Change on 30 September 2026
From 30 September 2026, Fat Genie is provided by The Better Growth Company Ltd.
1. Controller and contact
The Better Growth Company Ltd, a company registered in England and Wales (company number 12585000), trading as Fat Genie, is the controller of personal data processed through CareerCaptain, except where another organisation acts as controller for its own independent processing.
Registered office: Apartment 1107 9 Churchyard Row, London, England, SE11 4FF. Data-protection correspondence may also be sent by email to privacy@fatgenie.co.uk.
2. Data we process
- Account information: first name, surname, email address, display name and information needed to keep you signed in securely.
- Career information you choose to add: roles, projects, achievements, people, conversations, skills, goals, learning, feedback, institutions, pay information, events, things you have written or published, and useful connections between people or work.
- LinkedIn imports, files and photos: information in the LinkedIn downloads, photos, screenshots and other files you choose to add. CareerCaptain shows you proposed LinkedIn items before adding them. For files and photos, we may keep the original (depending on the option you choose), information about the file and the words or details CareerCaptain has read from it so that you can find and use them later.
- CVs, profiles and sharing information: the versions you create, save, download or share; your sharing choices; whether a share link is still active; when it expires; how many times it has been opened; and the most recent opening time. If you protect a share link with a password, we do not store that password in readable form.
- Questions, instructions and generated work: what you ask CareerCaptain to do, the relevant career information used for that request and the resulting briefing, draft, comparison, weekly review or other generated response.
- Security and service data: login attempts, sessions, request metadata and information needed to protect and operate the service.
- Billing data: subscription plan, billing interval, subscription status, Stripe customer and subscription identifiers, payment-event records and limited billing metadata. CareerCaptain does not store your full card number.
- Product-use information: limited information about actions such as making a briefing, adding something, importing or downloading. We also keep limited performance information needed to understand whether generated features are working reliably. This measurement is designed not to store the text of your questions, generated answers or the contents of your career information as analytics events.
3. Why we use personal data
Provide CareerCaptain
We process account and career information to provide the service you request, including saving what you add, showing LinkedIn items for review, searching, building your history, making CVs and profiles, producing downloads and serving share links.
Provide generated help
When you ask CareerCaptain to generate something, CareerCaptain selects information relevant to that request and may send it to an external provider that helps produce the response. The response does not silently replace or rewrite the information you originally added.
Security, reliability and abuse prevention
We process technical and authentication data to secure accounts, investigate failures, limit abuse and protect the service.
Improve the product
We use limited first-party product-event data to understand whether key workflows are useful and where users encounter friction.
Marketing
We do not use your career record, questions or generated work for general direct marketing. If we send marketing email, we will use the consent or other permission required by law and provide an appropriate unsubscribe route in every message.
Process subscriptions and payments
Where you choose a paid plan, we process the billing and subscription information needed to establish, administer and enforce that subscription, reconcile payment events and provide customer billing controls.
4. Lawful bases
Depending on the processing, we rely on performance of a contract (providing the service you ask for), legitimate interests (for proportionate security, service improvement and fraud prevention), legal obligations, and consent where the law specifically requires it.
We do not treat agreement to this Privacy Notice as consent. Where consent is the required lawful basis, it must be requested separately and can be withdrawn.
4A. CareerCaptain Campus and institution-sponsored access
If you join a CareerCaptain Campus organisation, we process the minimum membership information needed to connect your account to that organisation, apply any sponsored service entitlement, enforce seat and role controls, and show institution-specific support destinations. A Campus organisation may be a university, college, students' union, training provider or similar body.
Campus membership does not by itself give institutional staff access to your individual CareerCaptain information, files, questions or generated work. Campus staff can see an overall active learner count for managing places and limited group-level information about use and outcomes. Activity information for very small groups is hidden; the privacy threshold cannot be set below five learners.
Campus invitation codes are protected so that CareerCaptain does not keep the readable code after it has been issued. If a code arrives in a join link, your browser may keep it temporarily in that tab while you create an account or log in. CareerCaptain removes it from the visible address after the page loads and clears the temporary value after you join successfully.
The respective controller and processor roles for an institutional deployment depend on the purposes and arrangements agreed with that organisation. Those roles, any institutional data-processing agreement and any deployment-specific impact assessment should therefore be documented for the particular Campus customer rather than inferred from this public notice alone.
5. Generated help, files and photos
CareerCaptain currently uses OpenAI for selected generated features. Floot-managed services are also used to run CareerCaptain and may use configured OpenAI or Google services when needed to provide or recover a generated feature. When you add a photo, screenshot or file, CareerCaptain may use these services to read the words or visible details so that you can search for and use them later. Only information needed for the feature you asked for is sent for that request.
