Candidate access is free. Saving a CV does not give every company access to it. You can request account and associated personal-data deletion without signing in.
Who is responsible
jobPath and the related UDEV HR recruitment workspace are operated by Chukwuemeka Aigbokhan, an individual based in the United Arab Emirates. UDEV and jobPath are service names; this notice does not describe the operator as an incorporated company or government body. Contact bigaboy09@gmail.com for support, privacy questions and data-rights requests.
This policy covers Candidate registration, the jobPath app, recruitment activity, the HR workspace and these recruitment support pages. Separately arranged travel or other services on the broader UDEV website may have different notices. An independent employer or agency is responsible for its own use of information it receives.
Information we collect
We collect information you provide, information created through recruitment actions, and technical information needed to run and protect the service.
- Registration and profile: name, WhatsApp number, nationality, current country, UAE residence answer, age range, gender response, positions and experience. Your chosen questionnaire route can also include passport/visa status, travel timing, ability to fund travel or support, accommodation/pickup needs and certificate-attestation answers. Funding-readiness answers are not a payment or purchase.
- Account and security: account and queue references, protected PIN credentials, activation/recovery challenges, session state, security counters and account-recovery records. HR accounts use a work email, protected authentication credentials and verification state. Never send us your PIN or activation/recovery code in an email or support message.
- Recruitment activity: job interests and applications, invitations, consent and exact shared-file versions, interviews, document requests and responses, employer-provided documents, acknowledgments, stage decisions and hire/worker records. HR review notes, moderation decisions and relevant audit activity are also recorded.
- Files you choose: CVs, passports, passport photographs, certificates, licences, police-clearance records and other supported recruitment files, together with their names, type, size, version and upload metadata. Employers can provide offer letters, travel documents and employment-visa documents. Files may contain identity, photograph, employment, financial or other sensitive information; provide only what the relevant workflow needs.
- Company and team information: business/contact details, registration information supplied for approval, HR membership and invitations, jobs, plan assignments and expiry, usage limits, recruitment history and related administrative or payment-verification records where supplied. Candidate access has no checkout.
- Technical and communication data: IP/network information, app/browser/device and SDK information, Firebase installation and push tokens, request/error/security events, notification delivery/read timestamps, support correspondence and information you send in a complaint. We do not read your WhatsApp history, contact list or other apps' private messages.
How we use information
We use information to provide and secure accounts, assess your selected questionnaire route, show jobs, manage positions and experience, support applications and invitations, store and share selected documents, arrange recruitment updates, record responses and hires, operate company approvals and subscriptions, provide support and account recovery, prevent fraud and diagnose service failures. We also record operational registration/recruitment events to understand and maintain the service.
Processing follows the service you request, your sharing directions and permissions, and applicable legal requirements. Where consent is required, you may withdraw it through the relevant control or by contacting support. We explain if doing so prevents us from providing a requested feature. This notice does not replace a feature's specific disclosure or permission request.
We do not sell Candidate personal data or use it for optional marketing or promotional messages, including within the UAE. Communications use Candidate details for recruitment, account and support purposes.
International processing
You may use the service from one country while an employer, agency or provider processes information in another. Our hosted backend uses Google infrastructure, including US-based services; providers may process technical or support information in other countries under their applicable terms. Selecting a job destination is not a promise that all information stays in that country.
We limit access and sharing to the service purpose and applicable permissions and use the providers' contractual data-protection arrangements where relevant. Review the named employer/agency and destination before sharing information for an international opportunity. Contact us if you need information about recipients or processing for your account.
Permissions, storage and your controls
The Candidate app uses the system file picker for files you select; this does not require unrestricted access to your photo library. Notification permission is requested where Android requires it. You can disable notifications in device settings and check current requests in the app instead. Permission to display a notification does not grant document-sharing permission.
This Candidate version has no feature requesting your contact list, SMS, microphone or precise GPS location. Country and nationality answers are entered by you. Firebase and security SDKs may still process installation, app/device and network information independently of notification display permission.
