Skip to content
← Back home

Privacy Policy

Last updated: October 12, 2026

This policy explains what personal data Resumade collects when you use resumade.io and our apps for iPhone, iPad, Mac and Android, why we use it, who helps us process it, and the rights you have.

Who is responsible

Resumade is operated by MyFitTrack, the seller shown on the App Store and Google Play. MyFitTrack is the controller of the personal data described in this policy. For anything about your data, write to support@resumade.io.

What we collect

Account details. When you create an account we store your email address and sign-in details with our authentication provider, Supabase. If you sign in with Apple, Google or another sign-in provider, we receive the email address and basic profile details that provider shares with us.

Your documents. Everything you put into a resume or cover letter is stored with it: your name, contact details, work history, education, skills and an optional profile photo. We also store the job descriptions you paste, the results of AI features (optimizations, scans, cover letters and career-toolkit texts), the jobs you save and any share links you create.

Usage data. On this website we record the pages you open and the actions you take in the product (for example that a scan finished or a download started), together with a random session identifier, the page address and, when you are signed in, your account ID. This is our own first-party analytics, kept in our database; it uses no advertising cookies. Our mobile apps record similar feature events with a random per-install identifier, which is not your device’s advertising ID. Usage events never contain the contents of your documents.

Technical and security data. To deliver the site and protect it from abuse, our hosting provider and servers process your IP address and basic browser and device information. For the free ATS scan without an account we keep a salted hash of your IP address and a random device identifier, so the free allowance cannot be claimed over and over. We also log which AI features an account uses and when, to apply usage limits.

Payments. Payments are processed by Stripe on the web and by Apple or Google in our apps. We receive the status of your subscription or pass (plan, dates and a transaction reference), never your card details.

Why we use it (purposes and legal bases)

We use your data only for the purposes below, each with the legal basis the GDPR requires:

  • Providing Resumade: your account, storing and syncing your documents across devices, the AI features you ask for, share links and support. Performance of our contract with you (Art. 6(1)(b) GDPR).
  • Payments, subscriptions and passes, and keeping invoices and tax records. Contract (Art. 6(1)(b)) and our legal obligations (Art. 6(1)(c)).
  • Account emails, such as confirming your address and resetting your password. Contract (Art. 6(1)(b)).
  • Security and abuse prevention, such as rate limits and the free-scan allowance. Our legitimate interest in a secure and fairly used service (Art. 6(1)(f)).
  • First-party usage analytics, to see which features people use and to find what breaks. Our legitimate interest in improving Resumade (Art. 6(1)(f)). You can object at any time.
  • Advertising measurement (the Meta Pixel on this website; install and sign-up events from our apps to Google and Meta) and ads for free accounts in our apps. Your consent where the law requires it (Art. 6(1)(a)), given in the cookie banner on this website and in Google’s consent form in our iPhone app; otherwise our legitimate interest in funding the free plan and knowing which ads work (Art. 6(1)(f)).

We do not sell your data, share it with data brokers or use your documents to train AI models. Usage events and ad measurement never include the contents of your documents.

AI features

When you use an AI feature (optimizing a resume for a job, the ATS scan, writing a cover letter, translating a resume, the career toolkit, writing suggestions, or importing a resume from a file or pasted text), the text that feature needs, such as your resume and the job description, is sent to Anthropic’s Claude API to generate the result. Anthropic processes it on our behalf, does not use it to train its models, and keeps it only as long as its commercial terms allow. AI output is generated automatically, so check it before you use it.

Service providers

We use these service providers to run Resumade. They process your data on our behalf under data-protection terms, except where noted:

  • Supabase: sign-in and our database, hosted in the EU (Ireland).
  • Cloudflare: hosting, content delivery and security for resumade.io.
  • Anthropic: the AI features described above (United States).
  • Brevo: account emails such as sign-up confirmation and password resets.
  • Stripe: payments on the web.
  • Apple (App Store) and Google (Google Play): payments and subscriptions in our apps. For your store account and purchases they act as independent controllers under their own privacy policies.
  • RevenueCat: records the status of in-app subscriptions and passes so we know whether your account has Pro.
  • Google Firebase Analytics: feature-usage counts and install and sign-up measurement in our mobile apps.
  • Google AdMob: ads for free accounts in our mobile apps (see below).
  • Meta Platforms: install and sign-up measurement in our mobile apps, and the Meta Pixel on this website if you accept it.
  • jsDelivr: when you download some PDFs (for example an optimized resume), your browser fetches the font files from the jsDelivr CDN, which receives your IP address like any website you load.

The fonts on this website and in the resume preview are served from resumade.io itself.

Advertising measurement (Google and Meta): our mobile apps tell Google (through Firebase Analytics) and Meta Platforms when the app is installed or opened and when an account is created, so we can see which of our ads work. No résumé content, name or email address is sent, and we don't use this data to target ads at you. The iPhone app never asks for permission to track you and does not use your device's advertising identifier; installs from ads are counted with Apple's anonymous SKAdNetwork. On this website, the Meta Pixel loads only if you accept it in the cookie banner.

Ads in the apps (Google AdMob): free accounts in our iPhone and Android apps see ads from Google AdMob; paid accounts (Pro, by subscription or with a pass) see none. To show, limit and measure ads and to prevent fraud, Google's ad software collects technical information such as your IP address (and the approximate location derived from it), device and app identifiers, how you interact with the ads, and diagnostic data. It never receives your résumé, your name or your email address from us. In the iPhone app the ads are non-personalised; people in the EEA, the UK and Switzerland are asked for consent with Google's consent form before any ad is requested and can change that choice at any time in Settings → Ad privacy settings, and anyone can report an inappropriate ad in Settings → Report an ad or by email. In the free Android app Google may use your device's advertising ID to show and measure ads; you can reset or delete that ID in your Android settings. Google explains how it uses this information at policies.google.com/technologies/partner-sites.

International transfers

Our database is hosted in the European Union. Some of the providers above, including Anthropic, Cloudflare, Stripe, RevenueCat, Google, Meta and Apple, may process data in the United States or other countries outside the European Economic Area. Where they do, the transfer is covered by an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework for certified companies) or by the Commission’s Standard Contractual Clauses, with additional safeguards where needed. You can ask us for details.

Data retention & deletion

Your account, documents, optimizations and saved jobs are kept until you delete them or delete your account. You can delete your account at any time in the app (Settings → Delete account) or on the web from your settings page; this permanently removes your resumes, cover letters, optimizations and saved jobs. You can also email us and we will do it for you.

Usage events are deleted after 180 days and the log of AI feature use after 60 days; events recorded before you delete your account are kept without your account ID until then. Payment and invoice records are kept for as long as tax and accounting law requires.

A subscription bought through the App Store or Google Play is billed by Apple or Google and is not cancelled by deleting your account: cancel it in your Apple Account settings (Subscriptions) or in the Play Store under Subscriptions.

Your rights

You have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict how we use it, to object to processing based on our legitimate interests (including our analytics), and to receive your data in a portable format. Where we rely on your consent, you can withdraw it at any time; this does not affect what we did before.

To use any of these rights, email support@resumade.io from the address on your account. We will reply within one month. You also have the right to lodge a complaint with a data-protection supervisory authority, in particular in the country where you live, work or where you believe the problem occurred.

Minimum age

Resumade is not meant for anyone under 16, and you must be at least 16 to create an account. If we learn that we hold personal data of someone under 16, we will delete it.

Changes to this policy

When we change this policy we update the date at the top. If a change matters to how we use your data, we will tell you in the app or by email before it takes effect.

Contact

Questions about your privacy? Email support@resumade.io.