Effective Date: 24 September 2026
Last Updated: 24 September 2026

  1. INTRODUCTION

This Privacy Policy explains how Second Tales Solutions LLP (“Medbiomate,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects personal information when you use:

  • The Medbiomate website.
  • The Medbiomate Android application.
  • The Medbiomate iOS application.
  • Other services and features provided by Medbiomate.

These are collectively referred to as the “Services.”

Medbiomate is operated by:

Second Tales Solutions LLP
Malappuram, Kerala, India
Email: info@medbiomate.com
Website: https://www.medbiomate.com

By using the Services, you acknowledge the practices described in this Privacy Policy.

  1. INFORMATION WE COLLECT

The information we collect depends on the features you use.

2.1 ACCOUNT INFORMATION

When you register or sign in, we may collect:

  • Your name.
  • Email address.
  • Phone number.
  • Account identifiers.
  • Login and authentication information.
  • Profile photograph.
  • Account preferences.

Passwords should be processed and stored using secure authentication methods. We do not ask you to send your password or one-time password by email.

2.2 CANDIDATE PROFILE INFORMATION

When you create or update a profile, we may collect:

  • Current location.
  • Country and nationality.
  • Preferred work locations.
  • Desired job roles and departments.
  • Work-type and shift preferences.
  • Preferred travel distance.
  • Expected salary.
  • Availability.
  • Education and qualifications.
  • Skills, licences, certifications, and registrations.
  • Employment experience.
  • Languages.
  • Visa or work-authorization information.
  • Date of birth, where you choose to provide it.
  • Passport or identification information, where you choose to provide it.

Please do not provide sensitive information unless it is necessary for a feature you intentionally use.

2.3 CV AND RÉSUMÉ INFORMATION

When you use the CV or résumé features, we may process:

  • CVs and résumés you create or upload.
  • Contact and professional information contained in those documents.
  • Employment history.
  • Education and qualifications.
  • Skills, certificates, projects, references, and languages.
  • Profile photographs.
  • CV names, templates, colours, formatting, and customization settings.
  • Generated previews and downloaded documents.

Some CV information may be stored locally on your device. If account synchronization is available, selected information may also be stored on our systems.

2.4 JOB SEARCH AND APPLICATION INFORMATION

When you search for or interact with jobs, we may collect:

  • Search terms.
  • Selected categories and specialties.
  • Applied filters.
  • Saved or bookmarked jobs.
  • Jobs you view or select.
  • Job preferences.
  • Job-matching information.
  • Application messages saved in the application.
  • Information about external application links you open.

If you submit information directly to an employer or third-party recruitment platform, that organization will process the information under its own privacy policy.

2.5 DEVICE AND TECHNICAL INFORMATION

We may automatically receive limited technical information, including:

  • Device type and operating system.
  • Application version.
  • Browser type.
  • Internet Protocol address.
  • Language and regional settings.
  • Device or application identifiers.
  • Crash reports and diagnostic information.
  • Date and time of access.
  • Features used and performance information.
  • Network status.

We use this information to operate, secure, troubleshoot, and improve the Services.

2.6 CAMERA, PHOTOS, AND FILES

With your permission, Medbiomate may access your camera, photo library, or device files when you choose to:

  • Add or change a profile photograph.
  • Add a photograph to a CV.
  • Upload or import a CV or résumé.
  • Attach a document.
  • Download or save a generated document.

Access is requested only when needed for the relevant feature. You may manage these permissions through your device settings.

2.7 LOCATION INFORMATION

Medbiomate may use the location or work-location information you enter to provide relevant jobs and recommendations.

If a feature requests precise or approximate device location, we will request the required device permission before accessing it.

You may disable location permissions through your device settings, although some location-related features may then be unavailable.

2.8 COMMUNICATIONS

If you contact us, we may collect:

  • Your name and contact details.
  • The contents of your message.
  • Attachments you provide.
  • Information required to investigate and respond to your request.

2.9 INFORMATION STORED LOCALLY

To improve speed and offline availability, Medbiomate may store information locally on your device, such as:

  • Cached job listings.
  • Search categories.
  • Profile information.
  • Application preferences.
  • Saved jobs.
  • CV drafts and previews.
  • Session and application settings.

Locally stored information may remain on the device until you clear the application’s data or uninstall the application.

  1. HOW WE USE INFORMATION

We may use personal information to:

  • Create, authenticate, and maintain your account.
  • Provide and personalize the Services.
  • Create, edit, preview, store, and download CVs.
  • Display job listings.
  • Provide job searches, filters, and recommendations.
  • Calculate estimated job-matching results.
  • Save jobs and application preferences.
  • Synchronize supported account information between devices.
  • Respond to support and deletion requests.
  • Send essential account and service communications.
  • Detect fraud, abuse, security threats, and technical failures.
  • Diagnose crashes and improve performance.
  • Comply with legal obligations.
  • Establish, exercise, or defend legal claims.
  • Improve existing features and develop new ones.

