Privacy Policy

Kif (trykif.com) is a talent network that matches people looking for work with organisations hiring, in both directions, and introduces them only when both sides agree. It is operated by Muhammad Umair Khan, Pakistan (“we”, “us”), who is responsible for your personal data.

For any privacy question or request, write to [email protected].

We only collect what the service needs to work:

• Account details: your name and email address, provided through our sign-in provider when you create an account. We never see your password.
• Your candidate profile, if you create one: headline, summary, work history, achievements, skills, location, work preferences, availability, work authorization and, if you choose to give it, your pay expectation.
• Conversations with the assistants: the messages you send and the replies, so the conversation can continue and your profile or role stays accurate.
• Documents you upload (a CV or a job description): the file is read once and is not stored. Email addresses, phone numbers and national ID numbers are removed before the text is processed. Only the details you review and approve are saved.
• Hiring information, if you hire: your organisation, its members, the roles you create, your decisions on candidates and any feedback you give.
• Trust signals you choose to add: a GitHub username you verify, people you ask for a reference (their name and email, and the answers they give), and work samples.
• Public pages and their AI chat: if you create a share link, visitors can ask its assistant questions. We keep those sessions for 7 days and store a hashed (irreversible) form of the visitor's IP address, not the address itself.
• Technical data: IP addresses and request details used for security, rate limiting and fixing errors. Our logs identify people by pseudonymous IDs, not by name or email.
• Feedback and error reports: messages you send through the Feedback button (and an email address if you add one), and automatic reports when something fails on a page: the page address, an error code and a reference, never what you typed. They are stored and emailed to our team so we can fix problems.

• To build and keep your profile or role up to date, including turning what you write or upload into structured information.
• To match candidates and roles in both directions, explain why a match may fit, and rank results.
• To arrange introductions when both sides say yes, and to send you notifications about them.
• To keep the service secure, prevent abuse and fix problems.
• To improve the service using aggregated information that does not identify you.

We do not sell your personal data, we do not show advertising, and we do not use your data to train AI models. Our AI provider processes what we send it to answer our requests, under its own terms (see “Service providers we use”).

We process your data because you asked us to provide the service (our agreement with you), because you consented (for example to optional trust signals or a public share link), and for our legitimate interest in keeping the service safe and working.

An AI model reads your messages and uploaded documents to extract facts (for example “Senior Engineer at PayFlow since 2021”) and to draft short text such as a summary. Every extracted fact must appear in what you wrote, and you can review and correct everything. AI output can still be wrong, so please check it.

Matching scores come from a rule-based matching engine, not from the AI model. Nothing about you is decided by automation alone: an introduction happens only when both the candidate and the hiring organisation actively choose it, and contact details are shared only after both confirm.

Hiring organisations' requirements are checked for wording that could discriminate (for example on age or gender), and requirements based on protected characteristics are not allowed.

• Before an introduction, a hiring organisation whose role matches you sees a pseudonymous profile: a label instead of your name, your headline and summary, city and country, work preferences, availability, skills, and your roles with their achievements. They do not see your name, email, phone or pay expectation.
• After both sides agree to an introduction and both confirm it, the two parties see each other's contact details.
• Your pay expectation is private. It is only used to check whether a role's pay range could work for you, and is never shown to anyone else.
• Public pages exist only if you create a share link, show only what that page is designed to show, and can be turned off at any time.
• Hiring organisations' roles are visible to matched candidates once published; the organisation's internal notes and feedback are not.

A few companies process data on our behalf, only to run the service and under their own security and confidentiality obligations:

Because of these providers, your data may be processed outside your country. Please avoid putting information in chat messages that you would not want processed by an AI provider, such as passwords, ID numbers or health details. Contact details are removed from uploaded documents before AI processing.

We may also disclose information if the law requires it, or to protect the safety of our users or the public.

• See and correct your information at any time on your profile or role page, or by telling the assistant.
• Pause or hide your profile so it stops being matched or shown.
• Remove share links, references and verified accounts yourself.
• Get a copy of your data or delete your account by writing to [email protected] from the email on your account. We reply within 30 days.
• Withdraw consent for anything optional at any time; it does not affect what was done before.

Depending on where you live, you may have further rights (for example under the EU or UK GDPR) and the right to complain to your data protection authority. We would appreciate the chance to fix any concern first.

Connections are encrypted (HTTPS), every request is checked against your account, and each organisation can only reach its own roles and candidates. Access to servers is limited to key-based logins. No system is perfectly secure; if a breach affects your data, we will tell you and the relevant authorities as the law requires.

We use only what is necessary: our sign-in provider sets cookies to keep you signed in securely, and your browser's local storage remembers small preferences such as the colour theme. We do not use advertising or tracking cookies, and no analytics service follows you around the web.

Kif is for people aged 18 and over. We do not knowingly collect data from anyone younger; if you believe we have, tell us and we will delete it.

If we change this policy in a way that matters, we will update the date above and tell signed-in users in the app or by email before the change takes effect. The current version always lives at trykif.com/privacy. See also our Terms of Service.