Privacy Policy
BrightFuture helps you build a resume and cover letter using AI. This policy explains, plainly, what information we collect, why, and what happens to it. We've tried to write it the way we'd want to read it ourselves — if anything is unclear, see Contact us below.
1 Overview
BrightFuture is operated for South African job seekers. The short version: we collect the account details needed to sign you in, process the resume content you type through an AI provider to generate your documents, and keep a record of what you've paid for so we know when to let you download. We do not sell your personal information, and we do not use it for advertising.
2 What we collect
| Category | Examples | When |
|---|---|---|
| Account information | Name, email address, and profile photo from Google, Facebook, or LinkedIn | When you sign in |
| Resume content you provide | Your work history, education, skills, contact details, and any job description you paste in | While you use the builder |
| Purchase records | Which product you bought (resume download or regeneration), and a Google Play purchase token used to verify it | When you make a purchase |
| Basic usage data | How many times you've generated a resume in the last hour, used to prevent abuse | Automatically, while you use the app |
We do not ask for your ID number, banking details, or physical address. Payment card details are handled entirely by Google Play — we never see or store them.
3 How we use it
- To create your account and let you sign back in.
- To generate your resume and cover letter content based on what you tell us.
- To verify a purchase before unlocking a download, and to stop the same purchase being redeemed twice.
- To apply a fair-use limit on how many resumes can be generated per hour, so the service stays available and affordable for everyone.
- To fix bugs and understand which parts of the app are and aren't working, using basic error logs that don't include your resume content.
4 AI processing
When you ask BrightFuture to generate a resume or cover letter, the details you've entered are sent to OpenAI's API to produce the written content. This happens over a secure connection, and our system does not store a permanent copy of that content on our servers — once generated, the result is sent back to your device and kept there for as long as your app session lasts.
OpenAI processes this content under its own API data usage terms, which (at the time of writing) do not use API data to train their models by default. We encourage you to review OpenAI's API data usage policy directly, since terms can change and we want you to see the primary source rather than rely solely on our summary.
5 Third parties we work with
| Provider | What they handle |
|---|---|
| Google Firebase | Account sign-in, and storage of purchase/entitlement records |
| Google, Facebook, LinkedIn | Sign-in only — we receive your name, email, and profile photo, never your password |
| OpenAI | Generating resume and cover letter text from the details you provide |
| Google Play Billing | Processing payments — we never see your card details |
Each of these providers has its own privacy policy governing how they handle data on their side; we encourage you to review them if you'd like the full picture.
6 Where your data is stored
Account and purchase records are stored in Google Firebase (Cloud Firestore), hosted on Google Cloud infrastructure. Access to this data is restricted by server-side security rules — your device can read your own purchase status, but cannot read, write, or alter anyone else's records, and cannot grant itself a free download by tampering with local app data.
7 How long we keep it
- Resume content you type: not stored on our servers beyond the time it takes to generate your document. It remains on your device for as long as you keep the app installed, or until you clear the app's data.
- Account information: kept for as long as your account exists.
- Purchase records: kept to maintain an accurate history of what you've paid for and to prevent the same purchase being claimed twice. This is also a legal and accounting requirement in most jurisdictions.
- Usage/rate-limit counters: short-lived, automatically expire within hours.
See Data deletion for how to remove your account and what happens to each category above when you do.
8 Your rights
Under South Africa's Protection of Personal Information Act (POPIA) and similar laws elsewhere, you have the right to:
- Know what personal information we hold about you.
- Ask us to correct inaccurate information.
- Ask us to delete your account and associated data — see Data deletion.
- Object to certain processing, or withdraw consent where processing relies on it.
- Lodge a complaint with South Africa's Information Regulator if you believe your rights have been infringed.
9 Children's privacy
BrightFuture is intended for people who are old enough to be entering the job market and is not directed at young children. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us so we can remove it.
10 Changes to this policy
We may update this policy as the app changes. If we make a material change, we'll update the "Last updated" date at the top of this page. Continuing to use BrightFuture after a change means you accept the updated policy.
11 Contact us
Questions about this policy or your data? Email privacy@brightfuture.app.
privacy@brightfuture.app with your real
support address before publishing — see the note at the bottom
of this page.