Hire Me — Privacy Policy
This policy describes what the Hire Me iOS application actually does with your data at version 1.
1 Who we are
Hire Me is operated by Ahmed Ramadan Khalifa as an individual developer. This policy explains what personal data the Hire Me iOS application collects, why, who it is shared with, and how you control it.
2 What we collect
| Category | What exactly | Why | Source |
|---|---|---|---|
| Account identifier | The unique subject identifier Apple issues for your account when you use Sign in with Apple | To create and recognise your account | Sign in with Apple |
| Email address | Your email, which may be an Apple private relay address if you chose to hide it | Account recovery and service notices | Sign in with Apple |
| Name | Optional, only if you provide it | To address you in the app and, if you choose, in a generated CV | You |
| CV file and its contents | The PDF or DOCX you upload, plus the text and structure extracted from it (work history, education, skills, contact details it contains) | To score your CV, suggest improvements, and match you to jobs | You |
| Job preferences | Target country, target roles, seniority, remote preference, employment type, salary expectation, languages, excluded companies | To find and rank relevant jobs | You |
| Activity data | Jobs shown, saved, dismissed; applications you record; CV versions created; quota usage | To operate the service, enforce plan limits, and show your history | Generated by your use |
| Subscription status | Your plan, its status and renewal date, and the Apple transaction identifiers that prove it | To grant paid features | Apple |
| Technical logs | Request timestamps, error codes, and coarse diagnostics | Security, abuse prevention, and debugging | Generated by your use |
We do not collect your precise location, your contacts, your photos beyond a file you deliberately pick, or advertising identifiers. We do not ask for your email password, and v1 of the app does not connect to your mailbox at all. We do not use your activity data for analytics or advertising profiles: it is there to run the service, hold you to your plan limits, and show you your own history.
Sensitive details inside your own CV. Hire Me never asks you for special-category data. There is no field anywhere in the app for your date of birth, nationality, photograph, religion, political opinions, trade-union membership, health or disability. But we do store the file you upload and the full text extracted from it, and CVs routinely carry some of that anyway — a date of birth, a nationality, a photograph, a union role, a political or religious affiliation, a health or disability disclosure. Whatever your own document contains is processed as part of that document: stored with it, shown back to you, used for scoring and matching, and, if you consent to AI improvement, included in the text sent to the AI provider. A photograph stays inside the stored file rather than in the extracted text, because extraction reads text only. You decide what to upload: you can take out anything you would rather we did not hold and upload the file again, delete that CV, or delete your whole account.
3 What we do not do
- We do not sell your personal data, and we do not share it with advertisers or data brokers.
- We do not send email to employers on your behalf in this version. When you apply, the app opens the employer's own official application page.
- We do not send your CV to any employer automatically.
- We do not invent facts in your CV. Improvement suggestions rephrase and reorganise what you already wrote; every change is shown to you and only applied if you accept it.
4 Artificial intelligence
Improving your CV uses an external AI provider. This happens only after you give separate, explicit consent, which is distinct from accepting these terms and can be withdrawn at any time.
- The structural part of your CV score is computed on our own servers and involves no AI provider.
- When you request improvement suggestions, only the CV text the request needs is sent: your headline, summary, job titles, employers, dates, bullet points, education, projects, skills, languages and certifications. Your name, email address, phone number and profile links are removed before the request leaves our server. Anything you wrote inside a bullet point is sent as you wrote it.
- What the provider then does with that text is governed by the provider's own published terms, not by any agreement between them and us. We have no separately negotiated data-processing agreement with the provider, and we make no claim that your content is kept out of training their models.
- If you decline AI consent, scoring and job matching still work; only the AI improvement feature is unavailable. Withdrawing consent stops any further request, but it cannot recall text that has already been sent.
Provider: DeepSeek (api.deepseek.com), an AI company based in China. Your CV text is processed on their servers, which means it leaves your country and is handled under Chinese law rather than the law of your own country. If you are not comfortable with that, decline AI consent — scoring and job matching work fully without it, and nothing is sent.
