Privacy policy

1. Who we are

Sivio is made by Ozgur Ozbek, an individual app developer in the United Arab Emirates. He decides how the personal data described here is used, so he is its “controller” under data protection law. “We” and “us” in this policy mean him.

Contact for anything about privacy: support@sivio.ai.

2. What stays on your iPhone

Almost everything you put into Sivio stays on your iPhone and is never sent to us:

• your record: your jobs, the facts about them and their Led / Did / Helped tags, education, skills and languages;
• the personal details you add, such as your name, contact details, photo, nationality or date of birth;
• the CV files you import, the job ads you save, your tailored CVs and letters, and the applications tracker, including the exact files you sent.

Text is taken out of your files and photos on your iPhone. Sivio stores everything in its own private storage on the phone, which iOS encrypts: after your iPhone restarts, Sivio’s files can’t be read until you unlock it. Like any app’s data, it is included in your iPhone’s own backups (iCloud Backup, or a backup on a computer) if you make them.

Settings › Download my record makes a backup file of your record and applications that you can save wherever you choose. Sivio doesn’t encrypt that file, so keep it somewhere safe.

When you apply by email, the email goes from your own Mail account; we don’t see it. Follow-up reminders are set on your iPhone.

3. iCloud (optional)

If you’re signed in to iCloud, Sivio can keep a copy of your record, applications, saved jobs, photo and sent files in your own private iCloud database (Apple’s CloudKit), so they follow you to a new iPhone. Apple stores that copy in your iCloud account, under Apple’s terms, and it counts towards your iCloud storage. We have no account with you and can’t read it.

To stop syncing, turn Sivio off in your iPhone’s iCloud settings (Settings › your name › iCloud). Everything stays on the phone.

4. What is sent, and when

Nothing is sent to the AI until you allow it on the screen “Before anything leaves this phone”. You can switch it off at any time in Settings › AI; Sivio then still keeps your record, makes your general CV and tracks applications.

Once allowed, text is sent only when you ask for one of these:

Reading a CV you add

The CV’s text, after your email addresses, phone numbers and web links (such as your LinkedIn address) have been taken out on your phone. The rest of the text is sent as it is, including your name and anything else written on the CV, such as a home address or date of birth. The file’s name reaches our server but isn’t passed to the AI or recorded.

Reading a job ad, writing a CV or letter, fixing a line

Your work record (jobs, employers, job titles, places, dates, facts and their tags, education, certifications, skills and languages), the job ad’s text, the company and job title, and your answers to Sivio’s questions about the ad. For a cover letter, also your reason for applying, the tone and length you chose, and the name of the person you’re writing to, if you give one. Your own name and contact details aren’t part of this.

Never sent: your email address, phone number, links, photo, contacts, the applications tracker, or any file or text you didn’t add.

Each request also carries a random install ID, Apple’s signed proof of your subscription if you have one, and an App Attest signature. Sections 6 and 7 explain them.

Invite a friend uses the same kind of request but sends no text and nothing to the AI: only those three, plus the code if you enter a friend’s.

5. Anthropic’s Claude

Our server passes the text to the Claude API of Anthropic PBC and sends Claude’s answer back to your phone. Anthropic processes it on our behalf, as our processor, under its Commercial Terms, which say Anthropic may not train models on its customers’ content.

• Training. Anthropic says that, by default, it will not use your inputs or outputs from our commercial products to train its models, and lists the Anthropic API among them (Anthropic Privacy Center, updated 18 August 2026). We don’t opt in to any training or feedback programme.
• How long Anthropic keeps it. For API customers, Anthropic says it will automatically delete inputs and outputs on our backend within 30 days (Anthropic Privacy Center, updated 1 July 2026). The exceptions it lists: if its automated safety systems flag a request as breaking its Usage Policy, it may keep the inputs and outputs for up to 2 years; and it may keep data where the law requires.
• No zero-retention arrangement. Anthropic offers “zero data retention” only by separate agreement. We don’t have one, so the 30-day rule above applies.
• Where. Anthropic says data is stored in the US, and that it may route requests to the US, Europe, Asia and Australia (Anthropic Privacy Center, updated 15 June 2026).

