سياسة الخصوصية Privacy Policy

This English translation is provided for convenience; the Arabic version is the authoritative text.

Who we are, and scope

Seertak is an app that helps you build an English-language CV from your Arabic input. It is operated by Abdullah Hamad Almatrafi Co..

This page explains how the app handles your data: what stays on your device, what is sent and why, and your rights. The governing framework is the Saudi Personal Data Protection Law (PDPL). Your data does not leave your device along the AI path until you give explicit consent.

The app creates no account for you and asks for no sign-in.

What stays on your device

Your personal data is stored on your device alone; the app keeps no copy on any server of its own. This includes:

• Your full name (Arabic and English), phone number, email, city, and professional-profile link;
• Your photo (if you add one);
• Your education history, work experience, and employer names;
• Your final CV.

All of this remains local to your device.

What is sent, and why

When you request CV drafting, the following is sent to the AI:

• The work and achievement descriptions you write;
• Your diagnostic selections: target reader, career status, professional identity, what you prefer not to emphasize, job type, tasks, and skills.

These diagnostic selections are curated choices that contain none of your identifying details. The purpose of sending them is to draft your CV in English, plus the drafting features you explicitly request, described below.

When you use optional features, the following is sent along the same path and after the same redaction:

• Cover letter and job-ad-targeted CV: if you paste a job ad's text, that text is sent — after identifying details are redacted from it — to target your CV toward it or to produce the cover letter.
• Your qualifications in generic form, for the cover letter: your degree and major as a generic line only (no institution name, GPA, honors, or years), and your languages with proficiency levels. Your employer names, institution names, exact dates, and professional summary stay on your device.
• Job-title translation: if you type an Arabic job title the app does not recognize, the title alone is sent — with no identifying data — for a one-time English translation, which is then cached on your device.

Redaction before sending: Before any text is sent, the app replaces the identifying details it knows about you with neutral placeholders — your name, employers, phone number, email, links, long identifier-like numbers, and certain numeric date formats. After the result returns, those details are restored on your device alone.

Limits of redaction: Automatic redaction covers your own details that the app reliably knows, but it does not yet catch every name or personal detail belonging to someone else that you might type into the achievement fields. So describe your achievements and their impact without including personal data about colleagues, clients, or anyone else.

The path: This redacted text passes through an app-operated proxy to the Claude model of Anthropic, PBC (United States) to produce the draft. This cross-border transfer is covered by contractual safeguards under the Saudi Data Transfer Regulations, and your data is not used to train models under the provider's commercial terms. The app collects none of your identifying details along this path.

The device token

To authenticate proxy requests, the app generates a random per-install token. It is not linked to your identity or to your device's components, it does not reveal your identity, and a new token is generated if you delete your data.

What the proxy server logs

The proxy never logs the content of your messages. It logs only non-identifying technical data — the anonymous device token, request times, message sizes, and success/failure outcome — for cost control and fault handling.

Payments

The app is free to use. Exporting a clean (un-watermarked) CV uses a credit, which you buy as a one-time purchase, with no subscription. Apple (the App Store) processes the payment entirely as the merchant of record; the app never sees or stores your payment-method details. Your credit balance is stored on your device alone — the app keeps no copy on any server and does not sync it across devices. For what a credit unlocks, refunds, and the effect of reinstalling or changing your device on your credits, see the Purchase & Refund Terms.

Ad measurement (entirely optional)

We may advertise Seertak on external platforms such as Facebook and Instagram. To measure how well those ads work and improve our campaigns, the app includes a measurement component from Meta Platforms, Inc. (United States) that stays fully dormant unless you explicitly opt in to measurement sharing inside the app. If you do not opt in, the app never activates this component and sends nothing to Meta; all that remains is the aggregate install counting performed by the operating system itself via SKAdNetwork, described below, which carries no personal identifier.

If you opt in, the app shares with Meta: your device identifiers (including the advertising identifier only if you also allow tracking in Apple's system prompt), device attributes (model, OS and app versions, language, time zone), your IP address, and basic usage events (app install and app open). This never includes your CV content, your name or contact details, or your purchases.

Meta may use this data for its own purposes under the Meta Business Tools terms and its own privacy policy. The transfer of this data to the United States is covered by contractual cross-border safeguards within the Meta Business Tools terms and Meta's data transfer addendum, in line with the requirements of the Saudi Personal Data Protection Law.

You can withdraw this consent at any time from Settings → Privacy; transmission of any new data stops immediately.

The app also uses Apple's SKAdNetwork — a mechanism operated by the operating system itself — to count ad-driven installs in aggregate, without revealing your identity and without any personal identifier; it operates independently of the measurement consent above.

What we do NOT do

• No accounts and no sign-in.
• No other analytics tools and no ads shown inside the app; ad-measurement data is shared with Meta only under the explicit, optional consent described above.
• We do not sell your data, and we do not share your CV content with any third party outside the CV-generation path described above.
• We do not collect special-category data (such as health, religious, or biometric data); your photo is used only to lay out your CV, not for biometric recognition.

Data retention

• On your device: your data remains as long as your consent stands, and is erased when you withdraw consent (see "Your rights" below).
• Proxy technical logs: kept for about 30 days, then deleted; they contain no message content.
• Text sent to the AI provider: the provider (Anthropic) automatically deletes the texts it receives and the results it returns within thirty (30) days of receipt or generation, per its published retention policy; content flagged as violating its usage policy may be kept longer — up to two years. Your data is not used to train models under the commercial terms. What reaches the provider is the text after your name, employers, and contact details were replaced with neutral placeholders on your device (see "Redaction before sending" and "Limits of redaction" above).
• Ad-measurement data (if you opted in): processed by Meta under its published retention policy; transmission of any new data stops immediately when you withdraw consent in Settings.

Your rights under the PDPL

Under the PDPL you have the right to access, correct, and delete your personal data. Because your data is stored locally on your device:

• Access: You view and edit your data inside the app, on the device itself.
• Deletion and consent withdrawal: At any time you can withdraw consent and delete your data via the "Withdraw consent and delete my data" action — as easily as you granted consent. This action erases all data stored on the device and the device token, and deletes your photo file on a best-effort basis. It does not erase your credit balance stored on this device — this is spendable credit you have already paid for, and the app keeps no copy of it on any server — nor the fact of the purchase, which Apple holds as a record needed to meet a financial or contractual obligation. The "Restore a previous purchase" button does not return consumable credits; see the Purchase & Refund Terms.

Note: Backups created by your device's operating system (such as iCloud or Google) are outside the app's control, and an earlier backup may retain a copy of your data.

For any privacy question, or to exercise your rights, contact us at the address in the "Contact" section; we will respond within thirty (30) days. You also have the right to lodge a complaint with the competent Saudi data-protection authority (SDAIA).

Data protection

We apply appropriate organizational and technical measures: encryption in transit (HTTPS/TLS on every request), keeping your personal data in on-device storage with no app-operated datastore, on-device redaction of identifying details before any transmission, and proxy logs restricted to technical data that contains no content.

Children

The app is intended for working adults. It is not directed at children and does not knowingly collect data from children.

Changes to this policy

We may update this policy from time to time. Any update is published on this page, with the "Last updated" date below revised accordingly. Continued use of the app after an update is published constitutes acceptance of the updated version.

Contact

• Privacy questions and exercising your rights: privacy@almatrafi.studio
• Legal contact: legal@almatrafi.studio
• Entity: Abdullah Hamad Almatrafi Co.
• Commercial Registration: 7053928896