Welcome to VoiceResume! This Privacy Policy explains how DownLabs ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you use our VoiceResume mobile application ("App").

By using VoiceResume, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our practices, please do not use our App.

1 Information We Collect

1.1 Information You Provide Directly

1.2 Automatically Collected Information

• Device Information: Device model, operating system, app version, unique device identifiers
• Usage Data: Feature usage, session duration, screen views, button interactions
• Network Status: Internet connectivity status (for offline mode functionality)
• Error Logs: Crash reports and error logs for debugging (anonymized)
• Performance Data: App performance metrics and load times

1.3 Information from OAuth Providers

When you sign in using OAuth providers (GitHub, Google, Apple), we receive:

• Email address
• Full name
• Profile picture (optional)
• Unique user identifier from the provider

2 How We Use Your Information

We use your information for the following purposes:

2.1 Core App Functionality

• Account Management: Create, maintain, and secure your user account
• Resume Creation: Generate, format, and store your professional resumes
• Voice Processing: Transcribe voice recordings into text content
• PDF Generation: Create downloadable PDF versions of your resumes
• Template Rendering: Apply your chosen design templates to resume data
• Auto-Save: Automatically save your work progress to prevent data loss

2.2 Premium Features (AI-Powered Services)

• Job Optimization: Analyze job descriptions and optimize your resume accordingly
• Cover Letter Generation: Create customized cover letters using AI
• ATS Analysis: Check resume compatibility with Applicant Tracking Systems
• Content Enhancement: Improve resume content using AI suggestions
• Resume Parsing: Extract data from your existing resume files

2.3 Service Improvement

• Analytics: Understand how users interact with our app (anonymized data)
• Bug Fixes: Identify and resolve technical issues
• Feature Development: Develop new features based on usage patterns
• Performance Optimization: Improve app speed and reliability

2.4 Communication

• Service Updates: Notify you about new features or changes
• Security Alerts: Inform you about security-related matters
• Support: Respond to your inquiries and provide assistance
• Policy Updates: Notify you of changes to Terms or Privacy Policy

3 Data Storage & Security

3.1 Where Your Data is Stored

3.2 Security Measures

• Encryption in Transit: All data transmitted between your device and our servers uses HTTPS/TLS encryption
• Encryption at Rest: Database and storage are encrypted at rest using industry-standard encryption
• Password Security: Passwords are hashed using bcrypt before storage (never stored in plain text)
• Row-Level Security (RLS): Database policies ensure users can only access their own data
• Authentication Tokens: Secure JWT tokens with expiration for session management
• API Security: Rate limiting and request validation to prevent abuse
• Regular Backups: Automated backups of database (Supabase managed)
• Access Controls: Strict internal access policies for development team

3.3 Data Breach Protocol

In the unlikely event of a data breach:

• We will notify affected users within 72 hours
• We will report to relevant authorities as required by law
• We will take immediate action to secure systems and prevent further breaches
• We will provide guidance on protective measures you can take

4 Third-Party Services

VoiceResume integrates with the following third-party services to provide functionality:

4.1 Infrastructure & Backend

4.2 OAuth Authentication Providers

• GitHub OAuth: When you sign in with GitHub, we receive your email, name, and profile picture
• Google OAuth: (Optional) Email, name, and profile information
• Apple Sign In: (Optional) Email and name (or private relay email)

4.3 Analytics & Monitoring

We may use analytics services to understand app usage and improve user experience. These services collect:

• Device type and operating system
• App version and build number
• Feature usage statistics (anonymized)
• Crash reports and error logs (anonymized)

5 Voice Data Processing

5.1 Voice Recording Collection

When you use the voice input feature:

• Your voice is recorded only when you press and hold the microphone button
• Recording automatically stops when you release the button
• You have full control over when voice recording occurs
• Voice recording requires microphone permission (requested when first used)

5.2 Voice Data Flow

5.3 Voice Data Retention

5.4 Voice Privacy Protections

• No Permanent Storage: Voice recordings are never permanently stored
• Automatic Deletion: Temporary files are automatically deleted after transcription
• No Voice Biometrics: We do not create voice profiles or biometric data
• Encrypted Transmission: All voice data is encrypted during transmission
• Opt-In Only: Voice features are optional; you can use manual input instead

6 AI & Machine Learning

6.1 AI Services Used

VoiceResume uses AI technology for the following purposes:

• Speech-to-Text: Groq Whisper for voice transcription
• Content Generation: Groq LLM for resume content enhancement
• Job Analysis: AI-powered keyword extraction from job descriptions
• CV Optimization: Matching resume content to job requirements
• Cover Letter Creation: AI-assisted cover letter writing
• Content Humanization: Removing AI-detection patterns from generated text

6.2 Data Used for AI Processing

6.3 AI Data Usage & Training

6.4 AI Output Responsibility

While our AI features are designed to be helpful:

• AI-generated content should be reviewed and edited by you
• We are not responsible for inaccuracies in AI output
• You maintain full control and ownership of all generated content
• Final responsibility for resume accuracy lies with you

