Privacy Policy
1. Who we are and what this policy covers
Job-KSA.com (Beseyat) operates WorldJobs (“WorldJobs”). Address: Saudi Arabia. This policy explains data handling in the iOS and Android apps, the web app and public website, and WorldJobs APIs. It is also the official policy URL used for Apple App Store, Google Play, Huawei AppGallery, and Samsung Galaxy Store submissions.
Privacy contact: beseyat.sa@gmail.com . You can also read the data-deletion instructions or visit Support. Employer and job-source websites opened in the in-app browser are not operated by WorldJobs; section 8 and their own privacy policies apply.
2. Current release at a glance
- No account required: core job search and tools work as a guest. This release does not offer user account creation or sign-in, so we do not collect account credentials or an account profile.
- No sale or advertising tracking: we do not sell personal data, provide it to data brokers, or use it to track you across other companies’ apps or websites.
- No device location access: a country or city you choose is a job-search preference, not GPS location. The app does not request location permission.
- Local data: bookmarks, viewed history, saved searches, application tracking, and the local résumé profile remain encrypted on your device unless you explicitly send something to a service described below.
- Minimal permissions: the app uses internet and network state and may request optional notification permission for local job alerts. It does not request contacts, SMS, call logs, camera, microphone, health, payment, or advertising-identifier access.
3. What we collect, why, and for how long
| Data category | What reaches WorldJobs | Purpose | Typical retention |
|---|---|---|---|
| Search and in-app activity | An explicit search term; a bounded set of filters such as country, city, category, sector, job type and work mode; sort choice; locale; result count; and response time. We do not record initial catalog loading or every pagination request as a new search. | Perform the search, measure zero-result searches, and improve search coverage, relevance, and performance. | Encrypted in the application database for up to 90 days. |
| Installation, security, and diagnostic data | A random app-installation key, platform and locale, and request data needed for connection and protection, such as time, route, status, response time, network address, and user agent. Our analytics replace network addresses and valid installation keys with keyed HMAC pseudonyms and do not keep their raw values in the analytics table. | Authenticate guest deletion, prevent abuse and duplicate requests, diagnose failures and enforced limits, and protect the service. | Application-database incidents for up to 365 days; resolved incidents are normally removed after 180 days. Infrastructure providers may keep limited network logs for their contractual and legal periods. |
| Job reports and support | Report reason, optional encrypted details, job reference, and a pseudonymous installation reference. If you email us, we receive your address, message, and any attachment you choose. | Review harmful, expired, or misleading jobs and answer support or privacy requests. | Job reports for no more than 365 days. Support correspondence is kept only while handling the request and reasonable security or legal obligations. |
| AI career tools | Tool, locale, job reference, processor, status, timing, cost units, and risk signals, plus a bounded, redacted, encrypted snapshot of the question and output for eligible tools. For CV Review and ATS Guidance, the interaction ledger never retains the submitted résumé as input content; it replaces that input with a document-content-omitted marker. A bounded, redacted output preview may reflect résumé-derived feedback or facts. API keys, authorization headers, and hidden system prompts are also excluded. | Provide the requested tool, prevent abuse, measure reliability and cost, and understand which tools are useful. | Eligible content snapshots, including any bounded output preview, for up to 30 days; submitted résumé text has no interaction-ledger retention. Non-content usage metadata remains for up to 90 days. |
4. Data that stays on your device
Bookmarks, viewed-job history, saved searches, local alerts, application status, language, theme, and Résumé Studio data remain in device storage and are not automatically uploaded by WorldJobs. If a private server response explicitly allows it, the app may retain up to 20 public newest-job card summaries for no more than 90 seconds during a failed refresh. That brief fallback excludes search/filter intent, descriptions, contacts, and application destinations.
Use Settings > Delete all app data to clear local data and the key after server deletion succeeds. Do not rely on uninstall alone: it does not send a server-deletion request, and on iOS protected Keychain items such as the installation key or local résumé may survive uninstall under operating-system behavior. Use the in-app action first or follow the data-deletion page.
5. Search, reporting, and security details
We process an explicit search to fulfill your request and improve relevance, coverage, and performance. Selected country and city are treated as search history, not device location. We do not collect GPS, nearby Wi‑Fi, or Bluetooth data to locate you.
Reliability systems defer and deduplicate enforced-limit, access-denial, server-error, and malicious-input signals. Application-database incidents exclude request headers and bodies, CV files or text, AI prompts, passwords, tokens, API keys, exception messages, and stack traces. We use these signals to defend against fraud, XSS, SSRF, injection, unauthorized access, and other attacks—not to build an advertising profile.
