About this policy
On Paper is developed by Ash Shah. On Paper Companion is published by HyperBuild, Inc. This policy covers the On Paper app, On Paper Companion extension, and project website. You do not need an On Paper account to use the app. The developer does not operate a server that receives your career documents. Some features connect to the outside services described below.
Your information on your device
The app stores the information you enter or import: resumes, contact details, career profiles, job descriptions, application records, reusable answers, chats, document history, settings, and AI usage records. Native apps save app data on your device; the browser version uses browser storage. This information supports editing, restoring earlier work, and the other features you use.
Document storage and exported backups are not encrypted by On Paper itself. Your operating system, device security, and backup settings determine their additional protection. The app does not include advertising or an analytics service that reports your activity to the developer.
iCloud sync
On iPhone, iPad, and Mac, the app syncs workspace information through Apple CloudKit in your own iCloud account when iCloud is available. This includes resumes, profiles, jobs, applications, chats, history, settings, and usage records. Sync can run automatically and in the background. The developer does not receive these documents through an On Paper server.
Apple provides iCloud under its own terms and privacy policy. You can manage On Paper’s iCloud data through your Apple account’s iCloud storage settings. Removing cloud data does not erase local copies or files you exported. When the app detects that its iCloud data was removed, it pauses syncing; choosing Resume syncing can upload the local copies again.
Optional AI assistance
AI assistance uses your OpenRouter API key. Before the first AI request on a device, the app asks for permission to share information with OpenRouter and the model providers it routes to. Depending on the feature, a request can include your message and conversation, resume, career profile and contact details, job descriptions, interview answers, or text extracted from an imported file. These services use that information to produce the result you requested.
OpenRouter forwards requests to a model provider. Automatic fallback can send the request to a different model or provider when the selected one is unavailable. Enabling web search also allows OpenRouter’s search service to process search queries derived from the request. Outside services receive connection and request information, such as your IP address, as part of these requests.
OpenRouter and model providers have their own retention, training, security, and deletion policies. Those practices can vary by provider and by your OpenRouter account settings. On Paper does not promise that every request has zero retention or is excluded from model training. Review OpenRouter’s policy at https://openrouter.ai/privacy and provider details at https://openrouter.ai/providers before sharing sensitive information.
To show AI usage and costs, the app stores records with the request time, provider, model, feature, token counts (including cached and reasoning tokens when reported), and cost reported by OpenRouter. These records are saved on your device and may sync through your iCloud account. Usage records do not contain your API key or the text of your prompts and answers; chats and documents are stored separately as described above.
You can withdraw permission for future AI requests in Settings. Removing your OpenRouter key also prevents new AI requests from this installation. These choices do not recall information already sent or erase a provider’s copies. Editing and exporting your documents remain available without AI.
Chrome companion extension
On Paper Companion complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. Information is used and transferred only for the disclosed application-assistance features. It is not sold, used for advertising, or used for credit or lending decisions. The developer has no access to your application data through an On Paper server.
On Paper Companion is the optional Chrome extension. Before connecting or processing page data, it asks you to accept a disclosure. When you request a scan, it reads the selected application’s address, compact form descriptors, and job context. The full tab address, including any query string and fragment, stays temporarily in extension memory to check that filling targets the reviewed tab and address. It is not saved to storage, included in application logs, or sent to the app or AI provider. A separate origin-and-path address is used for job context comparisons inside the extension. URL credentials, raw page HTML, and live DOM nodes are not sent to the app or AI provider. Password fields are excluded. Sensitive questions, including demographics, disability, veteran status, work authorization, and compensation, remain manual on the application page and are excluded from AI mapping, answer saving, and filling.
The extension communicates with your running desktop app over an authenticated connection on your own computer. AI suggestions, fit analysis, and tailoring can send the selected resume, profile, saved answers, supported field descriptors, and job context through the app to OpenRouter and the selected or fallback provider. The application URL is not included in those AI requests. Your API key stays in the app and is sent to OpenRouter to authorize requests; the extension does not receive it.
