Privacy Policy — Cvilio

Last updated: 29 August 2026

Applies to: Cvilio for iOS and Android

1. Who is responsible for your data

2. The short version

Cvilio is local-first. When you install it and never sign in:

• Your CVs are stored only on your device.
• Nothing you write is sent to us, because there is nowhere to send it.
• There is no analytics, no advertising, no tracking, and no profiling in this app. We do not measure how you use it.

Data leaves your device only when you choose to do one of three things: create an account, subscribe, or share an exported file.

3. What we process, and why

3.1 The CVs you write — on your device only

Everything you type — your name, contact details, employment history, education, skills, any photograph you add — is written to your device's local storage. If you never sign in, this never reaches us and we cannot see it, recover it, or delete it for you. Uninstalling the app removes it.

Legal basis: none required. We are not processing it.

Your name, contact details, photograph and signature are also remembered on the device so that a new CV or letter starts with them filled in rather than blank. That copy never leaves the device unless you sign in, in which case it travels with the documents as described below. Clearing it is a matter of clearing those fields, or deleting the app.

3.2 If you create an account (optional)

Signing in is optional and the app is fully usable without it. If you do sign in — by email, Apple or Google — we process:

Your documents are stored as they appear in the app, including everything you typed into them.

About the signature. If you sign a letter, the drawing is saved as a set of lines and stored with the letter, and it is reused so you do not have to draw it again for the next one. It is your handwriting, so treat it as you would a signature on paper. We do not analyse it, compare it to anything, or use it to identify you — it is drawn on the page and nothing more, which is why it is not biometric data under Art. 9. It is deleted with the letter it belongs to, and with your account. If you would rather it never left the device, do not sign in, or sign the printed letter instead.

Legal basis (GDPR Art. 6(1)(b)): performance of the contract — you asked us to synchronise your documents and we cannot do that without storing them.

Sign in with Apple: if you use Apple's private relay, we receive a relay address rather than your real one, and that is all we will ever have.

3.3 A CV can contain sensitive information

This deserves its own paragraph because it is easy to overlook. A CV may reveal health conditions, disability, trade union membership, religious or political affiliation, or ethnic origin — for example through a volunteering entry, a professional body, or an explanatory note about a career gap. Under GDPR Article 9 that is special category data.

We do not ask for it, do not look for it, and do not use it for anything. But if you sign in, whatever you put in a CV is stored on our behalf.

Legal basis (GDPR Art. 9(2)(a)): your explicit consent, given by choosing to sign in and synchronise. If you would rather not, do not sign in — the app works completely without an account.

3.4 If you subscribe

Payments are handled entirely by Apple or Google. We never see your card number, billing address or bank details. We receive only whether a subscription is currently active, and which plan.

Legal basis (GDPR Art. 6(1)(b)): performance of the contract.

3.5 Fonts are loaded from Google

The app downloads its typefaces from Google Fonts the first time it needs them. This sends your IP address to Google, in the United States.

We are naming this explicitly because it is the only thing the app does that contacts a third party without you asking it to. See section 5 for what this means if you are in the EU.

Legal basis (GDPR Art. 6(1)(f)): legitimate interest in rendering the app's typography.

3.6 Photographs

If you add a photo to a CV, the app asks your operating system for access to that one image. The photo is embedded in the document. It stays on your device unless you sign in, in which case it synchronises with the rest of that document. We do not process photographs in any other way — no facial recognition, no image analysis.

3.7 Letters written with AI

If you use the Bewerbung feature, we send the text of the CV you chose, and the job advert you paste in, to Anthropic PBC in the United States. Anthropic runs the model that writes the letter and returns it to us; we pass it back to your device.

What is sent: your name, job title, location, summary, work history, education, skills and languages, exactly as they appear in that CV, together with whatever you paste into the advert field.

What is not sent: your email address, your telephone number and your photograph are removed before the request leaves the app. A letter runs from the salutation to the sign-off and has no use for them, so they are not shared.

Legal basis: performance of the contract (Art. 6(1)(b) GDPR). You asked us to write a letter, and it cannot be written without the material it is based on. If you never open the feature, nothing is ever sent.

A CV can contain sensitive information. Everything in section 3.3 applies here too, and more sharply: information you have chosen to put in your CV — a disability, a religious employer, a trade union role, a health-related career break — is sent along with the rest of it. If you would rather it were not, remove it from the CV before generating a letter, or write the letter yourself.

What Anthropic does with it: they process it to produce the letter. Under their commercial terms they do not use it to train their models. They retain it for a limited period for safety and abuse monitoring and then delete it. The transfer to the United States is covered by Standard Contractual Clauses and Anthropic's data processing addendum.

We do not keep the letters. They are returned to your device and stored there like any other document. What we do keep is a count of how many requests you have made and what they cost — a number of tokens and an amount in dollars, with no text — which is how the monthly allowance is enforced and how we know what the feature costs to run.

4. Who else is involved

Your account and CVs are stored on Supabase infrastructure in London. The United Kingdom is outside the EU, so this is a transfer to a third country; it is covered by the European Commission's adequacy decision for the UK, which permits transfers without further safeguards. We do not sell your data, and we do not share it for advertising.

5. If you are in the EU or UK

You have the right to:

• access the data we hold about you
• correct it if it is wrong
• erase it
• take it with you in a portable format
• object to processing, and to restrict it
• withdraw consent at any time, without affecting what came before
• complain to a supervisory authority — in Germany, your Landesbeauftragte für Datenschutz; elsewhere, your national regulator

To exercise any of these, write to support@cvilio.de. We respond within one month.

On Google Fonts specifically. The app currently downloads its typefaces from Google the first time it needs them, which sends your IP address to Google. We consider this a shortcoming rather than a feature, and we are moving to fonts shipped inside the app so that nothing is requested from Google at all. Until that change ships, this section tells you plainly that the request happens. If you object to it, write to support@cvilio.de.

6. If you are in California

You have the right to know what we collect, to delete it, to correct it, and to opt out of sale or sharing. We do not sell or share personal information, and we do not offer financial incentives for data. Exercise your rights at support@cvilio.de.

7. How long we keep things

The 90-day figure is real: the database has a purge_deleted_documents routine built for it. A deletion has to outlive the longest plausible period a second device might be offline, or that device would resurrect the document.

8. Deleting your account

Open Settings → Account → Delete account inside the app. You are asked to confirm, and the deletion then happens immediately and cannot be undone.

It removes your account and every CV stored in it from our servers. Because documents are tied to the account at the database level, they are erased in the same operation — there is no grace period and no copy kept.

The CVs on your device are left alone. Deleting the account removes what we hold, not your work on the phone in your hand. To remove those too, use Settings → Delete everything, or uninstall the app.

You do not need to write to us to do any of this, and we cannot restore an account once it has been deleted.

9. Children

Cvilio is not directed at children. You must be at least 16 (or the age of digital consent in your country, whichever is higher) to create an account. We do not knowingly collect data from children. If you believe a child has created an account, write to support@cvilio.de and we will remove it.

10. Security

Data in transit is encrypted with TLS. Documents in your account are protected by row-level security, so each row is readable only by the account that owns it — this is enforced by the database, not only by the app.

No system is perfectly secure. If you are storing something you would not want disclosed, consider not signing in — the app was built to work without an account for exactly this reason.

11. Changes

If we change how we handle your data, we will update this page and the date at the top. Material changes will be surfaced in the app before they take effect.

12. Contact

support@cvilio.de Seehofweg 25, 21129 Hamburg, Germany