Effective 6 July 2026
Privacy Policy
This policy explains how Kelcai Group (“Kelcai”, “we”, “us”) handles personal data when you use kelcaigroup.com, the Kelcai Android or iOS apps, courses, certificates, JobReadyCV, mentorship, coaching, the Talent Marketplace, and related services.
1. Data we collect
Account and contact data: name, email address, password hash, Google account identifier if used, profile image, optional phone number, and authentication/session records.
Learning and profile data: enrollments, course activity, progress, exercise results, reviews, certificates, saved career documents, CV content, generated resumes and cover letters, and optional Talent Marketplace profile details.
Booking and transaction data: mentorship or coaching goals, preferred times, contact details, purchase history, transaction references, subscription status, currency, and amounts. Payment card details are handled by payment providers and are not stored by Kelcai.
App, device, and usage data: IP address and server logs, device/app identifiers, notification tokens, ad interactions, consent choices, pages and features used, approximate location inferred by service providers, crash or diagnostic information, and browser/device characteristics.
Communications: messages and information you send to support, administrators, mentors, or through forms.
2. How we use data
- Provide accounts, courses, progress tracking, certificates, career tools, bookings, payments, notifications, support, and account security.
- Generate requested JobReadyCV content and improve the reliability and usability of our services.
- Display and measure advertising, obtain required consent, prevent excessive ad frequency, and detect fraud or abuse.
- Operate the optional Talent Marketplace when you expressly opt in and show qualified recruiters the profile information described at the time of consent.
- Comply with legal, accounting, tax, security, and dispute-resolution obligations.
3. When data is shared
We do not sell personal data. We disclose only what is necessary to service providers acting for us, including hosting and email providers; Stripe and PayPal for payments; Google services and YouTube for sign-in or course media; OneSignal for push notifications; Google AdMob and consent services for advertising; OpenAI when you ask JobReadyCV to generate content; and professional advisers or authorities where legally required. If you opt into the Talent Marketplace, eligible recruiters can access the professional and contact information explained in that feature.
4. Advertising and tracking choices
The mobile apps use Google Mobile Ads and consent tools. Depending on your region and choices, advertising providers may process device identifiers and usage data for ad delivery, measurement, fraud prevention, or personalisation. Where required, we ask for consent before requesting ads. You can revisit advertising privacy choices from Account Settings in the app or through your device privacy settings.
5. Push notifications
If you permit notifications, OneSignal and the relevant Apple or Google push service process a device notification token and delivery information. You can disable notifications in your device settings at any time.
6. Retention and deletion
We retain account data while your account is active and as needed to provide the service. You may permanently delete your account from Account Settings or directly at Delete Account. After email confirmation, we delete or anonymise account-linked personal data. We may retain minimal transaction, fraud-prevention, security, or legal records for the period required by applicable law. Backup copies are removed through normal backup rotation.
7. Your choices and rights
Depending on where you live, you may request access, correction, portability, restriction, objection, or deletion of your personal data, and may withdraw consent. You can update common profile details in Account Settings, opt out of the Talent Marketplace immediately, change advertising choices in the app, or contact us. You may also complain to your local data-protection authority.
8. Security and international processing
We use administrative and technical safeguards designed to protect personal data, including access controls, password hashing, encrypted network transport, and restricted service-provider access. No system is completely secure. Our providers may process data in countries other than yours, subject to appropriate contractual or legal safeguards where required.
9. Children
Kelcai is not directed to children under 13, or a higher minimum age where local law requires it. We do not knowingly collect personal data from a child who cannot legally consent. A parent or guardian who believes a child provided data should contact us for removal.
10. Changes and contact
We may update this policy as services or legal requirements change. We will post the revised date and provide additional notice for material changes where appropriate. Questions or privacy requests can be sent to contact@kelcai.com.