Effective Dec 2025

Privacy Policy

ApplyKite ("we", "us", "our") is committed to protecting your privacy and handling your personal data in compliance with the UK Data Protection Act 2018, the General Data Protection Regulation (GDPR), and other applicable laws.

Data Controller

ApplyKite is a service operated by Plangton LTD, the data controller responsible for your personal data.

Plangton LTD
Registered Address
: Suite 6422, Unit 3A, 34–35 Hatton Garden, Holborn, London, EC1N 8DX
Company Number: 13466587
Phone: +(44) 2034 885 486
Email: [email protected]

Information We Collect

We collect and process the following categories of information:

  • Personal Information
    Name, email address, login credentials, and profile details you provide when creating or updating your account.
  • Uploaded Documents
    Documents you upload (such as resumes, CVs, personal statements, or academic records). These may include educational history, employment background, and other personal information you choose to share. Uploaded files are used only for AI-assisted features, recommendations, and document review.
  • AI Chat Data
    Messages exchanged with ApplyKite AI (e.g., questions, text you provide for feedback). Chat data may be logged securely to improve service accuracy and user experience, but is not shared or used to train external models.
  • Usage Information
    Information about your activity on our website or dashboard, including IP address, device type, browser, country, pages visited, session activity, and interaction patterns. This may be collected through cookies and similar tracking technologies.
  • Third-Party Information
    If you sign in using Google Login, we may receive basic profile information from Google in accordance with their privacy policy.

Legal Bases for Processing

We process your data only where one or more of the following apply:

  • Contract (to provide the service to you),
  • Legitimate Interest (to operate, improve, and secure our platform), or
  • Consent (for analytics or marketing communications where required by law).

You can withdraw consent or unsubscribe from marketing emails at any time.

How We Use Your Information

We use your information for the following purposes:

  • Create and manage your account.
  • Provide AI-powered tools and personalized academic recommendations.
  • Process payments for Premium or Pro subscriptions.
  • Communicate service updates and account notifications.
  • Improve performance and user experience.
  • Detect and prevent misuse or unauthorized access.
  • Enforce our Terms & Conditions.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects.

Data Sharing and Security

We do not sell your personal information. We only share data when it is necessary to operate our services, including with:

  • Payment processors such as Stripe and PayPal, for handling transactions.
  • Authentication providers such as Google, for account login.
  • Service providers that support platform operations such as hosting, analytics, AI infrastructure, and email delivery.

Some platform features are powered by trusted third-party sub-processors that support hosting, analytics, and AI functionality. Our Key Sub-Processors Include:

  • Amazon Web Services (AWS) – cloud hosting and infrastructure
  • OpenAI – powering AI functionality
  • Google (Firebase / Google Login) – authentication and optional analytics
  • Stripe & PayPal – payment processing
  • SendGrid – email delivery

All sub-processors are bound by contractual obligations under GDPR Article 28 to implement appropriate security and confidentiality measures.

Data Transfers

Our data may be processed in countries outside your residence. In such cases, we rely on Standard Contractual Clauses (SCCs) and equivalent safeguards to ensure your data remains protected.

In addition to Standard Contractual Clauses, we conduct transfer impact assessments and apply supplementary safeguards (such as encryption and access controls) to help ensure your data remains protected outside the UK and EU.

Security

We use encryption, access controls, and secure infrastructure to protect your data. If we become aware of a data breach that affects your personal data, we will notify you and relevant authorities as required by law.

Cookies and Tracking

We use cookies to personalize your experience, provide essential website functionality, and understand how users interact with our website.

Non-essential cookies (such as analytics cookies) are only used where you have given explicit consent via our cookie banner.

You can change or withdraw your cookie preferences at any time.
Cookie settings apply across all ApplyKite subdomains.

Profiling and Personalization

ApplyKite may analyze the information you provide, such as your field of study, preferred destination, or uploaded documents, to recommend suitable opportunities, professors, or scholarships.

Uploading a CV or other documents is completely optional. The platform will still function without them, though your recommendations may be less personalized. This type of processing qualifies as profiling under GDPR, but it does not have legal or significant effects. You can opt out of personalized recommendations at any time by adjusting your account settings.

Your Rights Under GDPR

Depending on your location, you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your data and account.
  • Request a copy of your data in a portable format, where technically feasible.
  • Object to certain types of processing or request that we restrict how your data is used.
  • Withdraw consent for optional data processing (such as analytics cookies) at any time.

Before responding to such requests, we may request proof of identity to ensure security.
To exercise any rights, contact us at: [email protected]
We will respond within 30 days, as required by law. You also have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO): ico.org.uk

While these rights apply primarily to users in the UK and EU under GDPR, we extend similar rights to users globally, where reasonably possible, to maintain transparency and trust.

Data Retention

We keep your personal data only for as long as necessary to provide the service, maintain legitimate business records, or meet legal obligations.

If you delete your account or request data removal, we permanently delete or anonymize your personal information unless we are legally required to keep certain records. Deleted data may remain in secure system backups for up to 30 days before being automatically removed.

We do not retain uploaded documents such as resumes or statements once they are deleted by you or your account is closed.

After deleting your account, you will not be able to register again using the same email for 7 days as part of our security and abuse prevention measures.

Children's Privacy

The service is not intended for individuals under 18. If we learn that we have collected data from a minor, we will delete it immediately.

Changes to This Privacy Policy

We may update this Privacy Policy periodically. If the changes are significant, we will notify you via email or platform notice. Continued use of the service indicates acceptance of the updated policy.

Payment Information

Payments are handled through Stripe and PayPal. We do not store or access your card details. All transactions are encrypted and transmitted securely by the payment providers.

Contact Us

If you have any questions or concerns regarding this Privacy Policy, please contact us.

Email: [email protected]
Address: Suite 6422, Unit 3A, 34–35 Hatton Garden, Holborn, London, EC1N 8DX
Phone: +(44) 2034 885 486