SeeVit Privacy Policy

SeeVit is a mobile application for iPhone and Android, published by Repleto UG (haftungsbeschränkt) (“Repleto”, “we”, “us”), Cremon 11, 20457 Hamburg, Germany. For the purposes of the EU and UK General Data Protection Regulation we are the data controller for the personal data described below.

Questions about this policy, or about your data, go to dev@repleto.io.

Account details. Your email address, and your name and email if you use Sign in with Google, or Sign in with Apple on an iPhone or iPad. If you sign in with Apple and choose to hide your email, we only ever receive Apple’s relay address.

Your CV. The file you upload, the text extracted from it, the language it is written in, and the structured reproduction we build from it so it can be re-rendered as a PDF. Every tailored version and cover letter generated from it is stored too, so you can go back to a previous application.

Your search preferences. The job titles you search for, your locations, companies you exclude, and your preferred work setup (on-site, hybrid or remote).

Your tailoring rules. The per-topic limits you set for what the app may change on your CV, any free-text rules you add, and the sign-off you use on cover letters.

Usage and subscription records. A count of the metered actions you have taken (CVs added, searches run, jobs applied to) so we can apply your plan's limits, and your current plan and its expiry, mirrored to us by RevenueCat when you subscribe. We never see or store your card details. The App Store or Google Play handles payment, depending on where you bought.

Technical data. A push notification token if you allow notifications, plus basic diagnostic information such as app version and error reports needed to keep the app working.

Some of the app runs entirely on your device, and the data involved is never transmitted to us or to anyone else:

• Voice dictation. When you tell the app what to change on your CV out loud, the recording is converted to text by a speech model running on your phone. The audio is not uploaded, not stored by us, and not sent to any third party. Only the resulting text is used, and only within the app.
• Face ID, Touch ID and Android biometrics. Biometric authentication is handled by your phone’s operating system. We are told whether it succeeded, never anything about your face or fingerprint.
• Your offline copy. The app keeps a local database on your device so it works without a connection. Deleting the app removes it.

Under GDPR we rely on performance of a contract for everything needed to deliver the service you paid for: storing your CV, finding matching jobs, analysing a job description, generating a tailored CV and cover letter, and applying your plan's limits.

We rely on legitimate interests for keeping the service secure and working, preventing abuse of usage limits, and keeping records of what was charged. We rely on consent for push notifications and for processing the contents of a CV you choose to upload. You can withdraw either at any time.

We do not sell your data. We do not use your CV to train our own models, and we do not build advertising profiles.

We use the following providers. Each one only receives what it needs to do its job.

• Supabase. Database, authentication and file storage. Your account, CV files and generated documents live here.
• PowerSync. Keeps the copy on your device in step with the server so the app works offline.
• RevenueCat, Apple and Google. Purchases and subscription status. The App Store or Google Play processes the payment, depending on where you bought. We receive only whether you have an active plan and when it expires.
• EURouter. The only AI provider that receives your CV. Processing takes place in the European Union. See the next section.
• Amazon Web Services. Only if you use the “add a CV by email” feature, which receives your reply and the attached file.
• Job sources. Bright Data and public job boards. Your search terms are sent to find listings. Your CV is never sent to a job board or an employer by us. Applying is something you do yourself, with the document we generate.
• Expo. App updates and delivery of push notifications.

Tailoring a CV means sending its text, along with the job description, to a large language model. This is the part of the service most worth understanding.

We send the minimum needed: the text of your CV, the job description, and the rules you set for what may be changed. We do not send your email address, your name as an account identifier, your payment details or your search history. EURouter acts as our processor and is contractually barred from using your content to train models.

The same applies to the one step that works differently. When you first upload a CV, a model builds a visual reproduction of the document so it can be re-rendered as a PDF. That step uses a fixed model rather than one you choose, and it runs through the same EU provider as everything else.

The content of your CV is processed inside the European Union. The AI provider that reads it, EURouter, processes it on EU servers, and no other AI provider receives it.

Some of the other providers listed above operate outside the European Economic Area, principally in the United States: Apple, Google and RevenueCat for your subscription, Expo for app updates and push notifications, and the job sources we query with your search terms. Where that is the case we rely on the European Commission's Standard Contractual Clauses, or on an adequacy decision where one applies, to protect your data in transit and at rest. Those providers handle your account and billing metadata; none of them receives the text of your CV.

Your CV, its tailored versions and your preferences are kept for as long as your account exists, because they are the product. You can reopen an application you made months ago. Delete a CV in the app and the file and its generated versions are removed.

When you close your account we delete your personal data as described on the account deletion page. Two things outlive it: records of purchases, which we and the app store you bought from must keep for tax and accounting purposes, and an internal count of metered actions, retained without anything identifying you, so our billing records reconcile.

If you are in the EU, the UK or another jurisdiction with comparable law, you have the right to access your data, correct it, delete it, restrict or object to how we use it, receive a portable copy, and withdraw consent. If you are in California, you have the right to know what we collect, to delete it, and not to be discriminated against for asking, and we confirm again that we do not sell personal information.

Exercise any of these by writing to dev@repleto.io from the address on your account. We respond within 30 days. If you think we have handled your data badly, you may complain to your national data protection authority.

Data is encrypted in transit. Access to your rows is restricted at the database level so one account cannot read another's, and your session credentials are held in the operating system’s secure store, the iOS keychain or the Android keystore. No system is perfect, but the app is built so that a mistake in one part of it does not expose another user's CV.

SeeVit is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

If we change how we handle your data we will update this page and move the date at the top. Where a change materially affects your rights we will tell you in the app before it takes effect.