Privacy Policy

1. Introduction

This Privacy Policy describes how Hello World ("we," "our," or "us"), operated by Sarcastic Geeks Trybe, collects, uses, stores, and protects your personal information when you use our website, applications, API endpoints, command line tools, and local control panel (collectively, the "Services").

This policy is written to stand on its own, separate from our Terms and Conditions, which cover the rules of using the platform rather than your data. By accessing or using the Services, you consent to the practices described below. If you do not agree with this policy, you must not use the Services.

Hello World is built for job seekers aged 18 and over, and we do not knowingly collect personal information from children. If you are under 18, use the Services only with parental or guardian consent.

2. Information We Collect

2.1 What You Give Us. When you contact us directly or set up an account, you provide:

• Registration: your name, email address, and profile details, submitted through Firebase Authentication with an email and password or a Google sign-in
• Messages: anything you send us through support channels, including the email address you contact from
• Keys: AI provider keys you choose to connect and your Agent API Key, both treated as secrets (see 2.3)

2.2 What Your Use Creates. Using the platform itself generates:

• Account ledger: your Cowrie balance, transfers, unlocks, and generation runs, recorded on your account so balances stay accurate wherever you sign in
• Generated work: roadmaps, proof-of-work project ideas, and application guides produced for you, kept with your account so you can pick up where you left off
• Technical data: device and browser type, pages viewed, IP address (which also tells us your approximate region), timestamps, and error or quota logs

2.3 Keys and Secrets. Provider keys are encrypted with AES-256-GCM using a key derived from your account before they touch our database. They are never displayed to other users, and they are only used to make generation requests on your behalf.

Your Agent API Key never enters your browser. The local control panel reads it from a .env file on your own machine, and only the local server on your device uses it.

3. AI Processing

3.1 Local Engines. Gemma runs in your browser and Ollama runs on your machine. The job details and prompts you send to them are processed on your device and never leave it. We do not receive them.

3.2 Cloud Engines. If you generate with OpenRouter or a custom endpoint, that request (the job details and anything you add to it) is sent to the provider you picked and handled under their terms and privacy policy. We do not control how they process it.

3.3 Results. Whatever engine produced them, your roadmaps, project ideas, and application guides are tied to your account so they render again on your next visit, visible only to you.

4. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Services
• Create your account and authenticate your requests
• Produce and restore your generated work
• Keep Cowrie balances, unlocks, and transfers accurate
• Send service notices, and promotional information where you permitted it at sign-up
• Detect and stop fraud, abuse, and security incidents
• Monitor quotas so the Services stay available
• Comply with legal obligations and enforce our Terms

5. Sharing and Disclosure

5.1 We Never Sell Data. We do not sell your personal information.

5.2 Service Providers. Google Firebase provides authentication, database, and hosting, and the AI provider you select receives your request when you generate with a cloud engine. Each receives only what its job requires.

5.3 Legal Authorities. We share information when the law requires it, or to protect the rights, safety, and property of Hello World, our users, or the public.

5.4 Successor Entities. If Hello World is merged or acquired, your information moves with it, and this policy continues to apply to it.

5.5 Third-Party Services. The Services link out to startup career pages, GitHub, X, and other external sites. They are operated under their own privacy policies, which we do not control. Read them before handing over information.

6. Cookies and Local Storage

6.1 Cookies. We use cookies and similar technologies to keep you signed in, remember preferences, and understand activity on the Services. Your browser can block or delete them, though parts of the Services may then stop working.

6.2 Local Storage. The ticks on your roadmap checklist live in your browser's storage only. They are never uploaded to our servers, and clearing your browser data removes them.

7. Data Retention

We keep personal information while your account is active, because the Services need it to work for you. When you delete your account, we delete or anonymise your data within a reasonable period, except for copies that remain in routine backups for a limited time, or that we must retain to meet legal obligations.

You can ask us to delete your account at any time through the support channels listed in section 10.

8. Your Rights

Wherever applicable law gives you these rights, including under frameworks such as the GDPR, CCPA, and Nigeria's NDPR, you can:

• See the personal information we hold about you
• Fix information that is wrong or incomplete
• Ask us to delete your personal information
• Request a portable copy of your information
• Object to or limit certain processing, and withdraw consent where processing relies on it

To exercise any of these rights, contact us using the details in section 10. We may need to verify your identity before responding, and we will respond within a reasonable time. If you believe a child has given us information, use the same channel and we will remove it.

9. Security and International Transfers

9.1 Security. Information moves through the Services with TLS encryption, rests under Firebase's security controls, and stored keys are sealed with AES-256-GCM. Access to production data is limited to what it takes to run the platform.

No transmission or storage method is perfectly secure, and we cannot promise absolute safety. You can help by keeping your password and Agent API Key to yourself.

9.2 International Transfers. Our providers, including Google Firebase and the AI providers you choose, may process information in countries outside your own, including the United States. When information is transferred internationally, we rely on the contractual safeguards those providers make available. Using the Services means you understand your information may be handled abroad.

10. Changes and Contact

10.1 Changes. We may update this policy from time to time. The "Last Updated" date at the top changes with it, and the new version appears on this page. Material changes get a reasonable heads up, such as an email to the address on your account. Continuing to use the Services after an update means you accept the revised policy.

10.2 Contact. Questions about this policy, or a request to exercise your rights, go to mail@helloworldjobs.com or message @HelloWorldJobs on X. Hello World is a product of Sarcastic Geeks Trybe.