This is a working draft. The technical descriptions below reflect how the platform is actually built; the regulatory sections still need review before launch.
Your account details (name, email, phone), the academic role you claim and any institution you attach to it, and the content you create, posts, comments, resources, applications and listings.
We record which device you sign in from, so you can review and revoke sessions, and so an unfamiliar sign-in can be flagged.
Direct and group messages are end-to-end encrypted. The keys are held by your devices; the server stores ciphertext it cannot read, index or search.
This is not a policy commitment that could be quietly reversed, the server has no way to decrypt a message. It also means we cannot recover your message history if you lose every device.
A company sees your profile because you applied to them, and only while that application stands. Withdrawing it revokes their access.
They see an explicit list of fields, your name, contact, bio, skills, career goals and verified roles, not everything we hold minus a few exclusions.
Only verified companies can view applicants or send messages at all.
We do not read your messages. We do not sell your data. We do not share your contact details with a company you have not applied to.
Identifiers such as phone numbers, BVN and NIN are stripped from anything sent to the AI assistant before it leaves our servers.
You can export everything we hold about you, and you can delete your account. Deletion runs after a grace period so an accidental request can be reversed.
Notification preferences are per category, and quiet hours are respected for everything except security and safety alerts.