Privacy Policy
How CVUnio handles mobile app data, third-party operations and website messages.
Last reviewed: 2026-09-14
Who is responsible?
Mersas Grup İnşaat Sanayi ve Ticaret Limited Şirketi · Bahçelievler Mahallesi Cemal Gürsel Caddesi No: 110/A Gölbaşı / Ankara · Türkiye · info@mersasgrup.com
Scope
This policy describes CVUnio mobile app version 1.0.0 (the code reviewed on 14 September 2026) and this website’s contact service. The app and website have separate storage. Sending a website message does not upload your resumes or link to an app account.
Information in the mobile app
Information you enter may include your name, job title, email, phone number, location, website, summary, work history, education, skills, languages, interests and an optional profile photo. The app also stores resume titles and modification dates, design choices, your language preference and a local trial start time. Your location is typed by you; the reviewed app does not access GPS. There is no user account, server-based resume storage, advertising, analytics, AI processing or live payment integration in this version.
Where mobile data is stored
Resumes and preferences are saved in the app’s private storage on your device using React Native AsyncStorage. Photo copies are included with the resume. CVUnio does not send this content to a developer-operated server. Storage therefore follows your device’s location, not a specified hosting country. This is not an encrypted document vault; device access controls and operating-system encryption apply separately. Your iOS or Android backup settings may cause app data to be backed up or restored by Apple, Google or a device provider. CVUnio does not manage those backups.
Photos and permissions
When you choose a profile image, Expo ImagePicker opens the system photo selector. Expo ImageManipulator crops, resizes and compresses the selected image locally; a JPEG copy is saved with your resume. Other library images are not imported into CVUnio. The reviewed configuration disables camera and microphone permissions. You can remove the profile image in the app; this does not delete the original from your photo library. Temporary image copies may remain in the app cache until the operating system clears them.
PDF export, printing and sharing
Expo Print generates a PDF in the app’s cache. Expo Sharing opens the operating system’s share sheet, or the system print flow is used. A destination you select, such as a mail app, cloud drive or printer, receives the exported document. Its provider then handles that copy under its own terms and privacy policy, potentially in other countries. Sharing is initiated by you. Deleting a resume in CVUnio does not delete exported files, sent messages, printouts or copies held by the receiving service. Cache files can remain until the device clears them.
Third-party software and services
React Native and Expo provide the app runtime and native modules; AsyncStorage provides on-device storage; Expo Localization reads device language settings; Expo Font and bundled fonts render text; the native WebView renders a local resume preview. In the reviewed production code these components are used locally, without a developer-configured remote collection endpoint. Apple/iOS and Google/Android provide distribution and system facilities. A sharing destination or OS backup service is a separate recipient only when you use or enable it. Development builds, Expo Go, app-store downloads and optional OS diagnostics have separate provider data practices. No remote font service is called by the app.
Website contact messages
If you submit the contact form, the website stores your name, email address, subject, message, selected language, submission time, reference number and the privacy notice version acknowledged. Administrators can record an internal note and a handling status. This is used to review and respond to your request, not for marketing. Raw IP addresses and browser fingerprints are not stored in the application database. Short-lived anti-abuse counters include a one-way keyed digest of the submitted email and expire after one hour; expired counters are removed on the next database operation. Contact messages expire 90 days after submission and are removed on the next database operation. Please avoid sending resumes or sensitive information.
Website storage and access
Contact messages and administrator session records are stored in private data files on the server hosting cvunio.com, outside the website’s public directory. They are not stored in visitors’ browsers. Only a signed-in administrator can access the inbox through the website. Server-side access checks, file permissions and session expiry restrict access. Data files are not encrypted by the application. Copies held in hosting backups are separate from the active inbox; deleting a message does not automatically erase a provider’s backup copies.
Purposes and legal basis
Mobile data is processed to provide the resume editing, preview and export actions you request. Website message details are processed to handle your enquiry; where GDPR applies this may be necessary to take steps at your request before a contract or to pursue the legitimate interest of providing support and preventing abuse. Optional language storage is based on your cookie choice and can be withdrawn. Acknowledging this notice is not permission to market to you.
Retention and deletion
App resumes remain on your device until you delete them or remove the app’s stored data. Removing the app normally removes its local container; restored backups and exported copies are separate. There is no CVUnio server account to delete in the reviewed app. Website messages can be deleted by the administrator before the retention period expires. Ask through the contact form using the relevant email address and reference; only information needed to locate and verify the request should be provided. Existing backups or third-party exports may require separate removal.
Your choices and rights
You can edit or remove information in the mobile app and choose whether to share an export. Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to processing, and complain to a relevant supervisory authority. We may need proportionate verification before acting on website data requests. You can change optional cookie choices at any time using Cookie settings in the footer.
Contact and changes
Use the website contact form for privacy questions or email info@mersasgrup.com. This policy will be updated if accounts, cloud storage, payments, analytics or other data flows are introduced.