6. What our server keeps

Our server is a small program on Cloudflare Workers. It reads each request in memory, calls Claude, and sends the answer back. It doesn’t save the text of your CVs, job ads, record or answers, and doesn’t write any of it to its logs.

It keeps only these, in a Cloudflare database:

Your plan’s allowance

For a subscription: Apple’s original transaction ID for it and when the current period started; and for each tailored CV or letter, a code made from the app’s random ID for the job and a short fingerprint of the ad’s text (not the text itself), with the date and how many times it was written.

Free ad readings

The same kind of code for each of your 3 free readings, kept against your install ID.

Daily limits

How many CV readings and line fixes your install ID used each day, and how much the whole service spent on AI that day.

App Attest

For each install, the public half of a key your iPhone made, a counter, whether it’s a test or App Store build, when it was registered and when it was last used. One-time challenges expire after 5 minutes and are deleted within a day.

Invite a friend

If you open Settings › Invite a friend: your install’s 6-character invite code, when it was made and last asked for, and until when your install was last seen with a plan. If you enter a friend’s code: which code your install used, and when your record was made and your first paid period started. For the person who invited you: the creations earned (1 when your record is made, 3 when you subscribe while they have a plan), and the creations they made with them. Only random codes and install IDs: no names, emails or contacts, and neither of you learns who the other is.

For each request, our server also writes one log line: the address called (for example /v1/tailor), the result, how long it took, the AI model, the amount of text processed and its cost, the plan type, and the App Attest result. The line contains no text you wrote, nothing that identifies you or your install, and no IP address. Cloudflare stores it with the address called and its own number for the request.

The install ID is a random number Sivio makes the first time it’s needed and keeps in your iPhone’s keychain, on that phone only (it survives reinstalling the app). It isn’t linked to your name, Apple ID or email. It’s used only for the free readings, the daily limits, App Attest and invites.

Cloudflare runs our server, so it handles the connection from your phone, including your IP address, to deliver and protect the service.

How long we keep them. Our server deletes these automatically once a day: subscription counts 13 months after the plan period they belong to started; the codes for free readings 24 months after they were written (so the three free readings can't simply start again); daily totals after 35 days; App Attest keys 12 months after they were last used; challenges when used, or within a day of expiring; earned invite creations 30 days after they expire (each lasts 12 months), and the creations made with them 13 months after they were earned; which invite code an install used 24 months after it was used; an install’s own invite code 24 months after it was made, last asked for or last seen with a plan, whichever is latest. Cloudflare's own per-request logs are switched off for our server.

7. Purchases, App Attest and Apple

• Purchases. Subscriptions are sold and charged by Apple. We never see your name, Apple ID, email address or payment details. When you use a paid feature, the app sends Apple’s signed record of your current subscription. Our server checks Apple’s signature, that it’s for Sivio and that it’s still valid, and keeps only the counting data in section 6. Refunds are handled by Apple.
• App Attest. Apple’s App Attest lets our server check that a request comes from a genuine copy of Sivio on a real Apple device. Your iPhone makes a key that stays in its secure hardware; Apple vouches for it once, and we keep only its public half. It doesn’t tell us who you are.
• Crash reports. If you’ve chosen in iOS to share analytics with app developers, Apple may share crash reports and usage statistics about Sivio with us. You control this in Settings › Privacy & Security › Analytics & Improvements.

Apple’s own privacy policy covers the App Store, iCloud and these services.

8. This website and emails to us

sivio.ai has no cookies of its own, no analytics, no ads and no scripts. It’s served by Cloudflare, which processes visitors’ IP addresses to deliver and protect the site, and may set a strictly necessary security cookie if it needs to check that a visitor isn’t a bot.

If you email support@sivio.ai, we get your email address and whatever you write or attach. Cloudflare Email Routing passes it on to our mailbox. We use it only to answer you, and delete it 12 months after the conversation ends. Please don’t send your CV unless we ask for it.

