Privacy policy
Draft operational policy for the Career Guru MVP. Payments remain closed until the operator has completed its business details, verified the service setup and reviewed applicable requirements.
Anonymous assessment
You can take the free quiz without a name, phone number, school, date of birth or account. Answers are stored in session storage in your browser tab. Clear them with “Start again” on the results page, or close the tab. Your language preference is stored locally.
Adult and guardian accounts
Online accounts and purchases are restricted to adults aged 18 or older using their own email address. A guardian may explore with a child, but must not enter a child’s identifying details. We do not offer direct registration for minors. An adult declaration alone is not a verified parental-consent system; collecting identifiable child data requires a reviewed consent process before launch.
Account and payment data
When you choose to save results, Supabase stores your adult account identifier, assessment choices, saved interests and exploration history. Payments record the purchase reference, amount, status and bank transaction reference. WhatsApp receives the purchase reference when you choose to contact the operator. Do not send bank credentials, OTPs, card numbers or a child’s personal information.
AI guidance
Questions are sent to OpenAI on the server to generate a response. We request store:false and do not store chat transcripts in the application database. Provider processing and retention still follow your provider agreement. Do not include names, contact details, school identifiers, financial or sensitive information.
Analytics and advertising
Optional Google Analytics runs only after an adult opts in. Essential-only is recommended for visitors under 18. We do not load Meta Pixel in this MVP. Consented aggregate events cover quiz progress and report downloads. Account and payment records necessary to deliver the service are separate from optional analytics.
Retention, access and deletion
The operator must configure deletion of exploration history and analytics events after 90 days. Payment records must follow applicable accounting retention requirements. Contact the operator through the Contact page to request account access or deletion. Some legally required financial records may be retained. Browser preferences can be removed through browser site settings.
Before public launch
The legal operator’s name, address, privacy contact, processor agreements, hosting region, retention schedule and any required guardian-consent verification must be completed and reviewed. This draft is not a legal compliance certification.