Plagit App Privacy Policy
Effective date: 15 August 2026
This Privacy Policy explains how PLAGIT INNOVATIONS FZ-LLC, a Free Zone Limited Liability Company registered with the Ras Al Khaimah Economic Zone Authority (RAKEZ), with registered office at SFF00136, Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates ("Plagit", "we", "us"), processes your personal data when you use the Plagit mobile application (the "App").
Scope. This policy covers the App: the platform connecting hospitality professionals ("Candidates") with venues, employers and staffing agencies ("Businesses" and "Agencies"). Our marketing website is a separate, informational surface; where the website processes data (for example through contact forms), that processing is described on the website itself. This document describes only what the App actually does.
Contact for privacy and support: info@plagit.com
1. Data we collect
Account data. When you register we collect your name, email address and password (stored only as a salted cryptographic hash). You may add a phone number and a profile photo. We record your app language and your last sign-in time to operate your account.
Professional profile (Candidates). To match you with jobs you can provide: your role(s) and work experience, spoken languages, nationality, a short bio, your availability and preferred dates, your expected hourly rates, whether you are open to relocation, additional profile photos, and your CV. Your CV is shown to Businesses only if you enable the "CV visible to businesses" option. Profile information is visible to Businesses inside the App as part of the hiring process.
Special categories of data. Plagit does not ask for sensitive personal data, such as health information, religious or philosophical beliefs, political opinions, or biometric data, as structured fields anywhere in the App. Free-form content that you choose to upload or write, such as your CV, documents or messages, may contain such details: We process such information only to store and deliver the content you choose to provide and do not use it to infer sensitive characteristics.
Location. With your permission, the App collects your precise location to: set your work area during registration, show nearby jobs and talent on the in-app maps, share your position in a chat when you explicitly choose to, and verify OnTime clock-in and clock-out at the workplace (a proximity check against the venue's location). Map tiles and address lookups are provided by MapTiler, which receives map requests from your device.
Attendance (OnTime). When a Business schedules you through OnTime, we process your shifts, clock-in and clock-out times and breaks, so that you and that Business can track worked time.
Messages, calls and media. We store the messages you exchange in the App (text, photos, videos, voice messages, documents and photo albums) so we can deliver and display them. Voice messages are audio recordings that we store as part of the conversation. Attachment files are stored with our storage provider (Cloudflare R2). Audio and video calls are set up through our servers and, where a direct connection is not possible, relayed through TURN servers operated by Metered; call audio and video only transit in real time and are not recorded or stored; we keep call metadata (participants, time, duration).
Interactions and preferences. We persist the interactions you perform in the App so its features work: swipes and match decisions, shortlists, likes and reactions, saved jobs and saved posts, follows, and view events used to show counters and relevance inside the App.
Community content. Posts, comments, likes and media you choose to publish in the Community feed, visible to other users as designed.
Applications, matches and interviews. Your job applications, matches and scheduled interviews, shared with the Business involved in each of them.
Business data. For Business accounts we process the venue's name and physical address(es) and locations, staff roster and shift schedules, and the operational and financial records the Business chooses to store in the App (forecasts, daily figures, uploaded end-of-day documents) to run their venue.
Device and notifications. A push-notification token that identifies your device for notification delivery, including incoming-call notifications, through the Apple Push Notification service and Firebase Cloud Messaging.
Subscriptions (Plagit Premium). Premium purchases are processed entirely by Apple through In-App Purchase. Apple handles all payment data. Plagit never receives your card or billing details; we only receive subscription identifiers and status (plan, expiry date, an Apple transaction identifier) so we can unlock Premium features on your account.
Face ID. If you enable Face ID unlock, biometric verification happens entirely on your device through Apple's system frameworks. No biometric data ever reaches our servers.
What we do NOT do. The App contains no advertising and no third-party analytics SDKs. We do not track you across other companies' apps or websites, we do not profile you for advertising, and we do not sell personal data.
2. Why we process your data
We process personal data to:
- create and operate your account and provide the App's features (job matching, applications, chat and calls, OnTime attendance, community);
- verify workplace presence when you clock in or out through OnTime;
- deliver the notifications you have enabled (new jobs, messages, incoming calls);
- manage your Premium subscription through Apple;
- keep the service secure (password-reset and verification emails, session management, abuse prevention);
- comply with applicable legal obligations.
