Privacy Policy
Last updated: 11 November 2026
Job Calendar is an Android app that shows Bangladesh government job circulars, puts every application deadline and exam date on a calendar, and lets you save jobs. This page says what the app collects, why, who helps us process it, how long we keep it and how you can delete it. We collect as little as we can.
Job Calendar is not affiliated with the Government of Bangladesh, Teletalk or any recruitment body. Always check the official circular before you apply.
1. Who we are
Job Calendar (app ID app.jobcalendar) is run by its owner from Bangladesh. Contact:
privacy@jobcalendar.online.
2. Without an account
You can use the job list and the calendar without signing in. In that case:
-
Your phone downloads the public list of jobs from our server (
api.jobcalendar.online). The request carries the app version, the word “android” and a random request number: no name, phone number, device ID or account. - The jobs you save, your language and a copy of the job list stay only on your phone. They are removed when you uninstall the app or clear its data.
- Links to the official site, the circular PDF, sharing (for example to WhatsApp) and the feedback form open outside the app, only when you tap them. What you type there goes to that service, not to us.
3. What our server records
Like any server, ours writes a request log: the time, the request (method and address, no content), the host, your IP address and a random request number. We use it to keep the service secure and to find faults. We keep it for at most 30 days. It is not joined to any profile, and we do not use it for advertising.
This website is served by Cloudflare, which handles your IP address on our behalf to deliver the page and protect the site. Our pages set no cookies and load no scripts or analytics, and we keep no log of website visits. If Cloudflare suspects abuse, it may show a check page that sets a security cookie. Cloudflare keeps its own short-term records under its privacy policy; we see only totals.
4. Crash reports
If the app crashes, it can send a report to Sentry (United States). The report holds the type of error and where in the code it happened, the app version, the Android version and your phone's maker, model and memory size. It does not hold your name, phone number, device name, the jobs you saved, or the text on your screen. We have switched off storing IP addresses in Sentry. Reports are off in builds without a Sentry key.
5. If you sign in
Signing in is optional and is switched on for some versions only. It lets us back up your saved jobs so they come back on a new phone. You must be 18 or older. When you sign in:
- We send a one-time code by SMS through a Bangladeshi SMS provider. We store your phone number as a keyed hash (so we can find your account) and as an encrypted copy.
- We store your saved jobs on our server, encrypted at rest, until you delete your account.
- To stop abuse, we keep short-lived keyed hashes of your IP address (about 2 hours for sign-in limits, 48 hours after a repeated abuse strike) and a masked SMS log for 90 days. A keyed hash of a phone number that was blocked for abuse may be kept after deletion, so the block still works.
- The app asks Google Play Integrity whether it is a genuine copy of the app; Google and our server see that check result.
Your profile (identity numbers, photo, signature, qualifications) and “Apply for me” are not part of this version. Before we collect any of that, we will update this policy and ask for your separate, explicit consent.
6. What we never collect
Location, contacts, photos, microphone, advertising ID, or the list of other apps on your phone. We do not sell your data, show ads or track you across apps.
7. Who processes your data
| Who | For what | Where |
|---|---|---|
| Fly.io | Runs our server and database, with the request log | Singapore |
| Amazon Web Services | Encryption keys; encrypted backups | Mumbai, India |
| Sentry | Crash reports (section 4) | United States |
| SMS provider (bulksmsbd) | Sends your sign-in code, only if you sign in | Bangladesh |
| Google Play (installs, crash statistics); Play Integrity check, only if you sign in; Gmail, the mailbox that receives email sent to privacy@jobcalendar.online | Outside Bangladesh | |
| Cloudflare | This website, our domain's name records, and forwarding email sent to privacy@jobcalendar.online | Worldwide (the nearest data centre) |
Some of your data is therefore processed outside Bangladesh. We protect it with encryption and keep personal values out of our logs.
8. How long we keep it
| Data | Kept |
|---|---|
| Saved jobs, language, job list copy on your phone | Until you uninstall or clear the app's data |
| Server request log (with IP address) | At most 30 days |
| Crash reports | At most 90 days, then Sentry deletes them |
| Account: phone number, saved jobs (if you signed in) | Until you delete your account |
| SMS log (masked) | 90 days |
| Backups | Deleted within 35 days; a deletion is applied again after any restore |
| Your emails to privacy@jobcalendar.online and our replies | Until your request is closed, then 6 months (to show how we handled it) |
9. Your rights
You can ask to see, correct or delete what we hold about you, or to withdraw a consent you gave. If you signed in, the app has Account → Export my data and Account → Delete my account. Otherwise write to privacy@jobcalendar.online; we answer within 30 days. How to delete: Delete your account.
10. Security
Traffic between the app and our server uses HTTPS. Personal data on our server is encrypted at rest. We keep personal values out of logs, alerts and crash reports, and only a few people can reach the server.
11. Changes
If we change what we collect, we update this page and its date before the change starts. For a big change we also tell you in the app.