9. Deleting your data

Settings › Erase everything removes your record, applications, saved job ads and kept files from your iPhone and, if iCloud sync is on, from your iCloud too. It can’t be undone.

It doesn’t reach:

• backup files you saved with Download my record, and copies in your iPhone’s own backups until they’re replaced;
• files you’ve already sent to employers;
• Anthropic’s copy, which Anthropic deletes on its own schedule (section 5);
• our server’s counters, which belong to your App Store subscription rather than your record and contain no text and no name (section 6).

Deleting the app deletes its data from your iPhone, though the install ID may stay in the keychain. Turning off Settings › AI stops anything more from being sent.

10. Our legal reasons

Laws such as the GDPR ask us to name the legal reason for each use of your data:

• To give you what you ask for (our contract with you): reading your CVs and job ads, writing CVs and letters, checking your subscription and counting your allowance.
• Your consent: sending text to the AI starts only after you allow it, and you can withdraw that at any time in Settings › AI.
• Our legitimate interests in keeping the service secure and affordable and stopping abuse: App Attest, the install ID, the daily limits and the log lines. They contain no text you wrote and no name.

A CV can reveal sensitive details, such as health, religion or trade-union membership. Please leave out anything you wouldn’t want on a CV. If you include such details, they are processed only because you chose to include them and asked for the reading or rewrite.

Sivio makes no decisions about you with legal or similarly serious effects. The AI drafts text; you decide what to keep and send.

11. Where your data goes

Most of your data never leaves your iPhone. What is sent passes through Cloudflare’s network (our server normally runs in a data centre near you) and is processed by Anthropic, which stores data in the US. Both are US companies. When personal data from the UAE, the EU or the UK goes to a country without equivalent protection, we rely on the safeguards in their data processing terms, such as the European Commission’s standard contractual clauses.

12. Your rights

Most of your data is on your iPhone, so you can see it, copy it (Download my record), correct it and delete it (Erase everything) yourself at any time. For anything we hold, such as the counters in section 6 or emails you’ve sent us, write to support@sivio.ai. We’ll answer within one month and won’t charge you. We may ask a question to make sure a request is really yours. Because the counters aren’t linked to a name, we may need your help to find the ones that are yours.

United Arab Emirates

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) you can ask us for information about how we process your data; for a copy of it in a machine-readable form; to correct, complete or erase it; to restrict or stop processing it; and not to be subject to decisions made only by automated processing that seriously affect you. You can also complain to the UAE Data Office.

European Union, EEA and United Kingdom

Under the GDPR and the UK GDPR you can ask to access, correct, erase or restrict your data, or to receive it in a portable form. You can object to processing based on our legitimate interests, and withdraw your consent at any time (this doesn’t affect what was done before). You can complain to the data protection authority where you live or work; in the UK, that’s the Information Commissioner’s Office.

United States, including California

We don’t sell or share personal information (as California law defines those words), we don’t use it for targeted advertising, and we don’t build profiles of you. Wherever you live in the US, you can ask to know what we hold about you, to correct it and to delete it, and we won’t treat you differently for asking.

Everywhere else

We give the same rights to everyone. In Saudi Arabia, the Personal Data Protection Law gives you similar rights, and you can complain to the Saudi Data and AI Authority (SDAIA). In the Philippines, the Data Privacy Act of 2012 does, and you can complain to the National Privacy Commission.

13. Children

Sivio is made for people looking for work. It isn’t directed at children, and we don’t knowingly collect personal data from anyone under 13. If you think a child has sent us information, write to us and we’ll delete what we hold.

14. Security

Every connection uses HTTPS. App Attest helps keep anything but genuine copies of the app away from our server. Your data on the phone is protected by iOS encryption. Our server stores no text you wrote, and only the developer can reach it. No system is perfect: if a breach affected your data, we would tell you and the authorities as the law requires.

15. Changes to this policy

When we change this policy, we’ll update the date at the top. If a change matters, for example a new kind of data or a new company receiving it, we’ll tell you in the app before it applies.

16. Contact

Ozgur Ozbek, United Arab Emirates
support@sivio.ai

See also: Terms of use · Support