Privacy Policy

1 Introduction

This policy explains how we collect, use and protect your personal data when you use the Numuw platform (the "Platform"), available at numuw.co and cv.numuw.co.

The Platform is currently in an early-launch stage and is operated by Mohamed Almeshal as an individual. By using the Platform or creating an account, you agree to the practices described here. During this stage, the Platform is operated by Mohamed Almeshal, as an individual (natural person), from the Kingdom of Bahrain, until the commercial registration is issued and operations move to the business entity. This policy has been designed to comply with the applicable data protection laws, including Bahrain's Personal Data Protection Law during the early-launch stage, and the principles of the Saudi Personal Data Protection Law (PDPL), as Saudi Arabia is our intended future market.

2 Data we collect

• Account data: your email address and mobile number — to create your account, sign you in and communicate with you.
• CV data (what you enter): your name, contact details, experience, qualifications, skills, and your photo if you upload one — entered by you voluntarily to create your CV.
• Technical and usage data: your browser and device type, IP address, language, the pages you visit and your navigation path within the Platform, the referring page you came from, marketing campaign tags (UTM) where present, and cookies — to operate and secure the Service, measure usage and improve the Platform.
• Payment data: payment is made by Benefit Pay transfer. We receive a screenshot of the transfer receipt from you on WhatsApp (which may include the sender's name, the transaction number, the amount and the date) solely to activate your account. We do not collect your card details.

3 Purposes of using data

• Creating and managing your account and enabling you to sign in.
• Generating and improving your CV using artificial intelligence technologies.
• Operating and maintaining the Platform and improving its quality and security.
• Communicating with you about your service (by email or WhatsApp).
• Marketing and promotion — only with your separate, optional consent: using your name, mobile number and email to send promotional offers and updates via WhatsApp or email. This consent is optional and entirely separate from your consent to use the Service, and you may withdraw it at any time (see below).

We do not use your data for purposes not described in this policy without your consent. Your consent to use the Service does not constitute consent to marketing; marketing requires separate, explicit consent.

4 Legal basis for processing

• Your explicit consent when creating an account and agreeing to this policy.
• Necessity for performing the service you requested (creating your CV).
• Your separate, optional marketing consent — as the basis for sending promotional messages only, independent of the two bases above.

You may withdraw any consent at any time (see Section 10).

5 Sharing data with third parties (processors)

To operate the Service, we use trusted service providers that process some of your data on our behalf and only on our instructions:

• Supabase (hosting, database and authentication): to store your data securely and manage sign-in.
• Anthropic (AI provider): your CV inputs are sent to it to generate suggestions and wording, solely to provide the Service to you.
• Email delivery provider (currently active): to send system emails such as password recovery.
• WhatsApp (Meta): to receive payment receipts and communicate with you about your account, and to send offers and updates only to those who have consented to them; it processes your data in accordance with its own privacy policy.

6 Transfers of data outside the Kingdom of Bahrain

Some of our service providers may have servers outside the Kingdom of Bahrain, which means that part of your data may be processed or stored outside it. We make sure that any transfer is carried out in accordance with the applicable regulatory requirements and with providers committed to appropriate protection standards. By using the Platform, you acknowledge and consent to this transfer. When operations move to the Saudi business entity, the geographical reference for this section will become the Kingdom of Saudi Arabia, and you will be notified of this.

7 Cookies

We use two types of cookies and similar technologies:

• Essential session and sign-in cookies: necessary to operate the Platform and keep you signed in.
• An internal (first-party) analytics cookie: we use a visitor identifier to measure how the Platform is used — such as the pages visited, the source of the visit and campaign tags — in order to understand usage and improve the Service.

These analytics are entirely internal; we do not share them with advertising networks or advertising third parties, and we do not use them to show targeted ads. You can control or delete cookies in your browser settings, bearing in mind that disabling essential cookies may affect how the Platform works.

8 Data protection

We take reasonable technical and organisational measures to protect your data, such as encryption and access control. Although we do our best to protect your data, the security of any online system cannot be absolutely guaranteed, and we continuously work to strengthen our protection.

9 Data retention period

We keep your data for as long as your account is active or as needed to provide the Service. When you request deletion of your account, a (14)-day grace period begins during which you can withdraw the request, after which we permanently delete your personal data. We keep financial records (transfer reference, amount and date) for the period required by law for accounting and tax compliance, without any card details.

10 Your rights

Under personal data protection law, you have the right to:

To exercise any of these rights, contact us via WhatsApp +973 3877 7687 or by email at support@numuw.co, and we will respond within the statutory period.

11 Privacy of minors

The Platform is intended primarily for persons aged eighteen or over. Persons under that age may use it with the consent and supervision of a parent or guardian, who agrees to this policy on their behalf and takes responsibility for their data. If we learn that a minor's data has been collected without the consent of their parent or guardian, we will delete it at the parent's or guardian's request.

12 Amendments to this policy

We may update this policy from time to time. The updated version will be published on the Platform with its date updated. Your continued use after an update constitutes consent to the updated version.

13 Contact

For any enquiry or request concerning your privacy and your data, contact Mohamed Almeshal via WhatsApp: +973 3877 7687, or by email: support@numuw.co.