1. Who is responsible
Kaplift, the company named at the bottom of this page, decides how your personal data is used. This notice explains what we collect, why, who helps us, how long we keep it and what you can do about it.
2. What we collect
- Account: your phone number, your name, your country, your language and your sign-in history.
- Assessment: your answers (education, field, experience, languages, goals and target countries) and your score.
- Documents: what you upload or paste: CV, diplomas, transcripts, certificates, LinkedIn profile, photos of papers.
- Profile: what our AI reads from your documents and what you confirm or correct: education, jobs, skills, languages, goals. Also your analysis, your generated files and, on Pro, your conversations with the AI agent.
- Opportunities: the opportunities you save, follow or make your goal, and your alert preferences.
- Payments: the plan, amount, date, payment method, operator and reference. For mobile money, the number and the registered name when the operator shows it. If you recommend Kaplift, your payout account and your commissions.
- Usage: pages and features used, device type, IP address, error logs and the record of your consents.
What we never collect: national ID numbers, passport numbers or ID documents. If one appears in a document, it is removed when the document is read. We never ask for your PIN or your card details. We don’t ask for your religion, health or ethnic origin. Photos have their location data (EXIF/GPS) removed in your browser before upload.
3. Why we use it
- To run your account and sign you in.
- To give you your assessment, your analysis, your files and your opportunities.
- To take payments, run renewals and send reminders.
- To pay commissions if you recommend Kaplift, and to prevent fraud.
- To answer you when you contact us.
- To keep the service secure and to fix errors.
- To meet our legal duties (accounting, tax, requests from authorities).
We use your data on these bases: the contract between us (providing what you paid for), your consent (the four choices below), our legitimate interest (security and fraud prevention) and our legal duties.
4. Your four choices
In Settings › Privacy you control four separate consents. Each one can be turned on or off at any time:
- Analyse my documents with AI. Your documents are sent to Claude, the AI of Anthropic (USA), to be read and analysed. Without this consent, no document is analysed.
- Keep my documents. Your original files are stored, encrypted, so you can find them again. Without it, we don’t keep your original files once they have been read.
- Send me opportunities. We send you matched opportunities and alerts by app notification, WhatsApp or SMS. This is direct marketing: you can stop it at any time.
- Share my profile. Off by default. We never share your profile with an employer, a school or anyone else unless you agree, each time, for that specific recipient.
Each choice is recorded with its date, time, the version of the text you saw and your IP address. Turning a consent off applies from then on.
5. Who helps us (processors)
We use a small number of providers. Each one handles your data only on our instructions and only for the task below:
- Anthropic (Claude), USA: AI analysis of your documents, writing your files, matching opportunities and the AI agent. Documents are sent for each request and are not kept stored with Anthropic by Kaplift. Anthropic does not use data from its commercial API to train its models.
- MooniePay (Cameroon) and Fincra (other countries): payments, payouts and the registered-name check on mobile money numbers.
- WhatsApp (Meta) and our SMS provider: sign-in codes, reminders and alerts.
- Our hosting provider: the servers and storage where Kaplift runs.
We don’t share your data with anyone else, except when the law requires it (for example a court order), and then only what is required.
6. International transfers
Some of these providers work outside your country, in particular Anthropic in the USA. When your data leaves your country, we protect it with contracts that bind the provider, with encryption, and with the approvals or notices your country’s law requires (for example from the APDP in Cameroon, ARTCI in Côte d’Ivoire and the CDP in Senegal).
7. Security
- Your documents are encrypted with a key that is yours alone. Each person has a separate encryption key (AES-256-GCM), itself protected by our master key.
- All connections are encrypted in transit (HTTPS/TLS).
- Download links work for 10 minutes or less. The app does not keep your uploads in the phone’s cache.
- Only a few staff members can reach personal data, with two-step sign-in, and every admin action is logged.
- Sensitive details (birth date, marital status, religion, state of origin) are kept out of the AI unless a CV format you choose needs them.
8. How long we keep it
- Original files: deleted 30 days after they are read, unless you choose "Keep the original".
- Profile, analysis and generated files: kept while your account is active, plus 12 months without activity. We warn you before deleting them.
- Backups: erased within 35 days.
- Payment and commission records: kept as long as accounting and tax law require.
- Consent records: kept as long as they are needed to prove your choices.
9. Your rights
You can, at any time:
- access your data and export it with "Download my data" in Settings › Privacy (a complete file, at any time);
- correct it: edit your profile cards directly, or ask us;
- delete it with "Erase my data" in Settings › Privacy: your account, documents, profile and files are permanently deleted within 30 days, and we confirm when it is done;
- withdraw any consent with its switch;
- object to marketing: turn off "Send me opportunities", or choose your channels in Settings;
- object to a use based on our legitimate interest, or ask us to limit a use while a question is checked.
For anything the app does not do by itself, write to [email protected] with the subject "Personal data". We answer within 30 days.
10. We never sell your data
Kaplift never sells, rents or trades your personal data. Not to employers, not to schools, not to advertisers, not to anyone.
11. If something goes wrong
If a security incident puts your data at risk, we tell the competent authority within 72 hours, and immediately where the law requires it (Cameroon). If the risk to you is high, we also tell you directly, without delay, with what happened and what to do.
12. Regulators
You can complain to the data protection authority of your country:
- Nigeria: Nigeria Data Protection Commission (NDPC);
- Kenya: Office of the Data Protection Commissioner (ODPC);
- Ghana: Data Protection Commission;
- South Africa: Information Regulator;
- Cameroon: Autorité de protection des données personnelles (APDP);
- Côte d’Ivoire: Autorité de régulation des télécommunications/TIC de Côte d’Ivoire (ARTCI);
- Senegal: Commission de protection des données personnelles (CDP);
- other countries: your national data protection authority.
Please write to us first: most questions are solved quickly.
13. Changes
We update this notice when our practices change. The version and date are shown with it. If a change affects your choices, we ask you again in the app.
14. Contact
Write to [email protected] with the subject "Personal data". The company details are shown at the bottom of this page.