3. Who we share data with
Other users, as the App is designed to work: a Business sees your applications, your profile and, if you enabled it, your CV; chat participants see the messages and media you send them; Community content is visible to other users.
Service providers that process data on our behalf to make the App work:
| Provider | Purpose |
|---|---|
| Railway | application hosting and database |
| Cloudflare R2 | storage of chat and content media files |
| Apple | push notifications and In-App Purchase |
| Google Firebase Cloud Messaging | push notifications |
| Resend | transactional emails (password reset, verification) |
| MapTiler | map tiles and address lookups |
| Metered | TURN relay for audio/video calls |
| Anthropic | AI processing for the optional Plagit Assistant (only after your explicit in-app permission) |
AI Assistant (Anthropic). The Plagit Assistant is powered by Anthropic PBC, a third-party AI provider. When you choose to use the Assistant, after giving your explicit in-app permission, your Assistant messages and the Plagit account information the Assistant looks up to answer you (such as your shifts, applications, staff, attendance or profile details) are transmitted to Anthropic to generate the reply. Anthropic processes this data on our behalf to provide the Assistant response. We do not use the Assistant to make automated decisions about you, and you can use the rest of Plagit without ever enabling the Assistant.
We do not sell personal data and we do not share it with advertisers or data brokers. We may disclose data where required by law or to protect the rights, safety and integrity of Plagit and its users.
4. Data retention
We keep your personal data for as long as your account exists. In particular:
- messages and shared media: for as long as your account exists. You can delete an individual message of yours for everyone in a conversation. Archiving a conversation hides it from your list but does not erase its content. One-to-one conversations are removed when either account is deleted; in group conversations, messages sent by the other participants remain after you leave or delete your account;
- attendance records: kept with your account so worked time remains available to you and to the Business concerned;
- interview entries: when you delete your account the schedule entry is anonymised (your identity is removed from it);
- backup copies: retained for a maximum of 30 days and then securely deleted (see Section 5).
5. Deleting your account and data
You can delete your account at any time directly in the App: Settings → Delete Account. You can also exercise deletion, or any other right, by writing to info@plagit.com.
When you delete your account:
- Active systems: immediate. Your profile, CV, photos, applications, your messages (including those you sent in group conversations), attendance records, interactions, notification tokens and subscription records are permanently erased from our production database, one-to-one conversations you were part of are removed, and your active sessions are revoked. Removal of your uploaded media files from storage is initiated without undue delay. Where a record must remain for another user's legitimate use (for example a Business's interview schedule), it is anonymised so it no longer identifies you.
- Legal obligations. We may retain specific data for longer only where a law applicable to us requires it, or where the data is necessary for an ongoing dispute or a documented security matter, and only for as long as strictly needed for that purpose.
- Backups. Backup copies that may still contain your data are eliminated through our backup rotation within a maximum of 30 days after deletion.
An active Apple subscription must be cancelled separately in your Apple ID settings, since billing is managed by Apple.
6. Your rights
Subject to applicable law, including UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, you have the right to access your personal data, correct it, receive a copy, restrict or object to certain processing, and request deletion. Contact us at info@plagit.com; we will respond within the timeframes required by law. You may also lodge a complaint with the competent data-protection authority.
7. Security
Traffic between the App and our servers is encrypted in transit (HTTPS/TLS). Passwords are stored only as salted hashes. Authentication tokens on your device are kept in the operating system's secure storage. Access to production systems is restricted and credential-protected.
8. Children
Plagit is a professional hiring platform for adults. The App is not intended for, and may not be used by, anyone under 18 years of age. We do not knowingly collect data from minors; if you believe a minor has provided us data, contact info@plagit.com and we will delete it.
9. International transfers
Our service providers operate infrastructure in various locations, and your data may be processed outside the country where you live. Where the applicable data-protection law requires it, we protect such transfers with appropriate safeguards.
10. Governing law
This policy and any dispute arising from the use of the App are governed by the federal laws of the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and the applicable regulations of Ras Al Khaimah. Exclusive venue: the courts of Ras Al Khaimah, United Arab Emirates.
11. Changes to this policy
We will post any updated version on this page and revise the effective date above.