Choosing Fill sends the values you reviewed and any reviewed resume PDF to the application website, which may save edits or upload a file immediately. The extension never activates the final Submit button. Answers and application records you choose to save are stored in On Paper and may sync through your iCloud account as described above.
The pairing credential is held in memory-backed Chrome session storage, restricted to trusted extension contexts, and is cleared on browser restart or extension reload, update, or disable. To prevent duplicate application records after an interruption, session storage also holds a random request identifier, an opaque profile identifier, and a one-way fingerprint of the pending action. Each pending action is kept separately for its Chrome window and remains through panel close/reopen, disconnect, and re-pairing so it can be retried safely in that window. They contain no job details or resume content and are cleared after a confirmed save, when you choose Start over, when a different On Paper profile is confirmed, or when Chrome clears the session storage. The disclosure choice is stored locally in Chrome. Disconnect clears this browser’s credential, disclosure choice, and current review and asks the running app to revoke existing companion connections. If the app is unreachable, other connections are not revoked; reconnect and disconnect while the app is running. Disconnecting does not erase saved app records or recall data already sent to an application website or AI provider.
Your API key
Native apps store the OpenRouter key in the operating system’s credential store and send it to OpenRouter to authorize requests. On Apple devices, the key can sync through iCloud Keychain between devices using the same app access group. The iPhone and iPad app share a group; the Mac app uses a separate one. The key is not part of the app’s CloudKit document records or newly exported JSON backups.
The browser version encrypts the key in browser storage. A full copy of the browser profile can contain both the encrypted key and the means to unlock it. Remove the key in Settings when you no longer want the app to use it, and revoke it with OpenRouter if you need to invalidate it. Removing the app alone does not reliably remove a keychain item or revoke the key.
Fonts, model lists, and updates
Google-hosted document fonts load from Google when a saved or selected style uses them, including the default font pairing. Google receives the requested font and normal connection information, such as your IP address and browser information. The app does not send your resume text in a font request. Choosing system fonts avoids new Google font downloads for that style. The app’s own interface fonts are bundled.
The app can fetch the model catalog from OpenRouter without sending your documents or API key. Desktop update checks and release notes use GitHub. These requests send normal connection information to the service providing the response. The iOS app receives updates through Apple rather than the desktop updater.
Export, retention, and deletion
Use Export backup in Settings to save a JSON copy of your app data. Exported files are under your control and may contain personal information and chat history. Newly created backups exclude your OpenRouter key, but older backups may contain it. Files you share through another app or service become subject to that recipient’s handling of them.
App data remains on your devices and, where synced, in your iCloud account until you remove it. You can edit or delete documents, chats, and profiles in the app. Deleting an item from a list is not a guarantee that every copy is erased: document history and deletion records can remain, and deleting a profile leaves its underlying CloudKit records in iCloud. Backups and previously shared files remain separate copies.
For a fuller removal, remove On Paper’s data from iCloud storage, remove its local app or browser data on each device, and delete any exported files and backups you no longer want. Remove or revoke the API key separately. Other devices, system backups, and outside services may retain copies under their own settings and policies. The developer cannot erase information held in your personal iCloud account or by an AI provider on your behalf.
Website and support
For On Paper Companion support, email support@hyperbuild.com. Do not send API keys or pairing tokens.
The project website is hosted by GitHub Pages. Its main page uses Google Fonts and saves your theme preference in your browser. This privacy page uses system fonts. The hosting and font services receive ordinary website request information; the website does not upload your app documents or include an analytics script.
For questions about this policy or a privacy concern, contact the project through https://github.com/ashproto/Resume-Designer/issues. GitHub issues and discussions are public: do not post API keys, resumes, or other private information. Information you choose to post is visible to the project maintainer and others and is handled under GitHub’s terms and privacy policy. If your request needs private details, ask for a private contact route without posting those details.
Changes to this policy
The date above identifies this policy version. Updated app releases and the project website may carry a newer version when the app’s data practices change. The policy remains available inside the app so you can read it without a network connection.