Effective date
This Privacy Policy applies to the Itqan app and related Kiducate web pages. Last updated: August 25, 2026.
Itqan by Kiducate
Privacy Policy
There is no account. Writing, previewing and exporting your CV all happen on your device. Two optional features — importing an existing CV, and tailoring your CV to a job advert — do send content to a service we run, and this page explains exactly what.
This policy is also available in Arabic: سياسة الخصوصية بالعربية
1. What Itqan does
Itqan helps you write a CV in Arabic or English and export it as a PDF.
There is no account and no sign-in. Writing, previewing and exporting your CV all happen on your device and work with no internet connection.
Two optional features do use the internet, because they need a service we run: importing an existing CV, and tailoring your CV to a job advert. Section 4 explains exactly what those send. Every other part of the app works without them, and you can use Itqan without ever touching either one.
2. You do not need an account
Itqan does not ask you to register, sign in, or give us an email address.
3. Where your CV is stored
The CV you write — your name, contact details, work history, education, skills, languages, certifications and any photo you add — is stored on your device, in the app's local storage. We do not have a server that holds your CV, and we cannot read it.
Your PDF is produced on your device and handed to your phone's standard share sheet. We are not involved in where you send it.
4. Importing an existing CV, and tailoring to a job advert
These are the only two features that send anything off your device. Both are optional and both are clearly marked in the app before they run.
What is sent
- Import: the PDF or Word file you attach, or the text you paste.
- Tailoring: the text of your CV, and the text of the job advert you paste.
Where it goes. To a Cloudflare Worker we operate, which passes it to a third-party AI provider — currently Google Gemini — that reads it and returns structured results: the fields of your CV, or a comparison against the advert. If Gemini is unavailable, the same request may go to Anthropic instead, as a capped outage fallback.
What happens to it afterwards. We do not store your document or your CV text. It is held in memory only for as long as the request takes, and is not written to any database of ours. We use these providers under terms that do not permit your content to be used to train their models.
What we do keep. See section 5 — it is not your CV, but it is not nothing.
A CV contains personal information about you, and may contain information about other people, such as a referee's name or a manager's. Please remove anything about someone else before importing, or do not use the feature.
5. What our service records
To stop one person or a script running up unlimited costs on a service we pay for per use, our import and tailoring service records:
| What | Why | How long |
|---|---|---|
| Your IP address | Counting requests per network, to detect abuse | Up to 48 hours |
| A random app identifier | Counting requests per user against your plan's monthly allowance | Up to 40 days |
The app identifier is generated by RevenueCat and is not your name, your email, or anything you typed. Neither record contains any part of your CV.
These are counters. We do not build a profile from them, do not use them for advertising, and do not share them.
6. Purchases
Payment is handled by Apple or Google. We never see your card details.
We use RevenueCat to check whether you have purchased Itqan Pro. RevenueCat receives an anonymous identifier and your store receipt — not your name, your email, or your CV.
7. Analytics
We use PostHog to count six anonymous events: finishing onboarding, completing a CV section, completing a CV, opening the preview, seeing the purchase screen, and completing a purchase.
These record that something happened, never what you wrote. No CV content is ever sent to PostHog.
8. Third parties we use
| Who | What they get | What for |
|---|---|---|
| Apple App Store / Google Play | Your payment | Processing the purchase |
| RevenueCat | An anonymous id and your store receipt | Knowing whether you have Pro |
| PostHog | Six anonymous events, no CV content | Counting how the app is used |
| Cloudflare | Requests to our import service, including your IP | Running that service |
| Google Gemini (our AI provider) | Only what you attach or paste to import or tailor | Reading your document and returning the result |
| Anthropic | The same content, only when Gemini is unavailable | Fallback provider during an outage |
We may change AI provider. If we do, this page is updated to name the new one before the change ships.
9. Deleting your data
Delete a single CV in the app, or use Delete all data in Settings to wipe every CV at once. Uninstalling Itqan removes everything the app stored.
The counters in section 5 expire on their own — within 48 hours for the IP record and 40 days for the app identifier. You can also email us to have them removed sooner.
10. Your rights
Because your CV stays on your device, you already control it directly: you can read it, change it and delete it at any time without asking us.
For the analytics events and the counters described above, write to support@kiducate.eu and we will tell you what we hold and delete it on request.
11. Children
Itqan is for job seekers. It is not aimed at children, and we do not knowingly collect information from them.
12. Changes to this policy
We will update this page before adding any feature that changes what leaves your device, and we will note the date at the top.
13. Contact
For privacy questions, contact Kiducate at support@kiducate.eu.