Privacy Policy
Plain English summary: Your resume data stays on your device. It only leaves if you use an AI feature — and we don't store it. We collect anonymous usage analytics (no names, no resume content) to understand how the app is used and improve it. No accounts, no ads, no data sales.
1. Who We Are
Sealed is an iOS, iPadOS and macOS app operated by an individual developer based in Australia. For privacy questions, use our contact form.
2. What We Collect
Resume content — everything you type in the app (name, employment history, skills, etc.) is saved only on your device. We never see it unless you use an AI feature.
Subscription status — if you buy Pro, Apple handles the transaction. We only receive a yes/no confirmation of your subscription status via StoreKit.
Anonymous usage analytics — we use PostHog to collect anonymous event data that helps us understand how the app is used and identify issues. This includes:
- App lifecycle events (app opened, app backgrounded)
- Feature usage events (resume created, PDF exported, AI feature used, ATS score checked, etc.)
- Two anonymous boolean/numeric properties: whether you are a Pro subscriber, and how many resumes you have
A random anonymous identifier is generated on first launch and stored locally on your device. It is not linked to your name, email, or any resume content. No resume content is ever sent to PostHog.
Support messages — if you contact us via the contact form, we receive your email and message. That's it.
We have no user accounts, collect no location data, and run no advertising.
3. AI Features
AI features are optional and off by default. When you enable them (Settings → Privacy) and use a feature, the relevant resume content is sent over an encrypted connection to our API, which forwards it to Anthropic's Claude AI model. The result is returned to your device.
We do not store or log the content of API requests on our end.
Anthropic retains API inputs and outputs for up to 30 days for trust & safety purposes, after which they are deleted. Anthropic does not use API data to train its models. See Anthropic's Privacy Policy for details.
You can withdraw consent at any time by toggling AI Features off in Settings. This immediately stops any further data transmission.
4. Third-Party Processors
| Processor | Purpose | Privacy Policy |
|---|---|---|
| Vercel Inc. (US) | API hosting | vercel.com |
| Anthropic, PBC (US) | AI processing (Claude) — 30-day retention | anthropic.com |
| Formspree, Inc. (US) | Contact form delivery | formspree.io |
| PostHog, Inc. (US) | Anonymous usage analytics — no personal data or resume content | posthog.com |
| Apple Inc. | Subscription transactions | apple.com |
We do not sell your data. Processors are contractually restricted to the purposes listed above.
When you use AI features, your resume content is transferred to the United States for processing. You can avoid this entirely by not enabling AI features.
Anonymous analytics data is transferred to the United States (PostHog US cloud) for processing.
5. Security
- All data sent to our API uses TLS encryption in transit.
- Resume data on your device is protected by iOS sandboxing and built-in data protection.
- Our API requires a private key — it is not publicly accessible.
No system is perfectly secure. If you spot a security issue, please let us know via the contact form.
6. Your Rights
You can request access to, correction of, or deletion of any personal information we hold about you (primarily support correspondence, since resume content stays on your device). Use the contact form and we will respond within 30 days.
7. Children
The app is not intended for children under 13. If you believe a child has submitted personal information to us, use the contact form and we will delete it promptly.
8. Changes to This Policy
We will update the effective date when this policy changes. Continued use of the app after changes take effect constitutes acceptance of the revised policy.
9. Contact
Questions or privacy requests? Use our contact form. We aim to respond within 30 days.