Privacy Policy

Version 2026-09-14. HazirCV ("we") is an AI CV maker for job seekers in the Gulf and remote roles. This policy explains what personal data we process, why, where it is kept, who helps us process it, and how you exercise your rights.

1. Who is responsible

HazirCV is run by Imran Khan, an individual developer based in Dubai, United Arab Emirates. There is no company: the controller of your personal data is that individual. Data protection contact, and the address for any request or complaint: support@hazircv.app. A postal address is given on request to a data subject or a supervisory authority.

2. What we collect and why

Data	Purpose	Lawful basis
Your CV: uploaded file, photo, pasted or typed text; the parsed fields (name, contact details, work history, education, skills)	Parsing, ATS scoring, rewriting (paid), exporting	Performance of our contract with you
Optional Gulf-profile details you enter deliberately: nationality, date of birth, marital status, visa/residency status, notice period, expected salary, driving licence	Included only in the Gulf export profile, only when you choose to add them	Consent (withdraw by clearing the fields)
Optional profile photo (Gulf export profile only, off by default)	Printed on the Gulf-profile CV when you switch it on; stored in Cloud Storage; never sent to any AI or text-recognition provider	Consent (withdraw by removing the photo)
Job descriptions you paste	Keyword matching, tailored scoring, cover letters (paid)	Performance of contract
Account identifiers (Firebase user id, sign-in email if you sign in), device installation id, App Check attestation	Your account, fair-use limits, abuse prevention	Contract; legitimate interest (security)
Android only: the device's advertising ID, collected by the Google Analytics for Firebase SDK	Analytics only — see section 2a. We show no ads and run no advertising or remarketing of any kind	Legitimate interest; switched off with the same Settings toggle as analytics
Purchase state from the app store via RevenueCat (product, tier, expiry — never card details)	Unlocking what you bought	Contract
Product analytics events (screen steps, scores, feature use — never CV text or contact details)	Improving the product	Legitimate interest; you can disable analytics in Settings
Referral code and redemptions	Granting bonus packs	Contract
Crash diagnostics: the stack trace, device model and operating system version when the app crashes — never CV text or contact details	Diagnosing and fixing crashes	Legitimate interest; switched off with the same Settings toggle as analytics, and never sent from a debug build
Support and abuse reports you choose to send: the generation's metadata (task, prompt version, model, safety flags) and your comment, with contact details stripped before storage	Investigating a bad or unsafe AI result	Legitimate interest (quality and safety)
A one-way hash of your IP address with a per-day counter. The address itself is never stored.	Enforcing the per-address daily score limit and blocking scripted abuse	Legitimate interest (security and cost control)

We never sell personal data and we never use your CV to train AI models.

2a. The Android advertising ID

On Android only, the Google Analytics for Firebase SDK we use collects the device's advertising ID — a resettable identifier Google provides on every Android device. We did not add it deliberately and we ask for nothing extra: the permission arrives with the analytics library and is merged into the app automatically. There is no equivalent on iOS, where we ask for no tracking permission at all.

What we do not do with it. HazirCV shows no ads. We run no advertising, no remarketing and no ad measurement, we are in no advertising network, and we never build an advertising profile of you or match you across other apps. Our declaration to Google Play names Analytics as the only purpose, which is the only thing it is used for.

How to stop it. Turn off analytics and crash reporting in Settings inside the app and the SDK stops collecting. Separately, Android itself lets you reset the advertising ID or delete it entirely — in the Android Settings app, under Privacy, look for "Ads". Deleting it there makes the identifier unavailable to every app on the device, including this one.

3. Where your data lives

Your parsed CV, scores and account state are stored in Google Cloud Firestore in Dammam, Saudi Arabia (me-central2). Uploaded originals and rendered exports are stored in Google Cloud Storage in Doha, Qatar (me-central1), and our servers run in Doha. Under the Saudi Personal Data Protection Law a transfer out of the Kingdom is regulated; the processing in Doha and the sub-processors below are such transfers, made with your consent and the safeguards described here.

4. Who helps us process it (sub-processors)

Provider	Purpose	Location
Google Cloud / Firebase (Firestore, Cloud Storage, Cloud Run, Authentication, App Check, Analytics, Crashlytics)	Hosting, storage, sign-in, abuse prevention, analytics, crash diagnostics	Dammam and Doha; analytics processed globally
Google Cloud Vision	Text recognition for photographed CVs (OCR)	May process outside the Middle East
OpenRouter	Routes AI requests for paid features to OpenAI under our own OpenAI key. Prompt logging is off and training opt-outs are set.	United States
OpenAI (the model provider behind OpenRouter, or directly in a fallback)	Generates rewritten text for paid features. Before any request your name, phone, email, address and links are replaced by placeholders such as [NAME]; the provider never receives them. OpenAI does not use API data for training and retains it for up to 30 days for abuse monitoring.	United States
RevenueCat	Purchase and subscription state	United States
Apple App Store / Google Play	Payments and distribution	Per store

4a. AI processing, stated precisely

Two different kinds of service are involved and the difference matters.

