Privacy Policy

KRESTO is designed so that your data stays on your device. KRESTO has no backend server, no cloud database, no external AI provider, no analytics, no advertising, and no third-party tracking SDKs. This policy explains what information KRESTO uses, where it is stored, and the choices you have.

By using KRESTO, you agree to the practices described here.

KRESTO uses Sign in with Apple so you can sign in without creating a separate password. When you sign in, KRESTO receives the information Apple chooses to share with us, which is typically your name and email address (or a private relay email if you choose to hide your address).

Your sign-in identity is stored locally on your device in the iOS Keychain. It is not transmitted to or stored on any KRESTO server, because there is no KRESTO server.

All of your data in KRESTO is stored locally on your device using SwiftData, Apple's on-device data persistence framework. This includes:

• The resumes you add or import.
• Job descriptions and other job details you enter.
• ATS compatibility results and skills-match results.
• Cover letters and recruiter messages you create.
• Your profile and account settings.

None of this content is uploaded to a KRESTO backend or cloud database, because KRESTO does not operate one. Your data remains on your device unless you choose to export or share it yourself using standard iOS sharing.

When you add a resume as a PDF, KRESTO processes that file locally on your device. The resume text is extracted and analyzed on-device so that KRESTO can tailor suggestions, check ATS compatibility, compare skills, and generate cover letters and recruiter messages. The PDF and its contents are not sent to any external service.

All AI processing in KRESTO happens on your device. KRESTO does not send your resumes, job descriptions, or generated content to any external AI provider or remote server. AI-generated outputs — such as tailored resume sections, ATS compatibility scores, skills comparisons, and draft messages — are produced on-device and are estimates that should be reviewed before use.

KRESTO does not collect usage analytics, does not show advertising, and does not track you across other apps or websites. KRESTO does not include any third-party SDKs for advertising, analytics, or tracking.

The only third-party service KRESTO relies on for sign-in is Apple, through Sign in with Apple, which is governed by Apple's own privacy practices. KRESTO does not use any other third-party services to process or store your data.

Because your data is stored locally on your device, KRESTO retains it for as long as you keep the app installed and your account active. KRESTO does not retain your data on any server. When you delete your account from within the app, or when you delete the KRESTO app from your device, the locally stored data is removed from your device.

KRESTO protects your data using the security features built into iOS, including on-device storage and Keychain for your sign-in identity. Because your data is not transmitted to or stored on a KRESTO server, it is not exposed to server-side breaches. No method of storage is fully secure, but keeping data on your device significantly limits its exposure.

You can permanently delete your KRESTO account and the data stored on your device at any time from within the app at Profile → Account → Delete Account. Because all data is stored locally, deleting your account removes your resumes, job data, ATS results, cover letters, recruiter messages, and settings from your device. Deleting the KRESTO app from your device also removes this locally stored data.

For full steps, see the Account Deletion page.

Questions about this policy or your data? Email support@careerbuddy360.com.