Privacy Policy
Last updated 10 September 2026 — the developer is now based in the United Kingdom
CVTonic is a CV builder for iPhone, made by Attila Isci. This page explains what the app collects, where it goes, and how to get rid of it. It is written to be read, not to be survived.
The short version
- Your CV is yours. If you are not signed in, it never leaves your phone.
- Signing in syncs it so you do not lose it when you change phone.
- We do not sell your data, we do not show ads, and we do not track you across other apps or websites.
- We do not train any AI model on your CV.
Who is responsible for this
The data controller is Attila Isci, an individual developer based in the United Kingdom, and the address for anything in this policy is hello@cvtonic.app. There is no company, no data protection officer and no third party who decides what happens to your CV. If you write, he answers.
What the app collects
Your CV content
Everything you type into the app: your name, contact details, work history, education, skills, links, projects and anything you add to a custom section. Job descriptions you paste in to match a CV against a role are part of this too, and so is a cover letter and everything you answer to set one up: the company, the role, the hiring manager's name if you know it, and why you want the job. All of it is your content, and you decide whether it stays on the phone or is saved to an account.
A photo, if you add one
Two of the templates have a place for a photo. If you choose one, the app asks for access to your photo library, and only when you tap that field. The picture you pick is cropped square, made small, and stored inside the CV itself, which means it goes wherever that CV goes: to your account if you are signed in, and into the PDF when you export. Nothing else in your library is read, and there is no face recognition of any kind. Most of the templates have nowhere to put a photo, and no CV needs one. Remove it and it is gone with the next save.
Account details
If you create an account, we store your email address and which method you used to sign in (Apple, Google or email). Sign in with Apple can hide your real address behind a relay address, and that works here.
Subscription status
Whether you have an active CVTonic PRO subscription. Apple processes the payment. We never see your card, and we never receive one.
Diagnostics
Crash reports, and anonymous product events such as which screen you opened, which template you picked, and your CV score as a number. These carry no words from your CV.
Where it goes
| Service | What it does | What it receives |
|---|---|---|
| Supabase | Accounts, CV storage, sync | Your email address and your CV content, once you have an account |
| OpenAI | AI review, bullet rewriting, summary writing, cover letters (PRO) | A stripped copy of your CV, only at the moment you ask. A cover letter also sends the job details you filled in |
| Gotenberg on Railway | Renders the PDF for the PRO templates | The finished page as HTML. It is converted and discarded, not stored |
| RevenueCat | Keeps track of whether the subscription is active | Your account identifier and the purchase state |
| Sentry | Crash reports | The crash, and your account identifier. Personal data collection is switched off |
| PostHog | Product analytics | Event names and numbers. No CV content |
| Apple | Payments, Sign in with Apple | Handled entirely by Apple under Apple's own privacy policy |
| Sign in with Google | Handled by Google under Google's own privacy policy |
These companies process data on our behalf. They are not allowed to use your CV for their own purposes.
Where your data lives
Our servers are in the United States: the database runs on Supabase in the eastern US, and OpenAI, Sentry, PostHog and RevenueCat are US companies processing data there too. If you use CVTonic from the EU, the UK, Turkey or anywhere else, saving to an account means your data crosses a border.
For EU and UK users this is an international transfer under the GDPR. Each of these providers commits to standard contractual clauses for such transfers, and we only send them what the table above says, for the purpose it says. Nothing in this section changes the rest of the policy: if you never sign in, your CV never leaves your phone and none of this applies to it.
Why we are allowed to hold it
Under the GDPR every use of your data needs a legal basis. Ours are short.
| What | Basis |
|---|---|
| Storing your CV, syncing it, rendering the PDF, running the subscription | Performing the contract you entered when you signed in or subscribed |
| Sending a stripped copy of your CV to OpenAI | Your explicit instruction — it happens at the moment you tap the button, and never otherwise |
| Crash reports, anonymous product events, blocking abuse | Our legitimate interest in an app that works and is not being attacked, weighed against data that carries no words from your CV |
| Answering a lawful order, keeping records we are required to keep | Legal obligation |
A CV is free text, and you might type something sensitive into it. We never ask for your health, religion, politics, trade union membership or anything else the GDPR calls a special category, and no field invites it. But people put a disability adjustment, a religious school or a union role on a CV, and if you do, you are asking us to store it as part of the document. That is the basis: your own explicit choice to put it there. Leave it out and nothing collects it another way.
Keeping it safe
Everything travels over TLS. On the server, every row is behind row-level security keyed to your account, so the database itself refuses to hand your CV to another signed-in user — it is not an application check that could be forgotten. Our keys for OpenAI and the renderer live on the server and never ship inside the app, which is why the AI features go through us rather than straight from your phone. On the phone, drafts sit in the app's own sandboxed storage, which iOS keeps from other apps.
No system is perfect and we will not pretend otherwise. If a breach ever affects your data, we will tell you and the relevant authority within the time the law allows, and we will say what actually happened.
Four things worth being specific about
What OpenAI actually sees. When you ask for an AI review, a rewritten bullet or a written summary, the app sends a plain-text version of your CV: your name, headline, city, summary, roles, dates, bullets and the skills you listed. It deliberately leaves out your email address, your phone number and every internal identifier. A model that never sees a phone number cannot repeat one back to you.
A cover letter sends a little more, and only then. Writing one also sends the job details you filled in — the company, the role, the hiring manager's name if you typed one, the lines you chose to lead with, and why you said you want the job. If you pasted a job description it goes too, shortened to fit. That posting is the one thing here that reaches OpenAI only for a letter: matching your CV against a pasted role is arithmetic that happens on your phone, and no model is asked about it. If you would rather not send a hiring manager's name, leave that field empty — the letter opens with "Dear Hiring Manager" instead.