Generative AI (writing). Only paid features send text to a generative model, and only through OpenRouter to OpenAI. Nothing you write or upload on the free tier is ever sent to a generative model. Your score, the defect list and the free export come entirely from our own deterministic code.
Text recognition (OCR). Separate, and it is available on the free tier. If you photograph a printed CV or upload a scanned PDF with no selectable text, the image goes to Google Cloud Vision so the words can be read. Google describes Vision as an AI service. Free accounts get 3 such jobs a month and anonymous installations 1 in total. Typing, pasting or uploading a normal PDF or Word file uses no OCR at all.

If your CV has your photograph printed on it and you photograph or scan that page, your face is part of the image sent to Vision. That is different from the optional profile photo in Settings, which is stored only to print on a Gulf-format CV and never goes to Vision or to any AI provider.

Before any generative request we remove your name, phone number, email address, postal address and profile links from both your CV and any job description, replacing them with tokens such as [NAME]. That happens before the request is built, so it applies to every provider we could route to. It does not make the text anonymous: your employers, job titles, dates and qualifications remain, and someone determined could identify you from them. Treat it as reducing exposure, not removing it.

5. How long we keep it

Uploaded originals	90 days, or until you delete the CV
Extracted text and parsed fields	For the life of the CV record
AI generation records (metadata and output)	180 days
Free-tier CVs	Deleted after 60 days of inactivity
CVs on a paid plan	Kept while you use them; deleted after 365 days of inactivity
Application packs	180 days
Profile photo	Until you replace or remove it, or delete your account
Support and abuse reports	No automatic limit yet — kept until removed by hand. Contact details are stripped before storage, but the remaining text is not necessarily anonymous.
Hashed-IP daily counters	No automatic limit yet — kept until removed by hand. A hash of an address is still information about that address, so we do not claim it is anonymous.
Account deletion — active systems	Your CVs, packs, generations, usage records, entitlement and sign-in record are deleted while you wait, in one pass.
Account deletion — sign-in marker	A marker holding only your former account id, kept 2 hours so an already-issued sign-in token cannot be reused, then expires automatically.
Account deletion — audit record	Request id, time, and how many items of each kind were removed. No CV content. No automatic limit on this record yet.
Hosting provider backups	Deletion clears our live systems. Google Cloud's own backups and logs roll off on their schedule, which we do not control and have not extended.
Purchase records at the stores	Apple, Google and RevenueCat keep their own transaction records under their own terms and legal obligations. Deleting your HazirCV account does not reach them.

5a. Deleting your account does not cancel a subscription

Read this before deleting your account. A Pro Monthly subscription is a contract between you and Apple or Google, not with us, and our deletion cannot touch it. If you delete your account without cancelling, the store will keep charging you. Cancel first, in your App Store or Google Play subscription settings, then delete. A Starter Pack and a Pro Pass are one-time purchases with nothing to cancel.

6. Your rights

Access: Settings → Download my data gives you a complete export as a file.
Correction: every parsed field can be edited in the app.
Deletion: Settings → Delete account removes everything immediately; individual CVs can be deleted at any time.
Objection / withdrawal: clear the optional fields, turn off analytics and crash reporting, remove the profile photo, or delete your account. Staying on the free tier means no generative AI ever runs on your text; OCR is separate and is described in section 4a.
Restriction: ask us to pause a particular use while a complaint or correction is resolved. Email the address in section 1 saying what you want paused.
If you cannot reach Settings — lost device, cannot sign in, app will not open — email the address in section 1. We verify the account is yours before acting, which may mean asking for something only the account holder would know. We will not act on an unverified request, because that would let someone else delete your CVs.
How the score is produced: your ATS score and sub-scores come from our own fixed rules, not from an AI model and not from profiling you. The same CV always scores the same. It decides nothing about you: it is advice you may ignore, it is our measure rather than any employer's, and no employer ever sees it.
Acknowledging an updated policy is not consent to something new: when this notice changes we ask you to acknowledge it, which switches on no optional processing. Each optional thing stays off until you turn it on.
Complaints: you may contact your local data protection authority (for example the UAE Data Office, SDAIA in Saudi Arabia, or the ICO in the UK).

7. Children

HazirCV is for adults: you must be 18 or over to use it. We do not knowingly process the data of anyone younger, and if we learn that an account belongs to someone under 18 we delete it. The App Store rating is 18+ to match.

8. Changes

When this policy changes materially, the app asks you to accept the new version (the version date at the top changes).