1. Who we are

Ìwádìí ("we", "us", "our") is operated by Oladayo Adelana, a sole trader based in Sheffield, United Kingdom. We are the "data controller" under UK GDPR for the personal information you provide to us.

You can contact us about anything in this policy at hello@iwadii.co.uk.

2. What data we collect

If you sign up as a jobseeker

• Email address — required, used to sign you in and contact you about applications
• Password — stored hashed and salted by our authentication provider (Supabase). We can never see your actual password.
• Full name — used in your applications so employers know who applied
• Optional profile details — phone number, location, current role, qualifications, strengths, and CV filename. You choose what to share.
• Applications you submit — cover letters and which jobs you applied to
• Messages you send — when you chat with employers through our platform

If you sign up as an employer

• Email address, company name, contact name, and an optional phone number
• Job listings you create
• Payment details — handled directly by Stripe. We never see your card number; we only store a payment reference.
• Messages you send to applicants

If you subscribe to WhatsApp job alerts

• Phone number — used only to send you the job digest
• Optional name and your preferred role / city

Automatically when you visit

Our hosting provider (Netlify) collects standard server logs including IP addresses, browser type, and pages visited. These are kept for up to 30 days for security purposes and are not linked to your account.

We do not use Google Analytics or any advertising trackers. We do not use third-party cookies.

3. Why we collect this data (legal basis)

Under UK GDPR we must have a lawful basis for processing your data. Our bases are:

• Contract — to provide you the service you signed up for (showing jobs, processing applications, enabling chat)
• Legitimate interests — to keep the platform secure, prevent fraud, and improve the service
• Consent — for the optional WhatsApp alerts you can subscribe to and unsubscribe from at any time
• Legal obligation — to keep payment records as required by UK tax law

4. Who sees your data

We share your data with the minimum necessary parties:

• Employers you apply to — they see your name, email, cover letter, and CV filename for the specific job you applied to. They do not see any other applications you've made.
• Jobseekers you message (if you are an employer) — they see your company name and contact name.
• Supabase (our database provider, AWS-backed, EU region) — stores your account and messages
• Netlify (our hosting provider) — runs the website and may briefly see your IP in server logs
• Stripe (employer payments only) — handles card transactions; we never receive your card details
• Resend (transactional email) — delivers application notifications and password resets

We do not sell your data to anyone. Ever. We do not share it with advertising networks.

5. Where your data is stored

Your account data is stored on Supabase servers in the European Union (London region). Emails are routed through Resend (US-based, GDPR-compliant under the EU-US Data Privacy Framework). Hosting is via Netlify (EU edge locations primarily).

6. How long we keep it

• Active accounts — kept as long as you have an account with us
• Inactive accounts — accounts with no activity for 24 months will be deleted after a warning email
• Job applications and messages — kept for 2 years after the conversation ends, then deleted
• Payment records — kept for 6 years to comply with UK tax law (HMRC requirement)
• Server logs — kept for 30 days

7. Your rights under UK GDPR

You have the following rights:

• Right to access — request a copy of all data we hold about you
• Right to rectification — correct any inaccurate data (you can do this from your dashboard)
• Right to erasure ("right to be forgotten") — delete your account and data via your dashboard, or email us
• Right to restrict processing — ask us to pause processing while we resolve a dispute
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to specific uses of your data (e.g. WhatsApp alerts)
• Right to withdraw consent — at any time, where we rely on consent

To exercise any of these rights, either use the controls in your dashboard or email hello@iwadii.co.uk. We aim to respond within 7 days and will respond within 30 days at the latest.

8. How to delete your account

You can delete your account and everything we hold about you at any time:

1. Sign in to your dashboard
2. Go to Settings → Delete my account
3. Confirm — your account, profile, applications, conversations and messages are permanently deleted within 24 hours

Note: For legal reasons, anonymised records of payments may be retained for 6 years (HMRC tax requirement) but stripped of personal identifiers.

9. External job listings (Reed, Adzuna)

Jobs from Reed and Adzuna appear on Ìwádìí via their official APIs. When you click "Apply" on those listings, you leave our site and your application is handled directly by the original employer or job board under their privacy policies — not ours.

10. Cookies

We use only the minimum necessary cookies to keep you signed in. Specifically:

• Authentication cookies set by Supabase to keep you signed in
• Local browser storage to remember your job search preferences (entirely on your device)

We do not use marketing, advertising, or analytics cookies. No cookie banner is required as we only use strictly necessary cookies.

11. Children

Ìwádìí is for adults aged 18 and over. We do not knowingly collect data from anyone under 16. If you are an employer, you must not post jobs targeting minors.

12. Changes to this policy

If we materially change this policy, we will email users with active accounts at least 30 days before the change takes effect. The version number and "last updated" date at the top of this page will always show the current version.