6. Optional AI career tools
External processors currently eligible to handle a request are: DeepSeek. The app identifies the processor that may receive a request before each consent.
No prompt is sent to an external processor until you choose a tool and consent at the point of submission. Source rights prohibit sending some job descriptions to an external model; for those jobs the app uses deterministic on-device preparation or prevents the transfer. When you choose translation, paraphrasing, interview preparation, or another career tool, we process your entered text, tool choices, and permitted job context to generate the result.
For CV Review and ATS Guidance, you may paste résumé text or explicitly select a version from the encrypted local Résumé Studio. After you consent at submission, the app sends only that text and permitted job context you selected to the WorldJobs server and the identified external processor; it does not upload a PDF or résumé file and does not enable automatic sync. The result is reviewable guidance only: WorldJobs never submits an application or contacts an employer for you. The AI interaction ledger does not retain the submitted résumé text as its input record; it stores a document-content-omitted marker instead. Non-content usage metadata and a bounded, redacted output preview—which may reflect résumé-derived feedback or facts—may remain for the periods above.
We try to redact email, phone, and link patterns before transfer, but automated redaction cannot guarantee that every personal detail is found. Review the text and remove anything unnecessary. WorldJobs does not use submitted text or output to train its own model. The external processor may process the input and output in other countries under its terms and privacy materials. Provider-side retention, service-improvement use, subprocessors, and deletion can differ from WorldJobs retention; we do not claim provider “zero retention” or “no training” unless a documented commitment is shown to the user. Authorized WorldJobs administrators protected by multi-factor authentication can view only a bounded, further-redacted preview for security and quality. They cannot view the submitted résumé input in the CV Review or ATS Guidance interaction ledger, but the output preview may contain résumé-derived feedback or facts. You can refuse the tool or withdraw consent for future processing without losing ordinary job search.
7. Email and support
Email job digests are not active in this release. If you email Support or Privacy, you choose to send your email address and message content to the email provider and WorldJobs team so we can answer. We do not add support messages to a marketing list.
8. Applying, employer websites, and files
WorldJobs attributes each listing and opens a supported HTTPS employer or source destination in an ephemeral in-app browser. An unsupported, blocked, or system destination may open in the external browser or mail app after a clear action by you. The receiving site or app is an independent service and may receive your network address, browser information, cookies, and any form fields or résumé you choose to submit. Its privacy policy—not this one—governs that processing. WorldJobs does not fill or submit an employer form without your action and does not sell your data to employers.
The app attempts to clear in-app browser cookies and local storage when the application session closes; it cannot clear an external browser’s or another app’s storage. It denies website location, camera, and microphone permission in the in-app browser. On Android, uploading a file to an employer site requires a clear confirmation and is restricted to safe types and sizes; the selected file goes directly to that site. On iOS, the system document picker may be shown after you choose an upload field on the employer site.
When you use Share, the operating system sends the selected job text or résumé text/file to the app or person you select. WorldJobs does not choose that recipient or control how the recipient retains the copy; review the destination before sending.
The WorldJobs server does not accept CV files in this release, and production PDF upload/parsing remains disabled until a configured, reachable malware scanner is available. Résumé Studio remains on-device unless you explicitly choose to send one version's text to an AI tool described in section 6. A file you choose in an employer website is transferred to that independent destination as described above.
9. Alerts and permissions
Notification permission is optional. Local-alert criteria and the last-check cursor remain on your device; a check sends search filters in an ordinary jobs request and the app generates one batched local alert. You can stop alerts in the app or system settings.
This release does not use remote push and does not send a push identifier to OneSignal or Firebase.
Internet permission connects to jobs, WorldJobs, and destinations you open. Network-state access avoids unnecessary requests. The app does not request SMS, phone, contacts, device location, camera, microphone, calendar, health, or payment permission. Selecting a file through the system picker does not grant general access to your photos or files.