We do not guarantee that automated recommendations or matching scores represent an employer’s decision.

  1. LEGAL BASES FOR PROCESSING

Where applicable data-protection law requires a legal basis, we process personal information based on one or more of the following:

  • Contract: Processing is necessary to provide the Services you request.
  • Consent: You have given permission for a specific use.
  • Legitimate interests: Processing is necessary to operate, secure, and improve the Services without overriding your rights.
  • Legal obligation: Processing is required to comply with applicable law.
  • Legal claims: Processing is necessary to establish, exercise, or defend legal rights.

You may withdraw consent where processing is based on consent. Withdrawal does not affect processing that occurred before consent was withdrawn.

  1. JOB RECOMMENDATIONS AND AUTOMATED PROCESSING

Medbiomate may use information such as your desired role, qualifications, skills, experience, preferences, and location to organize or recommend job listings.

Matching scores and recommendations are intended to assist your search. They do not produce binding employment decisions and do not guarantee eligibility, an interview, or employment.

Employers make their own independent recruitment decisions.

  1. HOW WE SHARE INFORMATION

We do not sell your personal information.

We may share information only in the circumstances described below.

6.1 AT YOUR DIRECTION

We may share information when you intentionally:

  • Send or export a CV.
  • Open an external application page.
  • Contact an employer.
  • Share a document.
  • Use a feature that clearly requests transmission to another service.

You should review the recipient before sending information.

6.2 SERVICE PROVIDERS

We may use trusted providers to support:

  • Website and application hosting.
  • Cloud storage.
  • Authentication.
  • Email delivery.
  • Technical support.
  • Security monitoring.
  • Performance and crash diagnostics.
  • Database management.
  • File generation or processing.

These providers may process information only to perform services for us and must protect it under contractual or legal obligations.

6.3 EMPLOYERS AND RECRUITMENT SERVICES

If you choose to apply for a role or contact an employer, information you select may be sent to that employer or recruitment service.

Information received by an employer or third-party platform is governed by its privacy practices, not solely by this Privacy Policy.

6.4 LEGAL AND SAFETY REQUIREMENTS

We may disclose information when reasonably necessary to:

  • Comply with law, regulation, legal process, or a lawful government request.
  • Protect users, the public, Medbiomate, or Second Tales Solutions LLP.
  • Investigate fraud, abuse, or security incidents.
  • Enforce our Terms and Conditions.
  • Establish, exercise, or defend legal claims.

6.5 BUSINESS TRANSFERS

If our business is involved in a merger, acquisition, restructuring, financing, or sale of assets, information may be transferred as part of that transaction.

Where required, we will provide notice and continue to protect information under applicable law.

  1. THIRD-PARTY JOB LISTINGS AND LINKS

Medbiomate may display job information supplied by employers, public sources, recruitment partners, or third-party websites.

The Services may contain links to websites and platforms that we do not operate.

When you leave Medbiomate or submit information to a third party:

  • The third party’s terms and privacy policy apply.
  • Medbiomate does not control its data practices.
  • You should review the third party’s privacy information before submitting personal data.

Displaying a listing or link does not necessarily mean that Medbiomate endorses or is affiliated with the provider.

  1. COOKIES AND SIMILAR TECHNOLOGIES

The Medbiomate website may use cookies, local storage, and similar technologies to:

  • Maintain sessions.
  • Remember preferences.
  • Provide security.
  • Understand website performance.
  • Improve the user experience.

You can manage cookies through your browser settings. Disabling necessary cookies may prevent some features from functioning.

The mobile applications may use device storage and similar application technologies for sessions, preferences, caching, and performance.

  1. ADVERTISING

Medbiomate may display advertisements provided by Medbiomate or third-party advertising partners.

Advertising providers may collect or process certain information to deliver, measure, limit, and improve advertisements. Depending on the provider and the permissions or choices available to you, this information may include:

  • Device and application identifiers.
  • Advertising identifiers.
  • IP address.
  • Device type and operating system.
  • Approximate location derived from an IP address.
  • Advertisement views, clicks, and interactions.
  • Application usage and diagnostic information.
  • Language and regional settings.

Where required by applicable law, Medbiomate will request your consent before using information for personalized advertising.

If you do not consent to personalized advertising, you may still receive non-personalized or contextual advertisements.

You may be able to manage advertising preferences through:

  • The consent controls shown within Medbiomate.
  • Your Android or iOS privacy settings.
  • Your device’s advertising settings.
  • The privacy controls provided by the applicable advertising provider.

Third-party advertising providers process information according to their own privacy policies.

Medbiomate does not permit advertising partners to use CVs, résumés, passport or identification information, private application messages, account passwords, or uploaded documents for advertising purposes.

The advertising services used by Medbiomate may change. This Privacy Policy will be updated if a material change affects how personal information is used or shared.

  1. DATA STORAGE AND INTERNATIONAL TRANSFERS

Information may be processed in India and in other countries where our service providers operate.

Those countries may have data-protection laws different from the laws in your location.