Free exports never leave your phone. The free template is rendered by iOS itself. No CV is uploaded to produce it. Only the PRO templates go through our renderer, and even then the page is converted and thrown away.
Crash reports are not a back door. Sentry runs with personal data collection disabled and performance tracing off. It receives the error and your account identifier, not the contents of the screen you were on.
Analytics carry numbers, not sentences. A typical event says that a template called "sharp" was previewed and the score was 74. It does not carry your name, your employer, or a single line of your CV.
What we do not do
- No advertising, and no advertising identifier. The app does not request permission to track you, because it has nothing to track you with.
- No selling or sharing of personal data with anyone for their own use.
- No training of AI models on your CV. We reach OpenAI through their API, and under their API policy that content is not used to train their models.
Cookies, and the ones nobody sets here
The app is an app, not a browser, and sets no cookies at all. This website sets none either: there is no analytics script on it, no advertising pixel, no consent banner, because there is nothing to consent to. That is also why you will not find a "Do Not Sell or Share" link anywhere — we do not sell or share personal information, so a Global Privacy Control signal from your browser asks us to stop doing something we were never doing.
Decisions made by machine
Two things in CVTonic are automatic, and neither one decides anything about you.
The score is arithmetic. A rule engine reads your CV and counts what is there, and the number it produces is a comment on a document, not a judgement of a person. Nobody sees it but you, it is never sent to an employer, and it changes nothing about what the app will let you do.
The AI writes drafts. It suggests words; you accept, edit or ignore them, and nothing it produces reaches anyone until you export a PDF and send it yourself.
So there is no automated decision here that produces a legal or similarly significant effect on you, no profiling to build a picture of who you are, and no model trained on your CV.
How long we keep it
Your CV stays until you delete it. Crash reports and analytics events age out on the providers' own retention schedules, which are measured in months, not years. Delete your account and the CV data goes with it, immediately, not on a queue.
Deleting your data
There are two situations, and the app has a control for each.
If you are signed in
Settings, then DANGER ZONE, Delete account. This removes your resumes and your score history along with the account itself. It is a double confirmation, because it cannot be undone.
If you are not signed in
Your CV was only ever on this phone, so there is no account to close. Settings, then DANGER ZONE, Delete my data. It clears the drafts from the device and puts the app back to how it was the first time you opened it.
Your rights
Wherever you live, you can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. In most cases the two controls above are faster than writing to us, but write anyway if you would rather.
Write to hello@cvtonic.app. We answer within 30 days. If we need longer because the request is complicated, we will say so before the 30 days are up rather than after. We ask enough to be sure the account is yours and no more — usually just that you write from the address you signed in with. There is no charge, and asking costs you nothing else either: we will not degrade the app or the subscription because you exercised a right.
If you are in the EU or the UK
The GDPR and the UK GDPR give you the right of access, rectification, erasure, restriction of processing, portability in a machine-readable form, and the right to object to processing based on our legitimate interests. Where we rely on your explicit instruction, you can withdraw it at any time by not using the feature, and that does not affect what was already done.
If you think we have handled your data badly, tell us first — it is usually the fastest fix. You do not have to, and you can complain to your supervisory authority instead or as well: the Information Commissioner's Office in the UK, or the data protection authority of the EU country you live in.
If you are in Türkiye
Under KVKK (Law 6698) the data controller is Attila Isci. Article 11 gives you the right to learn whether your personal data is processed, to ask what it was used for and whether the use fits that purpose, to know the third parties it has been transferred to at home or abroad, to have it corrected or completed if it is wrong, to have it erased, to have any correction or erasure passed on to those third parties, to object to a result reached against you purely by automated analysis, and to claim compensation if unlawful processing has harmed you.
Signing in transfers your CV abroad, because the servers are in the United States — the "Where your data lives" section says exactly where and to whom. You make that transfer by choosing to create an account; without one, nothing leaves the phone. Apply to us first at hello@cvtonic.app; if the answer does not satisfy you, you may complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).
If you are in the United States
State privacy laws, including the California Consumer Privacy Act, give you the right to know what is collected and why, to a copy of it, to have it corrected, to have it deleted, and not to be discriminated against for asking. The sections above answer the first of those for everybody, not just for California: the categories are your CV content, your account details, your subscription status and diagnostics, and the reasons are in the table.
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We have never done either, there is no advertising in the app, and the app does not ask for permission to track you because it has nothing to track you with. That makes a "Do Not Sell or Share My Personal Information" link meaningless here, so there is not one. We offer no financial incentive in exchange for your data. To exercise any of the rights above, write to hello@cvtonic.app. If we turn a request down you can ask us to look again, and you can complain to your state Attorney General.
Children
CVTonic is rated 4+ and contains nothing unsuitable for any age, but it is a tool for people looking for work and it is not directed at children under 13. We do not knowingly collect data from them.
Terms of use
CVTonic PRO is sold under our own Terms of Use. Subscriptions renew until you cancel them, and you cancel in your App Store settings rather than here.
Credits
The city and country lists in the app come from GeoNames, used under CC BY 4.0.
Changes
If this policy changes in a way that affects what happens to your CV, we will update the date at the top and say what changed. We will not quietly widen it.
Which language this policy is written in
This policy is published in several languages so you can read it in your own. The English version is the original and the one that governs: if a translation ever says something different, the English is what applies. That is not a way of hiding anything in a language you do not read — it is so that there is one answer rather than eighteen. If a translation looks wrong to you, write and say so, and we will fix the translation.
Contact
Questions, requests or complaints: hello@cvtonic.app. A person reads it.