7 Information Sharing & Disclosure

7.1 We Do NOT Sell Your Data

7.2 When We Share Information

We may share your information only in the following limited circumstances:

With Your Consent

• When you explicitly authorize us to share specific information
• When you export or download your resume (you control distribution)

Service Providers

• Supabase: Database and authentication services
• Groq AI: Voice and AI processing (with privacy protections)
• Cloud Infrastructure: Hosting and backend services

Legal Requirements

We may disclose information if required to:

• Comply with valid legal processes (court orders, subpoenas)
• Enforce our Terms of Use or protect our rights
• Prevent fraud, security issues, or technical problems
• Protect the safety of users or the public

Business Transfers

• In the event of a merger, acquisition, or sale of assets, your information may be transferred
• You will be notified via email and/or in-app notification
• The new entity will be bound by this Privacy Policy

7.3 What We Never Share

• Your password (even hashed) is never shared with anyone
• Voice recordings are never shared or stored permanently
• Personal information is not shared with advertisers
• Resume content is not made public without your permission

8 Data Retention

8.1 How Long We Keep Your Data

8.2 Account Deletion

When you delete your account:

• Immediate: Access is revoked instantly
• Within 30 Days: All data is permanently deleted from our servers:
  • Profile information
  • All resumes and drafts
  • PDF files and thumbnails
  • Profile pictures
  • Download history
• Backups: Data in automated backups is deleted within 90 days
• Legal Holds: Data required for legal compliance may be retained longer

8.3 Inactive Accounts

• Accounts inactive for 24 months may be flagged for deletion
• We will send email notifications before deletion
• You can prevent deletion by logging in

9 Your Privacy Rights

9.1 Access & Control

You have the following rights regarding your personal data:

9.2 How to Exercise Your Rights

9.3 Regional Privacy Rights

GDPR (European Union Users)

If you are located in the EU/EEA, you have additional rights under GDPR:

• Right to data portability in machine-readable format
• Right to withdraw consent at any time
• Right to lodge a complaint with your local data protection authority
• Right to object to automated decision-making

CCPA (California Residents)

California residents have the right to:

• Know what personal information is collected
• Know if personal information is sold or disclosed (we don't sell data)
• Opt-out of sale of personal information (not applicable)
• Request deletion of personal information
• Not be discriminated against for exercising these rights

Other Jurisdictions

We respect privacy rights regardless of location and will honor reasonable requests in accordance with applicable laws.

10 Children's Privacy

If you are under 16 years old:

• Do not use this app without parental/guardian consent
• Do not provide any personal information
• Ask a parent or guardian to create an account if needed

If We Discover Underage Users

If we become aware that we have collected personal information from a child under 16:

• We will delete that information immediately
• We will terminate the account
• We will notify the parent/guardian if contact information is available

Parental Rights

If you believe your child has provided information to us:

• Contact us immediately at support@voiceresume.xyz
• Provide proof of parental relationship
• We will delete the information promptly

11 International Data Transfers

11.1 Data Processing Locations

Your information may be processed in various locations:

• Primary Storage: Supabase data centers (varies by region)
• Backend Processing: Flask server at server.voiceresume.xyz
• AI Processing: Groq AI infrastructure (United States)

11.2 Data Transfer Protections

When data is transferred internationally, we ensure:

• Adequate data protection measures are in place
• Compliance with applicable data protection laws
• Use of standard contractual clauses where required
• Encryption during all data transfers

11.3 Cross-Border Data Flows

12 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons.

12.1 How We Notify You

• Last Updated Date: Always displayed at the top of this policy
• In-App Notification: Material changes will trigger a notification in the app
• Email Notice: Significant changes may be emailed to registered users
• Consent Prompt: Major changes may require you to accept the updated policy

12.2 Your Options

When we update this policy:

• Continued use of the app after notification constitutes acceptance
• If you do not agree with changes, you may delete your account
• Previous versions are available upon request

12.3 Policy Version History

• Version 1.0 (January 7, 2026): Initial release with app launch

13 Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Contact Information

• Company: DownLabs
• Application: VoiceResume - AI Resume Builder
• Email: support@voiceresume.xyz
• Privacy Email: privacy@voiceresume.xyz
• Website: https://voiceresume.xyz
• Package ID: com.downlabs.voiceresume

Response Times

• General Inquiries: Within 48 hours
• Privacy Requests: Within 30 days
• Urgent Security Issues: Within 24 hours

Data Protection Officer

For formal privacy complaints or GDPR-related inquiries, contact our Data Protection Officer at:

• Email: dpo@voiceresume.xyz

Additional Privacy Resources

Related Policies

• Terms of Use - Legal terms for using VoiceResume
• Cookie Policy: Not applicable (mobile app does not use cookies)

Third-Party Privacy Policies

• Supabase: supabase.com/privacy
• Groq AI: groq.com/privacy-policy
• Google Play: policies.google.com/privacy

Privacy Best Practices for Users

• Use a strong, unique password for your account
• Keep your app updated to the latest version
• Review your resumes before sharing or downloading
• Be cautious when sharing resume PDFs publicly
• Regularly review your stored resumes and delete outdated ones
• Enable device security features (PIN, biometrics)