Privacy Policy

1. Controller / Data Controller

Nevyron LLC
75 E 3rd St, Ste 7
Sheridan, WY 82801, USA
Email: support@nevyron.com

This Privacy Policy explains how Nevyron LLC ("we", "us", "our") collects, uses, and protects your personal data when you use the Nevyron JobSnap — AI Job Tracker mobile application ("the App") on iOS or Android.

2. Data We Collect and Why

2.1 Account Data

When you create an account, we collect:

• Email address and display name — via Firebase Authentication (Google LLC). You may sign in with email/password, Google Sign-In, or Sign in with Apple. This data is required to identify your account and sync your data across devices.
• Apple ID anonymised relay email — if you use Sign in with Apple, Apple provides a relay address that we store instead of your real email, unless you choose to share it.

Legal basis (GDPR): Performance of contract (Art. 6(1)(b) GDPR).

2.2 Job Application Data

The core purpose of the App is to help you manage job applications. When you import or manually add a job, we store in Google Cloud Firestore (Firebase):

• Job title, company name, job URL, location, salary information
• Application status (Saved, Applied, Interview, Offer, Rejected)
• Your personal notes on the application
• AI-generated cover letters (stored so you can access them later)
• Application timestamps and reminder dates

This data is linked to your user account and is stored as long as you keep your account active. Legal basis: Performance of contract.

2.3 CV and Resume Data

To generate personalised cover letters, you may optionally upload your resume. We store:

• Resume text extracted from PDFs or entered manually — stored locally on your device and optionally synced to Firestore
• Profile fields — name, job title, skills, experience summary — stored in Firestore under your user account
• PDF files of resume versions — stored locally in the app's sandboxed directory on your device; not uploaded to our servers

Legal basis: Performance of contract and legitimate interest (providing cover letter generation).

2.4 AI Prompt Data (Gemini API)

When you import a job or generate a cover letter, we send data to Google's Gemini API:

• Job description text (extracted from the webpage or entered manually)
• Your resume/CV text (for cover letter generation and job matching)

We do not store these prompts on our servers. They are transmitted directly to Google's Gemini API and are subject to Google's Privacy Policy. Please do not include sensitive personal data in your job notes beyond what is necessary for the App's intended purpose.

Legal basis: Legitimate interest (providing AI-powered features).

2.5 In-App Purchase Data

If you purchase "Unlock Unlimited", the transaction is processed entirely by Apple (App Store) or Google (Google Play). We receive:

• Entitlement status (whether you have unlocked the paid tier)
• Transaction identifier (for restore purchases)

We do not use RevenueCat or any third-party payment processor beyond Apple/Google platforms. We do not receive your payment card details. Legal basis: Performance of contract.

2.6 Crash and Diagnostics Data

We use Firebase Crashlytics (Google LLC) to detect and diagnose crashes. This collects:

• Crash logs, stack traces
• Device model, iOS/Android version
• App version, time of crash

No personal identifiers (name, email) are included in crash reports. Legal basis: Legitimate interest (maintaining app stability).

2.7 Analytics

We use Firebase Analytics (Google LLC) to understand how features are used. This includes:

• Screen views and feature interactions (e.g. cover letter generated, job imported)
• Session duration, app opens
• Device country, language setting

We do not use advertising identifiers (IDFA/GAID). Analytics data is aggregated and not linked to your personal identity. Legal basis: Legitimate interest (improving the App).

2.8 Firebase App Check

We use Firebase App Check with Apple's DeviceCheck and Google's Play Integrity API to verify that requests to our backend come from genuine versions of our App. This generates a short-lived attestation token. No personal data is transmitted or stored as part of this process. Legal basis: Legitimate interest (security).

3. Third-Party Services

Each provider processes data under their own privacy policies. Google's privacy policy is available at policies.google.com/privacy. Apple's privacy policy is available at apple.com/privacy.

4. Data Retention

• Account and job data: retained as long as your account is active. You can delete your account at any time from Settings → Delete Account, which permanently removes all cloud data.
• Local CV files: stored on your device only; removed when you delete the App or use the in-app "Delete this version" option.
• Crash logs: retained by Firebase Crashlytics for 90 days.
• Analytics data: aggregated; retained per Firebase Analytics default (up to 14 months).

5. Your Rights (GDPR / UK GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: correct inaccurate or incomplete data.
• Right to erasure: delete your account and all associated cloud data in-app, or request deletion by email.
• Right to data portability: request your data in a machine-readable format.
• Right to object: object to processing based on legitimate interest.
• Right to restrict processing: request that we limit how we use your data.

To exercise any right, contact us at support@nevyron.com. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.

6. California Privacy Rights (CCPA/CPRA)

California residents may request disclosure of personal information collected, categories of sources, business purpose, and any third parties we share it with. We do not sell personal information. To submit a request, email support@nevyron.com.

7. Children's Privacy

Nevyron JobSnap is not directed at children under 13 years of age (or under 16 in the EEA/UK). We do not knowingly collect personal data from children. Account creation requires age confirmation. If we become aware that a child has provided us with personal data without appropriate consent, we will delete it promptly. Contact us at support@nevyron.com if you believe this has occurred.

8. Data Security

We use industry-standard security measures including:

• HTTPS/TLS for all data in transit
• Firebase Security Rules restricting access to data owned by the authenticated user only
• Firebase App Check to prevent unauthorised API access
• No sensitive data (passwords, payment details) processed or stored by us

9. International Data Transfers

Your data is processed and stored on Google's servers, which are located in the United States and other countries. Google is certified under the EU-U.S. Data Privacy Framework and provides appropriate safeguards for international transfers. For more details, see firebase.google.com/support/privacy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via an in-app notice or an update to the "Last updated" date above. Continued use of the App after changes constitutes acceptance of the revised policy.

11. Contact

For privacy questions, data deletion requests, or any other inquiries:

Nevyron LLC
75 E 3rd St, Ste 7 · Sheridan, WY 82801, USA
Email: support@nevyron.com