Privacy Policy

1. Data controller

The controller of the personal data processed through the ARJAH app is:

Turki Fayez
Product: ARJAH | أرجح
Kingdom of Saudi Arabia
Privacy email: arjah@turkifayez.com

2. Data we collect

We may collect and process the data needed to provide ARJAH’s services. Depending on how you use the App, this includes:

• Account data, such as your name, email address and account identifier.
• Data provided through sign-in services, such as Sign in with Apple.
• Your CV and files, and the information they contain.
• Professional information, such as work experience, qualifications, skills, job titles and professional fields.
• Job search preferences, such as job titles, location, sector and experience level.
• CV analysis results, and job-fit scores or indicators.
• Saved jobs, and the status of the opportunities or applications you manage in the App.
• App usage data and your interactions with its features.
• Limited technical information, such as device type, app version, error logs, and technical and security events.
• Subscription information and subscription status that we receive from the App Store.
• Information you send us when you contact support.

We do not directly collect bank card or credit card details when you make purchases through the Apple App Store; payment data is processed by Apple in accordance with its own policies and terms.

3. How we obtain your data

We may obtain data:

• Directly from you, when you create an account or complete your profile.
• From the CV or documents you upload.
• From your use of the App and your interactions with it.
• From the sign-in providers you choose to use.
• From the App Store, regarding your subscription status or purchase.
• Automatically, from the systems used to run the App and to improve its stability and security.

ARJAH also relies on job information published by recruitment sources and publicly available sources to provide its job discovery and matching service.

4. Purposes of processing

We use your personal data for the following purposes:

• Creating, managing and verifying your account.
• Analyzing your CV and extracting professional data from it.
• Building a professional profile that helps in understanding your experience and skills.
• Searching for job opportunities that match your profile and preferences.
• Calculating and analyzing how well you fit job opportunities.
• Providing career recommendations and insights related to your experience.
• Personalizing your experience of the App.
• Sending notifications about your account, or about search results and services you requested.
• Managing subscriptions and paid features.
• Responding to support requests and inquiries.
• Monitoring the App’s performance, diagnosing errors and improving the quality of the service.
• Protecting users and the App, and preventing fraud or misuse.
• Meeting legal and regulatory requirements where they apply.

Your data will not be processed for a new purpose that is incompatible with the purpose for which it was collected, except in accordance with the applicable legal requirements.

5. Legal basis for processing

Your personal data is processed on one or more of the permitted legal bases, depending on the nature of the processing, including:

• Your consent, where the law requires consent.
• Processing that is necessary to provide the service you requested or to perform the relationship between you and ARJAH.
• Compliance with a legal or regulatory requirement.
• Pursuing a legitimate interest, where the law allows it and after taking your rights and interests into account, without using this basis to process sensitive data where the law does not allow it.

Where consent is the basis for processing, you may withdraw your consent; this does not affect the lawfulness of processing carried out before you withdrew it.

6. Artificial intelligence and automated processing

ARJAH uses artificial intelligence technologies, algorithms and models to help:

• Analyze CVs.
• Identify experience and skills.
• Discover relevant jobs.
• Assess how well a user’s profile matches job requirements.
• Generate career recommendations and insights.

Data may be processed automatically to produce a fit score or a job recommendation.

These results are for guidance only. They are not a guarantee of a job or an interview invitation, and ARJAH does not make hiring decisions on behalf of employers.

The data needed to deliver these services may be processed by technology or AI model providers acting as service providers to ARJAH, under the applicable contractual and regulatory controls.

7. Data sharing

We do not sell your personal data.

The minimum necessary data may be shared with parties that provide technical services to ARJAH, such as:

• Hosting, database and cloud infrastructure services.
• AI processing services.
• Operations and process automation systems.
• Analytics and app performance measurement services.
• Notification delivery services.
• Subscription and payment management services.
• Technical support and cybersecurity service providers.

Service providers are bound to process data for the purposes specified to them and in accordance with the applicable legal and contractual requirements and controls.

We may also disclose data when the law requires it, or in response to a request from a competent authority made in accordance with legal procedures.

