Privacy Policy

Last Updated: September 2026 • AI Resume & Career Toolkit (Web & Android Mobile App)

This Privacy Policy explains how NafisFlahi ("we", "us", or "our") collects, uses, protects, and discloses information when you use the AI Resume & Career Toolkit website (resume.nafisflahi.com) and the AI Resume & CV Builder Android Mobile Application (the "Services").

1. Information We Collect

We collect information necessary to provide you with resume creation, ATS scoring, AI tailoring, and cover letter generation across web and mobile platforms:

  • Account & Contact Information: Name, email address, password hash, and plan subscription status when you register or log in.
  • Resume & Career Content: Work history, education, skills, contact details, certifications, job descriptions, and custom cover letter inputs that you voluntarily provide to generate or optimize documents.
  • Device & Usage Diagnostics (Mobile App): Technical diagnostic data such as app crash logs, performance metrics, device model, operating system version, and general non-precise location/region to maintain service reliability.

2. Third-Party Services & SDKs (Mobile App & Web)

To deliver real-time AI capabilities, analytics, ads, and payments across our website and Android mobile app, we integrate trusted third-party service providers:

  • Google Play Services & Firebase: We utilize Firebase Crashlytics and Firebase Analytics in the mobile application to monitor app stability, diagnose crash reports, and understand feature engagement.
  • Google AdMob (Mobile App): For Free tier mobile users, the app may display advertisements via Google AdMob. AdMob may collect and process device advertising identifiers (such as Google Advertising ID / AAID) and device information to serve ads and prevent fraud in compliance with Google Play Policies.
  • Google Gemini AI API: Career optimization and cover letter generations are processed via server-side Google Gemini AI APIs. Your data is transmitted encrypted over HTTPS and is not used to train public foundation models.
  • Payment Gateways (Razorpay / Stripe / Google Play In-App Billing): Payment transactions are securely handled by PCI-DSS compliant providers. We do not store credit card numbers, CVVs, or bank credentials.

3. How We Use Your Data

We use your information strictly to:

  • Generate, format, store, and export your resumes, CVs, and cover letters.
  • Perform ATS compatibility analysis and keyword match scoring.
  • Authenticate your account and synchronize saved resumes seamlessly between the Android app and website.
  • Enforce Free and Pro plan entitlements and quotas server-side.

4. Data Security & Encryption

We maintain strict security safeguards to protect your personal and career data:

  • Encryption in Transit: All data transmitted between the Android app, website, and backend servers is encrypted using industry-standard Transport Layer Security (HTTPS/TLS).
  • Encryption & Partitioning at Rest: Resumes and user records are stored in secured, isolated database partitions with bcrypt-hashed credentials.
  • No Unauthorized Sharing: We do not sell, rent, or trade your personal resume information to third-party recruiters, advertisers, or data brokers.

5. Google Play Data Safety Compliance

In accordance with Google Play's Data Safety standards for the mobile application:

  • Data Transferred in Transit: Encrypted via HTTPS.
  • Data Collected: Personal info (Email, Name), Financial info (Purchase history for subscriptions), Files & docs (Resume contents), App info and performance (Crash logs, diagnostics), Device/Other IDs (Advertising ID for AdMob).
  • Data Sharing: Data is shared only with third-party service SDKs (Firebase for diagnostics, AdMob for advertising, Payment processors for billing).

6. Account & Data Deletion (Right to Erasure)

You have full control over your personal data. You may delete individual resumes at any time from your dashboard or app. To delete your entire account and purge all associated resumes, cover letters, and diagnostic records from our databases, visit our dedicated Account Deletion Page or email us at privacy@nafisflahi.com.

7. Children's Privacy

Our Services are intended for job seekers and career professionals and are not directed to children under the age of 13. We do not knowingly collect personal data from children.

8. Contact Us

If you have any questions or requests regarding this Privacy Policy or your data, please contact us at:

NafisFlahi Technologies
Email: privacy@nafisflahi.com
Website: https://resume.nafisflahi.com