← Back to Home
Your data

Privacy Policy

What CareerPath BN collects about you, why we need it, who can see it, and how you stay in control of it.

Last updated: 30 October 2026 A few minutes to read Students, lecturers and administrators
The short version
Only what the service needsYour profile is used to match you to BIICF careers. We never sell it.
AI sees no identityYour name, email, Student ID, phone and files are never sent to the AI.
Staff see progress, not chatsLecturers see only their own classes. Nobody else can read your Career Adviser conversations.
You can leave any timeDeleting your account in Settings removes your profile, results and files.

Introduction

CareerPath BN ("we", "our", "us") is a career guidance platform for students of Politeknik Brunei, developed in the School of Information and Communication Technology. We respect your privacy and are committed to protecting your personal data. This policy explains what we collect, why we collect it, who can see it, and how you can control it. It applies to everyone who uses the Platform: students, lecturers and administrators.

Please read it together with our Terms of Service.

Information We Collect

We only collect information that you give us or that the Platform needs in order to work.

Information you give us

Account First and last name, email address, password (stored only as a one-way hash) and role (student, lecturer or administrator).
Student profile Student ID, programme, CGPA, phone number with its country, date of birth, nationality and profile picture.
Skills and competencies BIICF competencies with your proficiency levels, and any extra skills you add yourself.
Interests The interests you pick from our list and any others you add.
Projects Titles, descriptions, your role, technologies used, dates, achievements and links.
Certifications Name, issuing organisation, dates, and any evidence file you upload (kept private).
Career aspirations Your career goals, vision statement and long-term goals.
Milestones Titles, categories, target dates, progress, and any proof file you upload (kept private).
Career Adviser The questions you ask the Career Adviser and the answers it gives, saved to your account.

Information the Platform creates

Career recommendations Recommended job roles, match and readiness scores, matched competencies, gaps and development plans, with a saved copy of the profile details each result was based on.
Verification Whether your email address is confirmed, and whether a lecturer or administrator has checked your Student ID (and who did).
Programme and class The programme and class groups you belong to, and which lecturers are assigned to them.
Plan and access Your plan (Free or Premium), any trial, grant or sponsorship with its start and end dates, and how many times you have used limited features.
Notifications Messages about your account, progress and Premium, and whether you have read them.
Activity A log of actions on your account (such as updating your profile), with the date, IP address and browser type; your last login and last active time; and which sections you have opened, so we can mark what is new.

How We Use Your Information

  • To provide the service: career recommendations, the Career Adviser, the BIICF Explorer, milestones and your profile.
  • To calculate your profile completion and career readiness.
  • To apply your plan, trial or sponsorship (for example, how many recommendations you can generate).
  • To let your lecturers and administrators follow your progress and verify your Student ID.
  • To send you notifications and account emails, such as email confirmation and password reset links.
  • To keep accounts secure, investigate misuse, and fix problems.
  • To show advertisements as described in Advertising.

We do not sell your personal data, and we do not use it to build advertising profiles.

AI Processing

When you generate career recommendations or ask the Career Adviser a question, the career-related parts of your profile are sent to an AI model to produce the answer. The request goes through OpenRouter, Inc., an AI routing service, to Groq, Inc., which runs the model.

What is sent:

  • Your programme, CGPA and any academic records.
  • Your competencies, skills, interests, projects, certifications and career aspirations.
  • For the Career Adviser, your question, your recent messages in the conversation, and your latest recommendations.

Never sent: your name, email address, Student ID, phone number, date of birth, nationality, profile picture or any uploaded file.

These providers process the request under their own terms and privacy policies. If you do not want your career details sent to them, do not use the recommendation or Career Adviser features; the rest of the Platform still works.

Who Can See Your Data

You Everything on your account: profile, recommendations, Career Adviser conversation and files.
Your lecturers Only students in the classes they are assigned to. They can see your profile, academic details, competencies, interests, projects, certifications, milestones and recommendations, and can verify your Student ID.
Administrators All accounts, to manage users, classes, plans, sponsorships and the BIICF data.
Other students Cannot see your data at all.
Sponsors Fund Premium for a group of students. They receive no individual student data, results or conversations.
Advertisers Receive no data about you. We do not record which advertisements you see or click.

Lecturers and administrators can see that you have used the Career Adviser and how many messages you have sent, but they cannot read your conversation.

Service Providers

We rely on a small number of outside services to run the Platform:

  • OpenRouter and Groq process AI requests, as described in AI Processing.
  • Brevo delivers our account emails (email confirmation and password reset) from noreply@careerpathbn.tech. It receives your email address and the message.
  • Our hosting provider stores the Platform's database and files.
  • Google Fonts and Font Awesome supply the site's fonts and icons from public networks. Like any website, these requests share your IP address with those services, but they do not set cookies.

Advertising

Advertisements from partner organisations may appear on student pages. They are chosen by your programme or class group, never by your personal profile.

  • Free plan: advertising helps keep free access free, so it is shown and cannot be switched off.
  • Premium: advertising is off by default. You can turn it on or off at any time in Settings.
  • Lecturers and administrators never see advertisements.

Clicking an advertisement takes you to the advertiser's own website, which has its own privacy policy.

Data Storage and Security

  • Passwords are stored only as a one-way hash (bcrypt); nobody, including staff, can see yours.
  • New accounts must confirm their email address before using the Platform.
  • Certification evidence and milestone proof files are kept on private storage and only shown to you and authorised staff after signing in.
  • Profile pictures are stored publicly so they can be shown next to your name.
  • Signed-in sessions end after a period of inactivity, and deleting your account asks for your password again.

We take reasonable technical and organisational measures to protect your data, but no system is completely secure. Please use a strong password that you do not use anywhere else.

Data Retention

We keep your data for as long as your account exists. When you delete your account from Settings, your profile, recommendations, Career Adviser conversations, milestones, certifications and uploaded files are permanently removed. Anonymised totals (for example, how many recommendations were generated) may be kept for reporting.

Administrators may also remove accounts, for example when a student leaves Politeknik Brunei or an account breaks our Terms of Service.

Cookies and Browser Storage

We only use cookies that the site needs in order to work:

  • Session cookie: keeps you signed in during your visit and expires when you are inactive or sign out.
  • Security (CSRF) cookie: protects your forms from being submitted by other websites.
  • "Remember me" cookie: only set if you tick "Remember me" when logging in, so you stay signed in on that device.
  • Cookie notice: remembers that you have dismissed the cookie banner.

The site also keeps a few small notes in your browser's session storage, such as which tips you have already seen, so they are not repeated. These are deleted when you close the tab.

We do not use analytics, advertising or third-party tracking cookies. Clearing your cookies signs you out, and the cookie notice will appear again.

Your Rights and Choices

  • See your data at any time on your profile page.
  • Correct it by editing your profile. If your Student ID has been verified, ask your lecturer or an administrator to remove the verification first.
  • Download your profile as a PDF report.
  • Delete your account and its data from Settings.
  • Choose whether to see advertisements, if you are on Premium.
  • Ask us how your data is used, using the contact details below.

Changes to This Policy

We may update this policy as the Platform changes. The date at the top of the page shows the latest version, and important changes will be announced on the Platform. If you keep using CareerPath BN after an update, the updated policy applies.

Contact

For questions about this Privacy Policy or your data, contact:
School of Information and Communication Technology
Politeknik Brunei, Block 2E, Ong Sum Ping Condominium, BA1311
contact@pb.edu.bn (Politeknik Brunei, for study and school matters)
careerpathbn@gmail.com (CareerPath BN business email, for help with this website)
+673 2234630 (Politeknik Brunei official contact number)