Where required, we use appropriate safeguards for international transfers, such as contractual protections or other legally recognized mechanisms.

  1. DATA RETENTION

We retain personal information only for as long as reasonably necessary to:

  • Provide the Services.
  • Maintain your account.
  • Complete a request or transaction.
  • Meet security and fraud-prevention needs.
  • Comply with legal obligations.
  • Resolve disputes.
  • Enforce agreements.

Account and profile information is generally retained while your account remains active.

When you request account deletion, we aim to delete or anonymize eligible information within 30 days after verification.

Information may remain in protected backups for up to 90 days before it is overwritten or permanently removed.

We may retain limited information for longer where required by law, necessary for fraud prevention, or needed to establish or defend legal claims.

Information already sent to an employer or third party is controlled by that organization and must be addressed directly with it.

  1. DATA SECURITY

We use reasonable administrative, technical, and organizational measures designed to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include:

  • Access controls.
  • Secure authentication.
  • Encrypted network transmission where supported.
  • Restricted administrative access.
  • Security monitoring.
  • Software updates and vulnerability management.
  • Backup and recovery procedures.

No electronic transmission or storage system can be guaranteed to be completely secure.

You are responsible for keeping your credentials confidential and securing the device used to access Medbiomate.

  1. YOUR RIGHTS AND CHOICES

Depending on your location and applicable law, you may have the right to:

  • Access personal information held about you.
  • Correct inaccurate or incomplete information.
  • Request deletion of personal information.
  • Restrict certain processing.
  • Object to certain processing.
  • Withdraw consent.
  • Request a portable copy of eligible information.
  • Lodge a complaint with an appropriate data-protection authority.

To exercise a privacy right, contact:

info@medbiomate.com

We may need to verify your identity before completing a request.

We aim to respond within the time required by applicable law, normally within 30 days where practicable.

  1. ACCOUNT DELETION

You may request deletion of your Medbiomate account:

  • Through the account settings in the application, where available; or
  • Through our public account-deletion page:
Delete Account

You may also contact info@medbiomate.com from your registered email address with the subject:

Medbiomate Account Deletion Request

Account deletion may remove:

  • Your account and login information.
  • Candidate profile.
  • Job preferences.
  • Saved jobs.
  • Stored CVs and résumés.
  • Stored profile photographs.
  • Saved application messages.
  • Other user-created content associated with your account.

Deletion is permanent and cannot be reversed.

Deleting your Medbiomate account does not delete information already submitted to employers or external platforms.

  1. DEVICE PERMISSIONS

Depending on the features you use, the Medbiomate application may request permission to access:

  • Camera.
  • Photos or media.
  • Files or documents.
  • Notifications.
  • Location, if a location-based feature is enabled.

Permissions are used only to provide the associated feature.

You may review or revoke permissions through your device settings. Revoking a permission may prevent the related feature from working.

  1. COMMUNICATION PREFERENCES

We may send essential communications relating to:

  • Account security.
  • Login activity.
  • Privacy or Terms updates.
  • Support requests.
  • Important service changes.

Where we send optional promotional communications, you may unsubscribe using the instructions provided in the message.

You may still receive essential service or security communications after opting out of marketing.

  1. CHILDREN’S PRIVACY

Medbiomate is intended for adults seeking employment and is not intended for children under 18.

We do not knowingly collect personal information from children under 18.

If you believe that a child has submitted personal information, contact info@medbiomate.com. We will investigate and take appropriate action, including deletion where required.

  1. REGION-SPECIFIC RIGHTS

18.1 INDIA

We process personal information in accordance with applicable Indian data-protection and information-technology laws.

Users may contact info@medbiomate.com regarding access, correction, deletion, consent, or grievances.

18.2 EUROPEAN ECONOMIC AREA AND UNITED KINGDOM

Where the GDPR or UK GDPR applies, users may have rights to access, correct, erase, restrict, object to processing, withdraw consent, and request data portability.

Users may also complain to their local data-protection authority.

18.3 CALIFORNIA AND OTHER UNITED STATES LOCATIONS

Where applicable state privacy law applies, residents may have rights to know, access, correct, or delete personal information and to receive information about sharing practices.

Medbiomate does not sell personal information.

We will not discriminate against users for exercising applicable privacy rights.

  1. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes to:

  • The Services.
  • Data-processing practices.
  • Security requirements.
  • Service providers.
  • Applicable laws.

The revised policy will display a new “Last Updated” date.

If a change materially affects your rights or how personal information is used, we may provide additional notice through the application, website, or registered email address.

  1. CONTACT AND PRIVACY GRIEVANCES

For privacy questions, requests, complaints, or account-deletion assistance, contact:

Second Tales Solutions LLP
Malappuram, Kerala, India
Email: info@medbiomate.com
Website: https://www.medbiomate.com

When contacting us about an account, use the email address registered with Medbiomate when possible.

Do not send your password, OTP, bank credentials, passport, national ID, or unnecessary sensitive documents by email.