Privacy policy
Last updated November 1, 2026
Sekka helps you keep track of your job applications. This policy explains what data we keep, why, who else receives it, and the choices you have. It follows Egypt's Personal Data Protection Law (No. 151 of 2020).
What we keep
- Your account: your email, your password (stored only as a secure hash, never readable), or your Google account ID if you sign in with Google; your language, time zone and email preferences.
- What you enter: companies, roles, job links and job descriptions, statuses, dates, notes, interviews and follow-ups, and your profile (name, headline, city, education, experience, skills and languages). Your profile is private unless you turn on "Open to recruiters".
- Your CVs, if you upload them: the files, and the text we read from them so Sekka AI can use it.
- Technical data: requests to our servers and error reports, with email addresses removed, and your IP address, which we use to stop abuse such as password guessing.
How we use it
- To run your account and show you your applications.
- To send the emails you need or asked for: confirming your email, resetting your password, and the morning reminder about follow-ups. You can stop reminders from the link in any reminder or in settings.
- To count how Sekka is used (sign-ups, applications added, active users) under a random ID. These counts never include your email, your name or anything you type.
- To find and fix errors.
We don't sell your data, we don't show ads, and we don't share what you write with employers.
Who else receives it
We use these services to run Sekka. Each one handles data only to provide its service to us, and some of them are outside Egypt:
- Neon: the database where your account and applications are stored.
- Cloudflare R2: stores the CV files you upload, in private storage.
- Render and Vercel: the servers that run Sekka and its website.
- Vercel Web Analytics: counts page visits (which page, country, device type and referring site) without cookies and without identifying you.
- Resend: sends our emails, so it receives your address and the email.
- Google: only if you choose Sign in with Google.
- PostHog (EU): the usage counts described above, without your email or what you type.
- Sentry: error reports, with personal data removed before they're sent.
We may also share data if the law requires it.
The browser extension
The Sekka extension reads the page you're on only when you click it, and sends the company, role and link to your account only when you click Save. It can't see your other tabs or your browsing history, and it keeps nothing itself.
Your choices
- Download everything we keep about you from Settings › Your data.
- Change or delete any application or CV at any time.
- Stop reminder emails from the email itself or from settings.
- Delete your account from Settings. This deletes your account and everything in it right away.
How long we keep it
We keep your data while your account exists. When you delete your account, it's deleted at once from the database. Database backups and our providers' logs keep copies for a short time after that (usually no more than 30 days) and then delete them.
Security
Connections are encrypted (HTTPS), passwords are stored as secure hashes, login sessions live in secure cookies, and repeated login attempts are slowed down. No system is perfectly secure, so if something goes wrong we'll tell affected users and the authorities as the law requires.
Age
Sekka is for people aged 16 or older.
Changes to this policy
When this policy changes, we update the date at the top. If the change is important, we'll email you before it applies.