This Privacy Policy applies to the Resume Maker mobile application (the “Application”), provided by Helvorxy (“we”, “us”, or “our”). It explains what data is processed, why it is processed, who may receive it, how long it is retained, and the choices available to you.
The Application follows an offline-first approach. Resume, cover-letter, photo, and signature data normally remain on your device. Online processing occurs only for the limited services described below, especially AI tools, credit and purchase management, diagnostics, advertising, and support.
1. Data We Process
A. Local document data
Resume and cover-letter content, contact details, photos, signatures, and exported backups are stored on your device. We do not continuously synchronize these documents to a cloud profile. You control editing, export, backup, and local deletion.
B. Anonymous account, credits, and purchases
Online AI and purchase-related features may use a pseudonymous or anonymous account identifier. We process that identifier together with entitlement status, product and transaction identifiers, credit balance and ledger entries, AI feature type, request status, timestamps, model and token-usage metadata, error codes, and anti-abuse/rate-limit information. We do not receive your credit-card or bank-account details; payments are handled by Apple or Google.
C. AI content you choose to submit
When you start an AI feature after giving explicit permission, the content required for that feature is transmitted for cloud processing. Depending on the tool, this can include:
- resume or cover-letter text and relevant editable fields;
- a job description supplied for ATS analysis;
- your topic, keywords, instructions, and existing text for writing assistance;
- visible resume content and document labels for translation; or
- a PDF or PNG you select for AI import.
Do not submit unnecessary sensitive data or another person’s personal data without authority.
D. Technical, analytics, advertising, and support data
The Application may process IP address, device/app version, language, coarse technical region, advertising identifier where permitted, screen and interaction events, crash diagnostics, performance logs, purchase receipt tokens, and support messages you choose to send.
The Application does not collect precise real-time GPS location.
2. Purposes and Legal Bases
We process data to provide the requested AI result, manage credits and purchases, restore entitlements, prevent fraud and abuse, secure and troubleshoot the service, measure performance, show advertising where applicable, comply with legal obligations, and answer support requests.
Depending on your jurisdiction, processing is based on your explicit consent, performance of a contract, compliance with legal obligations, and our legitimate interests in security, fraud prevention, service reliability, and product improvement. Advertising or tracking consent is requested separately where required.
3. AI Providers and Explicit Permission
Before the first AI action that can proceed with available credits, the Application explains the purpose, the categories of content to be shared, and the recipient categories, and asks for explicit permission. If you reject, the AI action does not start, no credit is used, and the same permission request appears the next time you try an AI feature. Acceptance is stored on your device. You can revoke it from the checkbox in Profile; the Application will ask again before a later AI action.
AI processing may be performed by one selected provider, including:
The active provider may change by feature, availability, quality, safety, or operational needs. The relevant content is also routed through our contracted cloud hosting, database, authentication, storage, and serverless-processing infrastructure. That infrastructure provider is not used to advertise to you from AI content.
We use business/API services and do not intentionally opt in to using your AI content for general model training. Providers may retain prompts, responses, or safety metadata for limited abuse-monitoring, security, legal-compliance, or service-operation periods under their commercial/API terms. AI output may be inaccurate, incomplete, or similar to content generated for others; review it before use.
4. Other Service Providers
We use providers in the following categories:
- Google AdMob, Google Analytics for Firebase, and Firebase Crashlytics: advertising, analytics, performance, and crash diagnostics. See Google’s privacy information.
- RevenueCat: purchase validation, subscription status, entitlement restoration, and credit linkage. See RevenueCat Privacy.
- Apple App Store and Google Play: payment and subscription processing under their own privacy terms.
- Cloud infrastructure processors: authentication, database, encrypted transport, temporary AI results, short-lived file storage, server functions, security logging, and account deletion.
- Email and WhatsApp/Meta, if you choose them: support communications under the selected provider’s terms.
We require service providers acting on our behalf to process data only for documented purposes and to apply protections appropriate to the data and applicable law.
5. Retention and Deletion
- Local documents: remain until you delete them, replace app data, clear device data, or uninstall the Application. Device/OS backups may retain copies under your backup settings.
- AI import source file: deleted after processing succeeds or fails; cleanup safeguards target any remaining terminal source file within approximately 24 hours.
- AI import structured result: normally available for up to 48 hours.
- Transient ATS and translation results: normally retained for up to 24 hours for reliable delivery and retry recovery.
- AI request and credit metadata: content is not stored in the request ledger, but request status, feature, model, token/credit use, timestamps, and bounded error diagnostics may be retained for accounting, fraud prevention, security, troubleshooting, and legal obligations.
- Purchase and entitlement records: retained as needed to restore purchases, preserve non-expiring purchased credits, handle refunds, prevent fraud, and meet accounting/legal obligations.
- Analytics, advertising, and crash data: retained according to provider settings and policies.
- Support records: retained only as reasonably necessary to resolve the request, prevent abuse, or meet legal obligations.
You can delete the current anonymous online account from the Profile screen. This removes the account and directly associated online AI data and pending uploaded files. Pseudonymous purchase, entitlement, credit, refund, fraud-prevention, or accounting records may be retained where necessary to restore purchases or comply with law. Local documents and App Store subscriptions are not deleted by online account deletion.
6. International Transfers
Our service providers may process data in Türkiye, the European Economic Area, the United States, and other countries where they or their subprocessors operate. We use the transfer mechanism required by applicable law, which may include an adequacy decision, binding corporate rules, approved standard contractual clauses, or another legally permitted safeguard. Where a transfer relies on your explicit consent, that consent is requested separately and can be withdrawn for future processing.
7. Security
We use encrypted network transport, access controls, short-lived signed file access, input and file-size limits, purpose-limited logging, deletion jobs, and account-level authorization. No digital system is completely secure. Protect your device, review documents before submission, and avoid unnecessary sensitive information.
8. Children
The Application is not directed to children under 13. AI provider terms or local law may impose a higher minimum age. A parent or guardian who believes a child submitted personal data may contact us to request review and deletion.
9. Your Rights and Choices
Subject to applicable law, you may request access, correction, deletion, restriction, objection, information about recipients, or withdrawal of consent. You may also:
- edit or delete local content in the Application;
- manage AI data-sharing permission with the checkbox in Profile;
- manage advertising privacy choices in Settings where available;
- delete the anonymous online account from Profile; and
- manage or cancel subscriptions through Apple or Google.
Withdrawing consent does not affect processing already completed before withdrawal. It prevents future consent-based AI sharing until you consent again.
10. Changes and Contact
We may update this Policy when features, providers, or legal requirements change. Material changes will be reflected by updating the date below and, where required, by requesting renewed permission.
For privacy questions or rights requests, contact k12181159@gmail.com. We may need limited information to verify and process a request.
Last updated: August 15, 2026.