The app stores session and limited recruitment/notification data locally to operate the service. The HR browser uses session storage for authentication. These public support pages do not embed advertising or analytics scripts. Infrastructure providers may still record ordinary access/security information. Signing out does not erase your server account. Files you download or save outside the app remain under your control.
How we protect information
Production connections use HTTPS. Authentication, App Check, server-side authorisation and company/job-specific checks restrict access. Private recruitment files use controlled access and selected sharing versions; credentials are protected rather than stored as readable PINs. Access is limited to the relevant duties and workflow. No service can guarantee absolute security. Report a suspected security issue to bigaboy09@gmail.com without attaching unnecessary personal documents or secrets.
Retention and deletion
We keep account and recruitment information while providing the service and managing its associated activity, unless you request deletion or another applicable deletion requirement arises. There is no blanket exception to keep an identifiable Candidate profile forever because the person was hired. Only genuinely anonymous recruitment statistics may remain after account deletion.
You can request account and associated personal-data deletion in Profile → Delete account, from the sign-in Delete account link, or through the public Account deletion page without signing in or reinstalling the app. Email bigaboy09@gmail.com with subject jobPath account deletion request. Include your queue number if known; if unknown, ask support to locate the account securely. Do not send a PIN, activation/recovery code, passport or CV by email. Opening a draft is not submission: review and send it.
Support verifies ownership through the WhatsApp number registered to the account. If you cannot use that number, contact support to discuss safe verification; do not create another account to request deletion. Our target is removal of the active account and associated personal recruitment data/files within 7 days after verification. This includes profile and questionnaire answers, authentication identity, saved files, applications, invitations, shares, notifications and identifiable hire records. If an unresolved hold or recoverable copy threatens that target, we explain the issue and next steps rather than falsely reporting completion.
Underlying provider copies are separate. Once the data is no longer recoverable to UDEV and a qualifying deletion instruction takes effect, applicable Firebase/Google Cloud terms allow up to 180 days for provider-system deletion unless applicable law requires storage. That period does not necessarily begin when ownership is verified. Our new private-file bucket has no soft-delete recovery; older deleted files can remain recoverable for seven days and must be resolved during fulfillment. Residual provider copies must not be used to restore your deleted account or recruitment history.
Technical and security logs can contain account/request identifiers, network information, timestamps and error/access events. The current standard Google Cloud log bucket retains entries for 30 days; Google's mandatory audit bucket retains entries for 400 days and its retention cannot be shortened by us. These support security, abuse investigation and infrastructure accountability. They are access restricted; these durations do not authorise keeping your CV or recruitment profile as a log. We do not promise every log is erased within 7 or 180 days.
An employer/agency may already hold information or documents you shared. We explain and coordinate necessary follow-up, but cannot remotely erase its independent copies. Support correspondence, exports and local copies also require review and follow-up; we explain any justified remaining information, purpose and retention before reporting completion. An individual deletion case is removed after verified closure rather than kept as a permanent personal receipt.
The three-calendar-month company history-recovery window is a subscription-access rule, not a Candidate deletion period. Expiring a company plan or hiding an archived report does not delete Candidate accounts. Withdrawing an application, resetting a PIN and uninstalling the app are also different from account deletion.
Your requests and complaints
Contact bigaboy09@gmail.com to ask about access, correction, deletion, restricted use, withdrawal of consent, relevant portability rights or a privacy complaint. Available rights depend on applicable law. We may need proportionate ownership verification before disclosing or changing account information. If a request cannot be fulfilled, we explain the reason and any available next step. These procedures do not limit rights or complaints to a competent authority under applicable law.
Age, changes and contact
jobPath registration is intended for people aged 18 or older. Registration answers are self-reported and are not identity or age verification. If you believe an under-18 account has been created, contact support. Nationality, supported registration countries and Google Play distribution are separate from a vacancy's eligibility requirements.
We update this page's effective date when the policy changes. Material changes are communicated through a suitable service notice or contact route where appropriate; a new purpose requiring consent needs that consent. Privacy/support contact: Chukwuemeka Aigbokhan, United Arab Emirates, bigaboy09@gmail.com.