What that transfer rests on. If you are in the EEA, the UK or Switzerland, this is a transfer to a country with no adequacy decision. The only basis we rely on is your own explicit, separate and withdrawable consent to AI processing, given inside the app before anything is sent — the consent-based exception in Article 49(1)(a) of the GDPR and its UK equivalent. We do not have Standard Contractual Clauses or any other transfer safeguard in place with this provider, and we do not claim to. Consent is the stated basis precisely because the feature is optional: CV scoring and job matching work in full without it, and if you never consent, nothing is ever sent.
5 Job sources
To find jobs we query third-party job APIs and public employer job boards. We send them your search criteria — such as target country, role keywords, and remote preference — never your CV, your name, or your email. Job listings we retrieve are stored with a record of which source they came from and when.
These are not licensed feeds. Some are free or free-tier job APIs and some are employers' own published job boards, and we use each one within the terms that source publishes. Because permission to read a source does not extend to passing its listings on, the Terms of Use ask you not to redistribute listings you found through the app.
6 Who else processes your data
| Recipient | Purpose | What they receive |
|---|---|---|
| Apple | Sign-in, subscriptions, and payments | Your Apple account identity and purchase records; Apple's own privacy policy governs this |
| Our hosting provider | Running our servers and database | All data described above, stored on servers we control |
| AI provider | CV improvement suggestions, with your consent | The CV text the request needs, with your name, email, phone number and links removed; what they do with it is governed by their own published terms, as described in section 4 |
| Job source APIs | Finding relevant jobs | Search criteria only |
7 Where data is stored and for how long
Your data is stored on servers we control. We keep:
- your account, profile, CV files, the text extracted from them, your scores and your history for as long as your account exists — deleting your account deletes them, as described below;
- job listings, which come from employers and job sources rather than from you, for the retention window recorded against each source: 7 days for the credentialed aggregator feeds (Adzuna, Jooble, Careerjet) and 30 days for the employer job boards (Greenhouse, Lever, Teamtailor, SmartRecruiters, Workable, Oracle Recruiting, Workday, Ashby). A scheduled fetch keeps them fresh; the automated sweep that deletes a listing once its window has passed is still being built, so until it ships a listing can stay in our database past its window;
- technical logs on the server, which rotate by size — only the most recent files are kept — rather than after a fixed number of days. A specific log retention period has not been set yet, and it will be stated here once it is.
Payment records are retained where required for tax and accounting purposes. Those are the records Apple sends us about a subscription — the plan, its status, and transaction identifiers — never your CV or anything in it.
What deletion means, including for backups. Deleting your account removes the database rows and the stored files themselves from the live systems. What we deliberately keep afterwards is a dated deletion receipt recording that the deletion ran: it holds the internal account id and timestamps, and no CV content, no name and no email address. We do not rebuild a deleted account, and support cannot restore one. Where a copy of your data still exists in an operational backup or in a rotating server log at the moment you delete, that copy is not used to restore anything and passes out of use on that copy's own rotation cycle rather than being edited in place. If we begin keeping longer-term backups, we will state their retention period here before we do.
8 Your choices and rights
- Access — you can view your profile, CV versions, scores and application history in the app. There is no automated export yet: if you need a copy of your data in a portable form, email us and we will put it together for you.
- Correction — every field extracted from your CV is shown to you and can be corrected; extraction is never assumed to be right.
- Deletion — you can delete your account from inside the app, in the Delete account section at the bottom of Settings. This deletes your profile, CVs, extracted content, scores, history and session tokens, and revokes the Sign in with Apple token. It does not cancel your Apple subscription, which you manage in your Apple account settings.
- Withdrawing consent — AI processing consent can be withdrawn at any time without losing access to the rest of the app.
Depending on where you live, you may have further rights under local data protection law. Contact us and we will respond — see Support for how to reach us.
9 Security
We protect your data with encrypted transport, access controls, private storage that is never publicly readable, and short-lived signed links for file access. Uploaded files are validated and held in a restricted area before they are processed. No system is perfectly secure, and we do not claim otherwise.
10 Age
Hire Me is a job-search product, not a product for children. You must be at least 16 to use it, the Terms of Use say the same thing, and the App Store listing is rated to match. We do not knowingly collect data from anyone under 16, and if we learn that an account belongs to someone under that age we delete it. If you believe a child has created an account, write to support@hire-me.app.
11 Changes
If we change how we handle your data we will update this policy and, for material changes, ask for your consent again inside the app.