OpenAI states that, by default, inputs and outputs submitted through its API and business services are not used to train its models unless the API customer explicitly opts in. Provider retention, security and legal exceptions remain governed by the applicable provider terms and policies and may change independently of CareerCaptain.
CareerCaptain tries to use only information relevant to what you asked. For example, pay information is not included merely because it exists in your account; it is used only when your request concerns pay, remuneration or related financial matters. CareerCaptain also does not automatically send every stored file when only one or two are relevant.
CVs and profiles can also be built directly from information you have already added without asking a generative service to invent new content. A share link can either show one saved version or always show the latest version. If you choose the latest-version option, what the recipient sees can change when you change the underlying information.
Anyone who possesses an active controlled-share link may be able to access the information exposed by that link, subject to any password, expiry or revocation you configure. CareerCaptain records aggregate link views and the most recent view time for service operation and owner visibility; those controls should not be treated as proof of the identity of a particular viewer.
CareerCaptain may read text from digital documents and use image-reading technology for photos, screenshots or scanned pages. What CareerCaptain reads is used to help with search and later requests; it does not replace the original file as the authoritative source.
Where you add what happened after using a generated feature, CareerCaptain may use that later as information you reported yourself. It is kept separate from the earlier suggestion and is not treated as independent proof that CareerCaptain caused the outcome.
You should avoid entering information about other people that is unnecessary for your purpose, particularly sensitive or confidential information you are not entitled to process.
6. Human judgement and automated processing
CareerCaptain's briefings, writing and decision-help features are tools to support your judgement. CareerCaptain does not use those generated responses to make a solely automated decision about you that itself produces legal or similarly significant effects. You choose what to request, what to rely on, what to save and how to act.
CareerCaptain is designed to tell you when important information may be missing. It can show the kinds of information it used and whether some relevant information had to be left out. That helps you review the answer but does not guarantee that it is correct.
7. Service providers and disclosures
We use service providers to host and operate CareerCaptain, including Floot-managed application infrastructure and database services, OpenAI for AI functionality, and Stripe for payment processing and subscription administration. Stripe processes payment information under its own security and privacy arrangements. We may also disclose information where required by law, to protect legal rights, or in connection with a legitimate corporate transaction subject to appropriate safeguards.
We do not sell personal data.
8. International processing
Some service providers may process data outside the United Kingdom. Where UK data-protection law requires safeguards for restricted transfers, we expect the relevant transfer mechanism or recognised safeguard to be used by the controller or processor responsible for that transfer.
9. Retention
Career information is generally retained while your account remains active so that CareerCaptain can remember it for you over time. Sign-in sessions currently expire after up to 30 days. Other service and security records are kept only for as long as reasonably required for the purpose for which they were created, subject to legal, dispute and security needs.
For files and photos, you can choose to keep the original until you delete it or ask CareerCaptain to remove the original after it has been read. When you delete an item normally, it moves to Recently deleted for 30 days so it can be restored. After that recovery period, the retained original and information created specifically from it are permanently removed. An original already removed under the second option cannot later be restored.
Saved CV/profile versions, source connections, LinkedIn review records and change history are generally kept with the account because they support version history, traceability and your ability to take your information elsewhere. Turning off a share link stops further access through that link but does not by itself erase a saved version or the information needed to record that the link existed.
10. Your rights
Depending on the circumstances, UK data-protection law gives you rights to access, correct, erase, restrict or object to processing, receive certain data in portable form, and withdraw consent where processing is based on consent. Some rights are qualified and may not apply in every case.
The product provides record-level deletion and export controls for relevant data. Account-level erasure requests may require us to reconcile subscription, payment-event, security and audit records that can be subject to separate legal or operational retention requirements; exercising a right to erasure does not mean every record must or can always be deleted immediately where an applicable exception or legal obligation applies.
If you think CareerCaptain has not handled your personal data properly, you can make a data-protection complaint directly to us at the registered office above, or by email to privacy@fatgenie.co.uk. We will acknowledge the complaint within 30 days of receiving it, take appropriate steps to investigate without undue delay, keep you informed as appropriate and tell you the outcome without undue delay.
You also have the right to complain to the Information Commissioner's Office (ICO). You do not have to contact us first.
11. Changes to this notice
We will update this notice when material data uses, service providers or legal requirements change. Material changes should be brought to users' attention before or when the new processing begins where required.