Privacy Policy
ResumateAI · Last updated 28 August 2026
ResumateAI is a résumé and job-application app published by Loomchip. This policy explains what the app stores, what leaves your device, and what we can and cannot see.
1. What is stored on your device
The app keeps a local database on your phone containing your profile details, work experience and achievements, projects, skills, education, certifications, languages, awards, volunteering, saved job postings, résumés, cover letters, interview practice and application tracking.
This database is not synchronised to any server. Uninstalling the app, or using the in-app sign-out, deletes it from the device.
2. What leaves your device
| What | Where it goes | Why |
|---|---|---|
| Account identifier, and your email address if you sign in with email | Supabase (authentication) | To create and restore your account |
| The text needed for one AI request, with personal details replaced by placeholders | Our AI gateway, and from there to Anthropic | To generate the suggestion, tailored résumé, cover letter or interview question you asked for |
| Credit usage counts and request identifiers | Supabase | To meter your monthly AI allowance and prevent abuse |
| Crash diagnostics | Firebase Crashlytics | To find and fix crashes. Can be switched off in the app |
| A push notification token, if you enable notifications | Firebase Cloud Messaging | To deliver notifications you asked for |
| App version and platform | Firebase Remote Config | To tell the app which features and minimum version apply |
3. How AI requests protect your identity
Before any text is sent for an AI request, the app replaces known personal values with placeholders on your device:
- your name becomes
{{NAME}} - your email becomes
{{EMAIL}} - your phone number becomes
{{PHONE}} - your location becomes
{{LOCATION}} - your profile links become
{{LINK_1}},{{LINK_2}}and so on
A second pass catches email addresses, phone numbers and links that appear in free text but were not stored in your profile. The table mapping placeholders back to your real details never leaves your device — the substitution back into readable text happens locally, after the response returns.
Cover letter contact headers are produced on your device and are never sent to the AI model.
Because of this, AI results cached on our server are stored in placeholder
form. A cached result contains {{NAME}}, not your name.
This is a strong protection but not an absolute one. If you type identifying details into a free-text field in a form that does not match those patterns — a postal address, for example, or an employer that identifies you — that text may be included in the request. Postal addresses are deliberately not pattern-matched, because doing so unreliably would give false confidence.
4. What we store on our servers
Our servers hold only what is needed to run your account and the AI allowance:
- your account record and sign-in identity
- your AI credit balance and usage counts
- cached AI results in placeholder form, kept for up to 30 days
- rate-limiting records
- your push notification token, if notifications are enabled
There is no copy of your career history, résumés or job applications on our servers. The app has no server-side storage for them.
5. Sign in with Apple
If you sign in with Apple you may choose to hide your email address. If you do, Apple gives us a relay address instead of your real one, and we neither receive nor store your actual email address. We request only your name and email address from Apple.
6. Advertising and tracking
ResumateAI contains no advertising, no advertising identifier and no analytics or attribution SDK. We do not track you across other apps or websites, and we do not sell or share personal information for advertising.
7. Using the app without an account
You can use ResumateAI as a guest. A guest account is an anonymous identifier with no email address attached; your work is stored on the device exactly as it is for a signed-in user. Signing in later keeps the work already on the device.
8. Sample data
The app can load a fictional example career so you can explore the features before entering your own. This data is generated on your device, describes a person who does not exist, and is yours to edit or delete.
9. Your choices
- Export. Profile → Export My Data produces a copy of what the app holds about you.
- Delete. Signing out erases the local database from the device. To delete your account and the server-side records listed in section 4, write to the address below and we will action it.
- Crash reporting. Can be switched off in Profile.
- Notifications. Off until you enable them, and can be revoked in system settings at any time.
10. Children
ResumateAI is not directed at children under 13, and we do not knowingly collect personal information from them.
11. Changes
If this policy changes materially we will update the date at the top of this page and, where the change affects how your data is handled, say so in the app.
12. Contact
Questions, data requests and deletion requests: support@loomchip.com
13. This website
Sections 1 to 12 describe the ResumateAI app. This section covers resumateai.app, the website you are reading, which is separate from it.
The website uses Google Analytics to count visits and see which pages are read. Nothing is measured until you agree. No analytics script is requested and no analytics cookie is set unless you choose "Agree" on the banner; choosing "No thanks" loads nothing at all. Your choice is remembered in your browser and you can change it from "Cookie settings" in the footer.
If you do agree, Google Analytics sets cookies in your browser and receives your truncated IP address, the pages you view on this site, and general device and browser information. It does not receive anything from the app, because the app and the website share no data.
Section 6 remains true of the app: the app itself contains no analytics SDK, no advertising and no advertising identifier. Analytics runs on this website only.