Legal

Privacy Policy

Last updated: July 2026

This policy explains what information CVCraft AI ("the app", "we", "us") collects, how it's used, and how you can control or delete it. CVCraft AI is developed by Flow Kubernetes.

Information we collect

Email address — used only to sign you in, via a one-time code sent to your inbox. We don't use passwords.
CV content you enter — your name, contact details, work history, education, skills, certifications, and languages, exactly as you type them into the app, so we can save your drafts and generate your documents.
AI feature usage — a daily count of how many AI requests you've made, used only to apply a fair-use limit.
Purchase status — whether you've unlocked a download. Payment details (card numbers etc.) are handled entirely by Apple/Google and RevenueCat; we never see or store them.

How we use it

Solely to provide the app's features: saving and editing your CVs, generating AI-assisted text (summaries, bullet points, cover letters, job-match scoring, interview prep, ATS scoring), exporting your CV as a PDF or Word document, and unlocking paid downloads.

We do not sell your data, and we do not use your CV content for advertising.

Third-party services we use

Parts of the app are powered by these providers, each of which processes a limited slice of your data solely to deliver their part of the service:

Supabase — hosts our database and handles account authentication.

Google Gemini API — when you use an AI feature, the relevant CV text (e.g. your job title, summary, or a pasted job description) is sent to Google's Gemini API to generate a response. It is not used by Google to train models on our plan.

Resend — delivers the sign-in code emails.

RevenueCat, Apple, and Google — process in-app purchases on their respective platforms.

Data retention & deletion

Your CVs are kept until you delete them or delete your account. You can delete an individual CV, or your entire account and all associated data, at any time from within the app (Dashboard → "Delete account"). Account deletion is permanent and cannot be undone.

Security

Data is transmitted over encrypted HTTPS connections and stored in Supabase's secured infrastructure.

Children's privacy

CVCraft AI is not directed at children, and we do not knowingly collect information from anyone under 13.

Changes to this policy

If this policy changes, we'll update the date at the top of this page.

Contact

Questions about this policy or your data? Email kamil21063@gmail.com.

← Back to CVCraft AI