Privacy Policy

Last updated: 2026-10-02

This is a working draft, not legal advice. Have a qualified lawyer review this before public launch. The audience is mainly UK-based job seekers (UK GDPR) and the operator is based in Kenya (Data Protection Act, 2019), so both regimes need checking, including whether the operator must register with the Office of the Data Protection Commissioner. Items that still need a decision or confirmation are marked with a bold, bracketed, all-capitals note; resolve every one before publishing.

This policy covers JobHuntAI ("Ledger" in the mobile and desktop apps), operated by Kelvin Nyabate Nyabuto, an individual (not a registered company) ("we", "us"). We are the controller of the personal data described here. Contact: keynetiqsystems@gmail.com.

Who this policy applies to

The Service is aimed at UK-based job seekers, so this policy is written to meet UK GDPR, which applies to processing UK residents' personal data wherever the operator is located. Because we are based in Kenya, we also follow Kenya's Data Protection Act, 2019. If you are elsewhere, some rights below may not apply to you by law, though we do not distinguish in practice.

How the Service works

JobHuntAI is a website plus mobile and desktop apps, all talking to one hosted backend that does the work: search, summarisation, your saved profile, your history, and AI drafting. Nothing runs locally with your own API keys.

What we collect

Email address, when you sign in or register. We email you a short-lived one-time code to prove the address is yours.
Your profile, if you fill it in: full name, phone number, location, LinkedIn or portfolio URL, work history, education, and skills. It is used to draft CV highlights and cover letters for roles you choose.
A CV you upload, if you use "fill from your CV". We read the file to extract its text and send that text to our AI provider to fill in your profile fields. We do not keep the file; only the fields you then save are stored.
Jobs and news you have been shown or tracked ("history"): what you dismissed, saved, or moved through an application stage (saved, applied, interviewing, offer, rejected). Items that were only shown to you, and not dismissed, emailed or tracked, are deleted after 90 days.
Reports you send about a listing (the link, your reason, and an optional note). If you delete your account, we keep the report but remove the link to you.
Search results, cached for up to 6 hours and keyed by the search text so an identical search does not run twice. The cache holds public results only and is not linked to your account.
Usage counts (for example AI drafts or searches today), to apply free-plan limits.
Sign-in credentials for each device. Each browser or app you connect gets its own credential, so signing in on a new device does not sign out another. You can see and disconnect them under Account.
Technical logs: IP address, timestamps, request details, and error reports, used to keep the Service running and to prevent abuse. We mask email addresses and access keys in logs. If error monitoring (Sentry) is switched on, it receives error details only, not your request contents, cookies or identity.

Payments. If you buy premium time, we keep a record of the purchase (what you bought, the amount and currency, the date, and a payment reference) so we can credit your account, give you a receipt, and keep our accounts. We never receive or store your card or M-Pesa details: you enter them on our payment provider's own page.

On your own device

On the website we use one cookie, jh_session, which keeps you signed in. It is strictly necessary, is not readable by page scripts (HttpOnly), and is not used for tracking. The website also stores your recent searches, your last results and a "first-run dismissed" flag in your browser's local storage, only so the page works as you left it. You can clear these in your browser settings, and signing out or deleting your account clears them.

Advertising

The free plan may show ads provided by Google (AdMob in the mobile apps, and AdSense on the website where enabled). Google and its partners may use device identifiers or cookies to show and measure ads. We do not give advertisers your profile, CV, history or searches, and premium plans show no ads. Where the law requires it (for example in the UK and EEA), ads that use such identifiers are shown only after you agree through a consent prompt. [CONFIRM AT LAUNCH THAT THE CONSENT PROMPT, GOOGLE ACCOUNT SETTINGS AND AD CATEGORY FILTERS ARE SWITCHED ON BEFORE REAL ADS ARE SHOWN]

How we use your data

To deliver the results you ask for and to avoid showing you the same thing twice.
To generate CV highlights and cover letters, only for roles you choose.
To track your applications and keep them in step across your devices.
To apply free-plan limits, keep the Service secure, and investigate abuse and reported listings.
To send you the one-time sign-in code and other emails about your account.

We do not sell your data, and we do not use your profile or search history for advertising. We do not make decisions about you that have legal or similarly significant effects by automated means. AI is used to summarise listings and to draft text for you to review and edit.

