form, kept for up to 30 days
rate-limiting records
your push notification token, if notifications are enabled

There is no copy of your career history, résumés or job applications on our servers. The app has no server-side storage for them.

5. Sign in with Apple

If you sign in with Apple you may choose to hide your email address. If you do, Apple gives us a relay address instead of your real one, and we neither receive nor store your actual email address. We request only your name and email address from Apple.

6. Advertising and tracking

ResumateAI contains no advertising, no advertising identifier and no analytics or attribution SDK. We do not track you across other apps or websites, and we do not sell or share personal information for advertising.

7. Using the app without an account

You can use ResumateAI as a guest. A guest account is an anonymous identifier with no email address attached; your work is stored on the device exactly as it is for a signed-in user. Signing in later keeps the work already on the device.

8. Sample data

The app can load a fictional example career so you can explore the features before entering your own. This data is generated on your device, describes a person who does not exist, and is yours to edit or delete.

9. Your choices

Export. Profile → Export My Data produces a copy of what the app holds about you.
Delete. Signing out erases the local database from the device. To delete your account and the server-side records listed in section 4, write to the address below and we will action it.
Crash reporting. Can be switched off in Profile.
Notifications. Off until you enable them, and can be revoked in system settings at any time.

10. Children

ResumateAI is not directed at children under 13, and we do not knowingly collect personal information from them.

11. Changes

If this policy changes materially we will update the date at the top of this page and, where the change affects how your data is handled, say so in the app.

12. Contact

Questions, data requests and deletion requests: support@loomchip.com