Privacy Policy
This policy explains what the Carevo mobile app and this website do with your information. In short: your CVs and documents stay on your device. An account is optional. The app sends anonymous usage statistics, and uses Google services for analytics, crash reports, notifications and ads.
1. Data stored only on your device
The following are stored only in the app’s private storage on your phone and are never uploaded to our servers, including when you are signed in:
- Your CVs and CV photos (photos are cropped and compressed before saving; the original is not kept).
- Job applications, cover letters, interview answers and preparation notes.
- Documents you scan or import, files you export, and your app settings.
Files leave your device only when you choose to save, share or print them. CV Match runs entirely on your device; job descriptions you paste are not uploaded. Reminders are local notifications scheduled on your device.
Temporary copies made while you pick a photo, scan pages or import a file are deleted as soon as Carevo has stored its own copy.
Uninstalling the app deletes all of this data from your device. Settings → Clear all data also deletes it, together with scheduled reminders, temporary files, your CV defaults and theme, and it signs you out on that device (your account itself is not deleted; see below). It also resets the anonymous usage-statistics ID and the Firebase Analytics app-instance ID. It keeps only your interface language and a few technical flags (that onboarding was completed, that notification permission was already requested, how many free exports were used and whether you rated the app). We cannot recover deleted data.
2. Optional Carevo account
You can use Carevo without an account. If you create one, our server stores:
- Your name and email address.
- Your password, stored only as a one-way hash (we cannot read it).
- Sign-in tokens for your devices (stored as hashes; they expire after 90 days) and the date your account was last active.
Requests to our API are logged with the time, the address requested, the result and the response time, and your account ID if you are signed in. These logs do not contain your IP address, are used to keep the service working and secure, and are deleted after 90 days.
Signing in does not upload, replace or delete the CVs saved on your device. Signing out removes the sign-in token.
Deleting your account: you can permanently delete your account at any time on https://carevo.phoenixintstudios.com/account/delete by confirming your email address and password. Deletion is immediate: your name, email address, password hash, sign-in tokens, activity dates and website sessions are erased, and every device is signed out. API log entries are unlinked from your account and expire after 90 days; anonymous usage statistics were never linked to your account. CVs and documents on your device are not affected; remove them with Settings → Clear all data or by uninstalling the app.
3. Anonymous usage statistics
To understand which features are used, the app sends usage events (for example “CV created”, “export succeeded” or “CV Match used”) to our server. Each event contains:
- A random installation ID created by the app (not linked to your account, device hardware or advertising ID).
- The app version, platform (Android or iOS) and interface language.
- Limited, predefined details such as the template name, export format or a CV Match score range.
Events never contain your CV content, job descriptions, interview answers, file names or other free text. We do not store your IP address with these events (it is used briefly to limit abusive traffic). Events are kept for up to 400 days. Using Clear all data or reinstalling the app creates a new installation ID, and unsent events are discarded.
The app also downloads its configuration (which features are switched on and whether an update is required). This request contains only the platform name.
4. Google services in the app
- Firebase Analytics collects app usage events and device information (such as device model, operating system and an app-instance ID) to produce usage statistics.
- Firebase Crashlytics collects crash reports (device and app state at the time of a crash) so we can fix problems.
- Firebase Cloud Messaging uses a device token so the app can receive notifications.
- Google AdMob shows ads (banners, interstitials and optional reward videos that unlock exports). To show and measure ads, Google may collect device information such as the advertising ID and IP address, according to your consent choices. Where required (for example in the EEA and the UK), the app asks for your consent with Google’s consent form, and you can change your choice later in Settings → Ad privacy choices. Ads never receive your CV content.
These services are provided by Google, which processes this data under its own terms. See Google’s Privacy Policy and how Google uses information from apps that use its services.
5. This website
- The website sets a session cookie and a security (CSRF) cookie that are needed for it to work. The session record stores your IP address and browser user agent and expires after 120 minutes of inactivity.
- Fonts are loaded from Bunny Fonts, which receives your IP address to deliver them.
- The website does not use analytics, advertising or tracking tools.
6. Sharing
We do not sell your personal data. Data is shared only with the service providers described above (Google for Firebase and AdMob, Bunny Fonts) and with the company hosting our servers, only as needed to run the service, or where required by law.
7. Your choices
- Use the app without an account, or sign out at any time.
- Delete everything on your device with Settings → Clear all data, or by uninstalling the app.
- Change your ad consent in Settings → Ad privacy choices (where available), and reset or delete your advertising ID in your device settings.
- Turn notifications off in your device settings.
- Delete your account on https://carevo.phoenixintstudios.com/account/delete, or ask us for a copy of your account data at phoenixinternationalstudios@gmail.com
8. Changes
We will update this page when the app or website changes how data is handled, and change the “Last updated” date above.
9. Contact
Questions about this policy: phoenixinternationalstudios@gmail.com