Privacy policy

Last updated October 3, 2026

Resume Feed (“we”) runs the Resume Feed website and Android app, where members share their resumes and give each other feedback. This policy explains what we collect, why, who can see it, and how you can delete it.

What we collect

Account details: your email address and password (stored hashed by our sign-in provider), or the name, email and profile picture Google shares if you sign in with Google.
Profile: your name, role, bio, profile photo, and any LinkedIn, GitHub or website links you add.
Resumes you post: the PDF file, its title and caption, and a picture of its first page that we generate for the feed. A resume usually contains personal information about you, such as your work history and contact details — you choose what is in it.
Your activity: comments and replies (including any resume text you quote), reactions, ratings, and the notifications they create.
Safety records: members you block and reports you file.
Device information: if you allow notifications in the Android app, a push token that identifies your app installation so we can send alerts.
Technical logs: our servers and hosting provider record requests, including IP addresses and times, to run and secure the service.

We do not use advertising or analytics trackers, and we do not collect your location, contacts, or photos beyond the profile photo you pick.

How we use it

To create and secure your account and keep you signed in.
To show your profile, resumes and feedback to other members, and to anyone when you make a resume public.
To check each uploaded PDF is a readable resume before it is posted. This check runs automatically on our own servers; no person reads your resume to do it.
To notify you about comments, replies, reactions and ratings.
To review reports, enforce our community rules, and prevent abuse.

We do not sell your personal information or share it for advertising.

Who can see it

Your profile, resumes, comments and reactions are visible to every signed-in member. Resume files sit in private storage and are shown through links that expire after ten minutes. Individual ratings are not shown — only each resume’s average and count. Members you block, and members who block you, cannot see each other’s resumes or comments.

Resumes are members-only unless you make them public. People who are not signed in see only a members-only resume’s average rating and its comment and reaction counts — never the file, its title or caption, or who posted it.

You can make a resume public when you post it, or later. Anyone with its link can then read it without signing in: the file, its title and caption, your name, photo and role beside it, and the comments written after it went public, with their authors’ names. Comments written while it was members-only stay members-only. Public resumes are marked so search engines don’t list them, but anyone who reads one can save or share it. You can make it members-only again at any time.

When you comment on someone else’s public resume, we tell you before you write that anyone can read your comment, with your name, photo and role. Your profile page stays visible to signed-in members only.

Push alerts on your lock screen only say what kind of activity happened (“New comment”), never who did it or what they wrote.

Services that process data for us

Supabase — sign-in, database and file storage.
Vercel — hosting for the website and API.
Expo and Google Firebase Cloud Messaging — delivery of push notifications to the Android app.
Google — only if you choose to sign in with Google.

They process data on our behalf to provide these services. Data is encrypted in transit between the app, our servers and these services.

How long we keep it

We keep your information while your account exists. Deleting a comment removes it; if others had replied, a blank “removed” placeholder stays so their replies still make sense. When you delete your account, we delete your data as described on the account deletion page. Copies may remain in our providers’ backups and logs for a limited time until they are overwritten.

Your choices and rights

Edit your profile at any time from your account settings.
Delete any of your comments, and any comment on your own resume.
Turn push notifications off in your device settings.
Delete your account and its data from the app (Account → Delete account) or the website — see how to delete your account.
Ask us for a copy of your data, or to correct or delete it, by contacting the developer contact address on our Google Play listing. Depending on where you live, you may also have the right to complain to your data protection authority.

Children

Resume Feed is not meant for anyone under 16, and we do not knowingly collect data from them. If you believe a child has an account, contact us and we will delete it.

Changes and contact

We will update this page when our practices change and revise the date above. For any privacy question, contact the developer contact address on our Google Play listing.

What we collect

Account details: your email address and password (stored hashed by our sign-in provider), or the name, email and profile picture Google shares if you sign in with Google.

Profile: your name, role, bio, profile photo, and any LinkedIn, GitHub or website links you add.

Resumes you post: the PDF file, its title and caption, and a picture of its first page that we generate for the feed. A resume usually contains personal information about you, such as your work history and contact details — you choose what is in it.

Your activity: comments and replies (including any resume text you quote), reactions, ratings, and the notifications they create.

Safety records: members you block and reports you file.

Device information: if you allow notifications in the Android app, a push token that identifies your app installation so we can send alerts.

Technical logs: our servers and hosting provider record requests, including IP addresses and times, to run and secure the service.

We do not use advertising or analytics trackers, and we do not collect your location, contacts, or photos beyond the profile photo you pick.

How we use it

To create and secure your account and keep you signed in.

To show your profile, resumes and feedback to other members, and to anyone when you make a resume public.

To check each uploaded PDF is a readable resume before it is posted. This check runs automatically on our own servers; no person reads your resume to do it.

To notify you about comments, replies, reactions and ratings.

To review reports, enforce our community rules, and prevent abuse.

We do not sell your personal information or share it for advertising.

Who can see it

Push alerts on your lock screen only say what kind of activity happened (“New comment”), never who did it or what they wrote.

Services that process data for us

Supabase — sign-in, database and file storage.

Vercel — hosting for the website and API.

Expo and Google Firebase Cloud Messaging — delivery of push notifications to the Android app.

Google — only if you choose to sign in with Google.

They process data on our behalf to provide these services. Data is encrypted in transit between the app, our servers and these services.

How long we keep it

Your choices and rights

Edit your profile at any time from your account settings.

Delete any of your comments, and any comment on your own resume.

Turn push notifications off in your device settings.

Delete your account and its data from the app (Account → Delete account) or the website — see how to delete your account.

Ask us for a copy of your data, or to correct or delete it, by contacting the developer contact address on our Google Play listing. Depending on where you live, you may also have the right to complain to your data protection authority.