Privacy Policy

Jinni is a hiring platform built by Jinni Tech ("Jinni Tech", "we", "us"). It includes the Jinni mobile app, the employer dashboard and this website. Jinni Tech is the data controller for the personal data described in this policy.

We are based in Nigeria and follow the Nigeria Data Protection Act 2023 (NDPA). If you use Jinni from elsewhere, we apply the same protections to your data. Contact us about privacy at jinnitechnology@gmail.com.

We only collect what we need to run Jinni:

• Account details: your name, email address, password (stored only in encrypted form) and whether you are a job seeker or an employer. If you sign in with Google or LinkedIn, we receive your name, email address and profile picture from them.
• Profile and CV: your skills, experience, job preferences and any CV or documents you upload.
• Employer details: company name, role, business information and the documents we use to verify that an employer is genuine.
• Activity: jobs you view, swipe, save or apply to, candidates you shortlist, and messages between job seekers and hiring managers.
• Payments: which plan you bought, when, and the payment reference. Card and bank details are handled by Paystack and never reach our servers.
• Identity checks: if we ask employers or users to verify their identity, the ID document and selfie checked by our verification provider.
• Device and usage data: device type, operating system, app version, IP address, a push-notification token, how you use the app and website, crash reports (which can include your user ID and email address) and logs that keep the service secure and working.
• Waitlist: the name and email address you give us to join the waitlist, and which phone you use.

• To create and run your account and show your profile to the right people.
• To match job seekers with roles. Match scores come from rules that compare your skills and preferences with each role.
• To power AI features: reading your CV, suggesting details for your profile, helping employers write job descriptions and writing short candidate summaries for employers.
• To verify employers before they can post jobs, so job seekers know who they are talking to.
• To let job seekers and hiring managers message each other.
• To take payments for Premium and manage your subscription.
• To send service messages, such as application updates, receipts and security alerts.
• To keep Jinni safe: preventing fraud, spam and misuse, and fixing problems.
• To understand how Jinni is used, in aggregate, so we can improve it.
• To meet our legal obligations.

We do not sell your personal data, and we do not use it for third-party advertising.

Under the NDPA we rely on: contract, to provide the service you signed up for; consent, for things like marketing emails and optional features, which you can withdraw at any time; legitimate interests, such as keeping Jinni secure and improving it, where those interests are not outweighed by your rights; and legal obligation, where the law requires us to keep or share data.

Match scores are calculated by fixed rules, not by AI. Separately, we use Google's Gemini AI to read CVs, suggest profile details, draft job descriptions and summarise candidates for employers; Google processes this text on our behalf to provide those features. Neither matching nor AI makes hiring decisions: employers decide who to contact and hire, and AI suggestions can be wrong, so please check them. You can ask us to explain a match or review an automated result by emailing jinnitechnology@gmail.com.

• Employers and job seekers on Jinni: when you apply or match, the employer sees your profile and CV. When an employer contacts you, you see their verified company details.
• Service providers who run parts of Jinni for us, under contracts that protect your data:
  • Supabase: database, file storage and sign-in;
  • Vercel: website and dashboard hosting, and privacy-friendly web analytics;
  • Google: Gemini AI features, and Google sign-in;
  • LinkedIn: LinkedIn sign-in;
  • Paystack: payments (we never see your card details);
  • PostHog: app usage analytics, hosted in the EU;
  • Sentry: crash reports;
  • Expo: push notifications and app updates;
  • Loops: the waitlist and email updates;
  • Didit: identity verification, once we introduce it.
• Authorities,when the law requires it or to protect people's safety and rights.
• A buyer or successor, if Jinni Tech is reorganised, merged or sold. This policy would continue to apply to your data.

Some of our providers store or process data outside Nigeria. When that happens we make sure the transfer is allowed under the NDPA, for example because the country has adequate protection or because the provider has agreed to contractual safeguards.

We keep your data while your account is open. When you delete your account, your profile, CV, applications, matches and messages are deleted straight away (see what gets deleted). Copies can remain in database backups for up to 30 days. Paystack keeps payment records as the law requires, analytics and crash data are kept for a limited time, and identity-check records are kept by our verification provider as the law requires. Waitlist names and emails are kept until launch or until you unsubscribe.

You have the right to:

• access the personal data we hold about you and get a copy of it;
• correct data that is wrong or incomplete;
• delete your account and data (see how to delete your account);
• object to or restrict some processing, and withdraw consent at any time;
• receive your data in a portable format;
• not be subject to a decision based solely on automated processing that significantly affects you;
• complain to the Nigeria Data Protection Commission (NDPC) if you think we have mishandled your data.

Email jinnitechnology@gmail.com to use any of these rights. We reply within 30 days.

We protect your data with encryption in transit and at rest, access controls and row-level security in our database, so each person can only see what they are allowed to. No system is perfectly secure; if a breach affects your data, we will tell you and the NDPC as the law requires.

This website does not use advertising cookies. It uses your browser's storage to remember that you have seen the intro animation and to keep you signed in when you buy Premium. When you join the waitlist, your browser remembers which list you joined and your first name (not your email), so the page can tell you you're already on it next time, and a cookie remembers for one minute which list you joined so the page can confirm it. Vercel Web Analytics counts visits without cookies.

Jinni is for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us their data, email jinnitechnology@gmail.com and we will delete it.

We may update this policy as Jinni grows. We will change the date at the top and, for significant changes, tell you in the app or by email before they take effect.

Questions or requests about your privacy: jinnitechnology@gmail.com.