Who we share data with

We use these service providers (processors) to run the Service:

Provider	What it does	What it receives
Tavily	Web search	Search query text, not your personal data
Groq and Anthropic	AI summarisation and drafting (we may use either, or switch between them)	Listing text; and, when you request a draft or a CV parse, your profile details or CV text and the role
Paystack (once payments are switched on)	Takes payment for premium passes by card or M-Pesa	Your email address, the amount and your payment details, which you enter on its page
Resend	Email delivery	Your email address and the email's content (sign-in codes, account emails)
Railway	Hosting and database storage	Everything we store, as our hosting provider
Google (AdMob / AdSense)	Ads on the free plan	Ad-related device or browser data, as described under Advertising
Sentry (only if switched on)	Error monitoring	Error details with emails and keys masked

We do not control these providers' own practices; see their privacy policies. [LAWYER TO CONFIRM WHICH OF THESE PROVIDERS HAVE A DATA PROCESSING AGREEMENT WITH US AND WHERE RAILWAY'S SERVERS ARE LOCATED]

How long we keep data

Data	Kept for
Account, profile and tracked applications	Until you delete your account
Jobs and news that were only shown to you	90 days
Search cache	Up to 6 hours
One-time sign-in codes	Minutes; they expire and are single-use
Backups of our database	Up to 7 days, so deleted data can remain in a backup for up to a week before it is overwritten
Reports about listings	Kept without any link to you
Payment records	Kept after you delete your account, without your name or email attached, for our accounts and tax. [CONFIRM RETENTION PERIOD FOR FINANCIAL RECORDS IN KENYA]
Technical logs	[CONFIRM RETENTION PERIOD WITH HOSTING PROVIDER]

Deleting and exporting your data

You can export your data and delete your account yourself in the website under Account (and in the apps under Settings). Deletion is immediate and irreversible: it removes your profile, history, connected devices and account (subject to the backup period above). You can also email keynetiqsystems@gmail.com to ask for either.

Security

There are no passwords. You sign in with a one-time code sent to your email, or with an access key. Do not share them.
Your account is not usable until you prove you own the email address.
Sign-in credentials are stored only in hashed form, sign-in attempts are rate limited and locked out after repeated wrong guesses, and web sessions use a cookie that page scripts cannot read.
Content from listings is treated as untrusted: links and email addresses are removed from AI-written text, and likely scams are flagged.
The database is backed up daily on our hosting platform.
No system is perfectly secure. If we discover a breach that affects your personal data, we will tell you and the relevant regulator within the time the law requires.

Your rights

If you are in the UK or EU you have the right to access, correct or delete your personal data, to object to or restrict certain processing, to data portability, and to complain to your data protection authority (in the UK, the Information Commissioner's Office). Under Kenya's Data Protection Act, 2019 you have similar rights, including to complain to the Office of the Data Protection Commissioner. Contact keynetiqsystems@gmail.com to exercise them. [LAWYER TO CONFIRM THE FULL LIST OF RIGHTS AND ANY TIME LIMITS UNDER KENYAN LAW]

Children's privacy

The Service is not directed at children and is not intended for anyone under 16.

International data transfers

Our providers are mainly US-based, and our own location is Kenya, so your data may be processed outside the UK, the EU and Kenya.

Groq and Resend maintain a standard Data Processing Addendum that applies through their normal terms, incorporating the EU Standard Contractual Clauses and the UK's International Data Transfer Addendum. Resend also participates in the EU-U.S. Data Privacy Framework.
Tavily does not offer a standard Data Processing Agreement to non-enterprise customers, and we have not negotiated one. This is a real, currently unaddressed gap, reduced in practice because Tavily receives only search text and none of your profile data. It should be resolved, either with a negotiated agreement or by replacing Tavily, before relying on this policy for a full launch.
Anthropic, Railway, Google and Sentry: our transfer arrangements with these providers are not yet documented here.

[LAWYER TO CONFIRM THIS TRANSFER ASSESSMENT, WHICH IS OUR OWN READING OF EACH PROVIDER'S PUBLISHED TERMS AS OF 2026-10-02 AND NOT A LEGAL OPINION]

Changes to this policy

We may update this policy as the product changes. We will show the new date here and, for material changes, tell you in the Service or by email.