10. Who receives data
| Recipient | Data | Why and role |
|---|---|---|
| Cloudflare, Inc. | Network address, TLS/browser/request data, and limited abuse signals. | Content delivery and attack protection; infrastructure processor. |
| job-ksa.com hosting provider (the current origin network is registered to Go Daddy Netherlands B.V.) | Service requests, database data, and operational records covered by this policy. | Server and infrastructure hosting. The contracted entity or subprocessor may vary with the hosting account. |
| Google LLC (Gmail) | Your address and the content or attachments of a Support or Privacy email you choose to send. | Receive and send Support and Privacy correspondence. |
| DeepSeek | Redacted prompt or minimized résumé text, tool choices, permitted job context, and output. | Run an AI tool after consent; external processor. |
| Employer and job-source websites | Browser data and any form, email, or file you choose to submit. | Independent services receiving an application you initiate; their own policies apply. |
| Apple, Google, Huawei, and Samsung | Their stores process store-account, device, download, and review data under their policies. WorldJobs does not send them your searches, bookmarks, or AI prompt. | Independent app-distribution and store operators. |
We may disclose the minimum necessary data to advisers, law enforcement, or an acquiring entity when required by valid law or necessary to protect rights and safety, with notice where legally permitted. We limit infrastructure and email providers to the agreed operational purpose. For an AI provider, store disclosures conservatively treat the transfer as “shared” unless service terms or a data-processing agreement document that it acts only on WorldJobs instructions and does not independently reuse the data.
11. Purposes and legal bases
Depending on your country and the feature, we rely on: performing the service you requested, such as search or an application handoff; your consent for newsletter, AI, or optional notifications; our legitimate interests in security, fraud prevention, and performance improvement where those interests are not overridden by your rights; and compliance with legal obligations. You can withdraw consent for future processing at any time without affecting processing already lawfully completed.
12. Retention and deletion
Settings > Delete all app data sends a request authenticated with the current installation key. The server erases installation-linked search analytics, AI usage, job reports, server-alert subscriptions and delivery records, and any guest CV file for that installation, without deleting another installation. It does not cover a newsletter keyed by email; unsubscribe through a message or contact us.
If guest-file removal needs a safe retry, the server returns a pending state and the app keeps the local key until success is confirmed. After erasure, a one-way, content-free marker may remain for up to 7 days to stop delayed requests recreating data, and an idempotency fingerprint and response may remain for up to 24 hours. Narrow security evidence may remain after identifiers and content are removed until the legal or security period stated above ends.
13. Security
We use HTTPS, strict certificate validation in the app, encryption for sensitive database fields and local storage, one-way pseudonyms where practical, server secrets that are not shipped in the app, role-based administration with multi-factor authentication, rate limits, input and upload validation, and bounded audit records. No transmission or storage method is guaranteed to be 100% secure; we review controls and respond to incidents according to risk and applicable law.
14. International transfers
Because WorldJobs is global, data may be processed outside your country by the hosting, protection, email, or AI providers identified above. Before making a processor available in a market, we assess the transfer basis and available safeguards. If no suitable mechanism is available, we exclude that processor, feature, or market, or request consent where law permits. We minimize what is transferred; the destination’s privacy laws may differ from yours.
15. Advertising and tracking
This release contains no advertising network, advertising identifier, or cross-app tracking. WorldJobs does not use data for personalized advertising and does not show Apple’s ATT prompt because it does not track under Apple’s definition.
The current build has no third-party remote app-crash SDK. Limited WorldJobs server security and diagnostic records remain as described in the table.
16. Children
WorldJobs is a career-search service and is not directed to children. We do not knowingly solicit data from a child below the digital-consent age applicable in their country. A parent or guardian who believes a child submitted data can contact us for deletion. We do not serve behavioral advertising to children.
17. Your rights and choices
Depending on your law, you may request access, a copy, correction, deletion, restriction or objection, portability of data you provided, withdrawal of consent, and the right to complain to your data-protection authority. We do not discriminate because you exercise a privacy right. We may request limited information to verify that a request relates to you; we will never ask for an API key or your password.
Use the in-app deletion and unsubscribe controls first, follow the general deletion instructions, or contact beseyat.sa@gmail.com . We respond within the period required by applicable law.
18. App-store privacy disclosures
For privacy labels and store data-safety sections, we treat off-device data tied to a pseudonymous installation key as collected and linked. Possible current categories are: email address when you contact us or opt in to email, search history, product interaction/app activity, other user content such as reports, AI prompts, or consented résumé text, a pseudonymous device/installation identifier, and security or diagnostic data. We do not treat bookmarks, history, or a résumé that remains only on-device as developer-collected data. Apple, Google Play, Huawei, and Samsung disclosures must always match the released build, production behavior, and this policy.
19. Policy changes and contact
When this policy changes, we update the “Last updated” date, publish the new version at this same URL, and update the store URL if it changes. We will provide a prominent in-app or website notice before a material change takes effect when reasonably possible or legally required, and request renewed consent if a consent-based purpose changes. Questions and rights requests: beseyat.sa@gmail.com .