UmeedGo

Welcome to UmeedGo. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

Please read this policy carefully. If you disagree with its terms, please discontinue use of our Service.

2.1 Information You Provide

• Account Data: Name, email address, phone number, password when you register.
• Profile Data: Full name, CNIC, passport number, date of birth, address, education, work experience, skills, target country — used for overseas job matching and visa form autofill.
• Documents: Passport scans, photos, certificates you voluntarily upload.
• Communication: Messages, queries you send via the AI assistant (UMEX AI).

2.2 Information Collected Automatically

• Device Info: Device model, OS version, unique device identifiers.
• Usage Data: Pages visited, features used, session duration, click events.
• Log Data: IP address, browser type, timestamps of access.
• Push Notification Token: Firebase Cloud Messaging (FCM) token for job alerts and notifications.

2.3 Permissions We Request

• CAMERA — To capture documents and profile photos for upload.
• READ_MEDIA_IMAGES / READ_EXTERNAL_STORAGE — To select photos and documents from your gallery.
• POST_NOTIFICATIONS — To send job alerts and application updates.
• INTERNET — To connect to our servers.

• Create and manage your user account.
• Match you with overseas job opportunities.
• Auto-fill government visa and job application forms on your behalf (only with your explicit action).
• Power the UMEX AI assistant to answer overseas work questions.
• Send push notifications about job matches, application updates, and important alerts.
• Improve our Service through anonymized analytics.
• Comply with legal obligations.

We do not sell your personal information. We may share data only in these cases:

• Service Providers: Supabase (database), Vercel (hosting), Groq (AI inference), Firebase (notifications) — all under strict data processing agreements.
• Government Sites: When you use the Smart Autofill feature, your profile data is filled into official government sites (WAFID, Tasheer, QVC, BEOE) directly in your browser — we do not transmit this data to our servers.
• Legal Requirement: When required by law or to protect rights.
• Business Transfer: In the event of a merger or acquisition, with prior notice.

Your data is stored on secure servers provided by Supabase with industry-standard encryption (AES-256 at rest, TLS 1.3 in transit). We implement access controls, audit logs, and regular security reviews.

Sensitive information (passwords) is hashed and never stored in plain text. Passport and CNIC numbers are encrypted before storage.

We retain your data for as long as your account is active. You may request deletion at any time (see Section 9). After deletion, anonymized analytics may be retained indefinitely. Legal or compliance records may be kept for up to 7 years.

Our Service is not directed to children under 18. We do not knowingly collect personal information from minors. If we discover we have collected data from a child, we will delete it immediately. If you believe we have inadvertently collected such information, contact us at privacy@umeedgo.com.

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and all associated data.
• Export your data in a portable format.
• Opt out of push notifications via device settings.
• Withdraw consent at any time by deleting your account.

To delete your account and all associated data, please:

1. Log in to the app → Profile → Settings → Delete Account, or
2. Email us at privacy@umeedgo.com with subject "Account Deletion Request".

We will process the deletion within 30 days and confirm via email.

Our app uses the following third-party services, each with their own privacy policies:

• Supabase Privacy Policy
• Google Firebase Privacy Policy
• Vercel Privacy Policy
• Groq Privacy Policy

We use session cookies (via Supabase Auth) to keep you logged in. No third-party advertising cookies are used. You can clear cookies by logging out or clearing your browser/app data.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification at least 7 days before the change takes effect. The "Last updated" date at the top reflects the most recent revision.

If you have questions, concerns, or requests regarding this Privacy Policy: