Privacy policy

Last updated: 5 September 2026

This policy explains what Kejora ("we", "us", "our") collects, why, and what you can ask us to do about it. It covers the website at kejora.app and the Kejora apps for Android and iOS, which are the same service in different wrappers. Where the apps differ from the website, we say so.

We are the data controller for the personal data described here, under the Personal Data Protection Act 2010 as amended by the Personal Data Protection (Amendment) Act 2024.

1. Information We Collect

  • Account Information: your email address, display name, and phone number if you provide one.
  • Profile Information: anything else you choose to add, including a profile photo.
  • Job Post Data: if you post a job — the title, description, company details, location, and pay you enter.
  • Messages: the content of messages between you and other users.
  • Approximate Location: only if you allow it. We use your rough location to sort jobs by distance and to centre the map near you. We do not track your movements, we do not keep a location history, and we never show your location to employers or other users. You can refuse, and the service works without it; you can withdraw permission at any time in your browser or phone settings.
  • Usage Data: which pages and features you use, and what you search for.
  • Device and Technical Data: IP address, browser or app version, operating system, and device identifiers, collected automatically.

2. How We Use Your Information

  • Run and improve the platform.
  • Let job seekers and employers reach each other.
  • Send you service messages, such as a new message on an application.
  • Sort and filter jobs by distance, where you have allowed location.
  • Keep the platform secure and detect fraud and abuse.
  • Meet our obligations under Malaysian law.
  • Show advertising — on the website only. See Section 5.

3. How We Share Your Information

We do not sell your personal data. We share it only as follows:

  • Other Users: your display name and profile are visible to other users. An employer you apply to sees what you send them and your profile — not your email address, phone number, or location.
  • Service Providers: the companies that run the platform for us — Supabase (accounts and sign-in), our API and database hosting, Vercel (website hosting), and Google Maps (the map). They act on our instructions and are bound to keep the data confidential.
  • Advertising and Analytics Partners: on the website only — see Section 5.
  • Legal Authorities: where the law requires it, or to protect the safety of our users or the public.

4. Where Your Data Is Stored

Some of the providers above operate servers outside Malaysia, so your personal data may be stored or processed abroad. When that happens we take reasonable steps to ensure the data is given a level of protection comparable to Malaysian law, in line with the Commissioner's cross-border transfer guidelines.

5. Data Retention

We keep your personal data while your account is active. If you delete your account, we delete or anonymise it within 30 days, except where the law requires us to keep something longer. Messages you sent remain visible to the person you sent them to, in the same way an email you sent stays in the recipient's inbox. Expired job posts stay on your account until you delete them.

6. Advertising and Cookies (website only)

The Kejora apps for Android and iOS contain no advertising and no advertising or analytics trackers. This section applies to the website at kejora.app.

  • Google AdSense: Google uses cookies to serve ads based on your previous visits to our site and other sites.
  • Meta Pixel: we use Meta's pixel to measure how our advertising performs.
  • Cookies: we use cookies to keep you signed in, to understand how the site is used, and to serve advertising.
  • Opting out: you can turn off personalised advertising at Google Ad Settings and at aboutads.info, and control cookies in your browser. Blocking cookies may stop parts of the site working.

7. Data Security

We encrypt data in transit (HTTPS), and use secure authentication and access controls. No system is completely secure and we cannot promise otherwise.

If a breach of your personal data occurs, we will notify the Personal Data Protection Commissioner as soon as practicable and no later than 72 hours after we become aware of it, where the law requires. If the breach is likely to cause you significant harm, we will tell you as well, within 7 days of notifying the Commissioner.

8. Your Rights

Under the Personal Data Protection Act 2010, as amended in 2024, you may:

  • Ask for a copy of the personal data we hold about you.
  • Ask us to correct data that is wrong or incomplete.
  • Withdraw your consent where consent is what allows us to process the data.
  • Ask us to limit how we process your data, or to stop processing it for direct marketing.
  • Ask us to send your personal data directly to another provider, where that is technically feasible and the formats are compatible.
  • Ask us to delete your account and the personal data attached to it.

Write to privacy@kejora.app. We may ask you to confirm your identity first, so that nobody else can make these requests about you. If you are not satisfied with our answer, you may complain to the Personal Data Protection Commissioner.

9. Third-Party Links

Job posts and profiles may link to other websites, including employers' own sites. We do not control those sites and are not responsible for what they do with your data.

10. Children's Privacy

Kejora is not for children under 18 and we do not knowingly collect their personal data. If you believe a child has given us personal data, tell us and we will delete it.

11. Changes to This Policy

We may update this policy. We will post the new version here with a new date, and for significant changes we will make it visible in the app or on the site rather than relying on you to check.

12. Contact Us

Privacy and data requests: privacy@kejora.app
Everything else: hello@kejora.app