ARJAH does not automatically send your CV to an employer or submit a job application on your behalf, unless the App offers such a feature in the future and you clearly enable it or agree to it.

8. Transfers outside the Kingdom

ARJAH may use providers of technical, cloud computing or artificial intelligence services whose systems or infrastructure are located outside the Kingdom of Saudi Arabia.

Where personal data is transferred outside the Kingdom, or made available to a party outside the Kingdom, the transfer is handled in accordance with the Personal Data Protection Law and the Regulation on Personal Data Transfer outside the Kingdom, using appropriate safeguards and in line with the applicable legal requirements.

We aim to transfer only the minimum data needed to achieve the purpose of the processing.

9. Data retention

We keep personal data only for as long as needed to achieve the purpose for which it was collected.

The retention period is determined by:

• Whether the user’s account remains active, and the need to provide the service.
• The nature of the data and the purpose for which it is processed.
• Legal or regulatory obligations that require it to be kept.
• The need to protect rights or to handle claims and disputes.
• Security requirements and the prevention of fraud and misuse.

When the data is no longer needed for legal or operational purposes, it is destroyed or anonymized in an appropriate way, unless another law requires it to be kept.

Data may remain in backups for a limited period, until those backups are replaced or destroyed under the approved backup cycle.

10. Data security and protection

We take appropriate organizational, technical and administrative measures to protect personal data against:

• Unauthorized access.
• Unauthorized use or disclosure.
• Alteration or loss.
• Unlawful destruction.
• Leaks or breaches.

Access to data is restricted according to need and to the permissions required to provide and operate the service.

No online service can guarantee absolute data protection, so we review and improve our protection controls in proportion to the nature of the data and the risks of processing it.

11. Your rights

Under the Personal Data Protection Law and related regulations, and subject to the applicable cases and legal controls, you have the following rights:

1. The right to be informed: to know how your personal data is collected and processed, and for what purpose.
2. The right of access: to request access to the personal data we hold about you.
3. The right to obtain your data: to request a copy of your personal data in a clear and readable format, in accordance with legal requirements.
4. The right to correction: to request that your personal data be corrected, completed or updated.
5. The right to destruction: to request that your data be destroyed when it is no longer needed, or in other cases set out by law.
6. The right to withdraw consent: where processing relies on your consent, you may withdraw it in accordance with legal controls.

You can submit a request to exercise these rights through:

arjah@turkifayez.com

We may ask for additional information to verify the requester’s identity before acting on the request.

We work to handle requests to exercise these rights within the periods set by the applicable laws and regulations.

12. Account deletion

You can request the deletion of your account and personal data through the options available in the App, or by contacting us.

Once a deletion request is confirmed, data that there is no longer a legal basis to keep will be deleted or destroyed, subject to any legal obligations that require certain data to be kept for a specified period.

13. Data breach incidents

If an incident involving personal data occurs, we take the measures needed to deal with it and limit its effects.

The competent authority and the affected data subjects will be notified whenever the laws and regulations require it.

14. Minors and persons lacking legal capacity

If the processing of data concerns a person who lacks full or any legal capacity, it will be handled in accordance with the legal requirements on the consent of their legal guardian and the guardian’s exercise of their rights, where those requirements apply.

15. Third-party services and websites

The App may show links to, or information from, job sites or other parties.

External websites and services are not covered by this policy, and we recommend reviewing their own privacy policies before providing any data through them.

16. Changes to this privacy policy

We may update this policy from time to time to keep up with changes to the App or to legal or operational requirements.

The date of the last update will be shown at the top of this policy, and users may be notified of material changes through the App or by any other appropriate means.

17. Contact us

For any question or request about privacy or the processing of your personal data, you can contact us by:

Email: arjah@turkifayez.com

We will handle your request in accordance with the laws and regulations in force in the Kingdom of Saudi Arabia.

If you have a complaint about the processing of your personal data, you have the right to file it with the Saudi Data and Artificial Intelligence Authority (SDAIA) through the official channels available for that purpose.