Sanad

Privacy Policy

Effective: May 1, 2026

1. Introduction

Sanad ("we", "our", "us") is an AI-assisted career agent. This Privacy Policy explains what personal information we collect, how we use it, and your rights.

By using the Sanad app ("Service") you agree to the practices described below.

2. Information We Collect

Account data: name, email address, and password (hashed) when you sign up.

CV & profile data: career history, skills, education, and other content you upload or enter to enable job-matching and proposal generation.

Job-board & email credentials: OAuth tokens you grant to let Sanad interact with connected job boards and email providers on your behalf. Tokens are stored encrypted and used only for your requested actions.

Voice & audio data: if you use the AI mock interview feature, your microphone audio is captured and streamed in real time to our AI voice provider (Google Gemini Live) to conduct the interview and generate feedback. Audio is not stored beyond the session except as needed to produce your interview summary.

Usage data: in-app events (screens viewed, features used, errors) that help us improve the product. We do not sell usage data.

Device & log data: IP address, device type, OS version, and crash logs collected automatically to maintain security and reliability.

3. How We Use Your Information

To operate the Service: match jobs, generate and submit applications, run AI interview prep, and deliver notifications.

To personalise your experience: rank matches, tailor suggestions, and remember your preferences.

To process payments: subscription and credit-pack billing through Apple, Google, or our payment processor.

To communicate with you: send transactional emails (e.g. application status updates) and, with your consent, product updates.

To improve the Service: aggregate, anonymised analytics and AI model fine-tuning. We will never train models on your personally identifiable CV data without explicit opt-in consent.

To comply with law: respond to lawful requests, prevent fraud, and protect safety.

4. How We Share Your Information

AI providers: to power CV parsing, job matching, cover-letter generation, and mock voice interviews, your CV content and/or live microphone audio is sent to our AI processors — Google (Gemini), OpenAI, and Anthropic — solely to generate the requested output. These providers process your data under their own enterprise data processing terms and do not use it to train their public models.

Service providers: we share data with vendors (cloud hosting, email delivery, payment processors, analytics) that process it on our behalf under data-processing agreements.

Job boards & employers: when you instruct Sanad to apply, your CV and cover letter are sent to the relevant platform or employer.

Business transfers: if Sanad is acquired or merges, your data may be transferred as part of that transaction.

Legal requirements: we may disclose data when required by law, court order, or to protect rights and safety.

We do not sell your personal information to third parties for marketing.

5. Data Retention

We retain your account and profile data for as long as your account is active and for a reasonable period afterwards to resolve disputes and comply with legal obligations.

You can request deletion at any time — see how to delete your account and data.

6. Security

We use industry-standard safeguards (TLS in transit, AES-256 encryption at rest, access controls) to protect your data. No method is 100% secure; please use a strong, unique password.

7. International Transfers

Your data may be transferred to and processed in countries other than your own. Where required, we use Standard Contractual Clauses or equivalent mechanisms to protect your data.

8. Your Rights

Depending on your jurisdiction you may have the right to: access, correct, or delete your personal data; restrict or object to processing; and data portability.

You can export your data from the app, or email [email protected] with any request.

If you are in the EU/EEA or UK you also have the right to lodge a complaint with your local supervisory authority.

9. Children

The Service is not directed to children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently done so, please contact us to have it deleted.

10. Third-Party Links

The Service may link to third-party websites (job boards, employer pages). This Policy does not cover their privacy practices; please review their own policies.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated in-app or by email at least 7 days before taking effect. Continued use after the effective date constitutes acceptance.

12. Contact Us

For privacy questions or rights requests, email [email protected].

Questions? Contact [email protected]