Privacy Policy

This Privacy Policy explains how KAYA collects, uses, stores, shares, and protects your personal data when you use our website, mobile application, marketplace platform, and related services.

By creating an account or using KAYA, you acknowledge that your personal data will be processed in accordance with this Privacy Policy.

The controller responsible for processing your personal data is:

Personal Data means any information relating to an identified or identifiable natural person.

Processing means any operation performed on personal data, including collection, storage, use, disclosure, transfer, and deletion.

Poster means a user who posts a task through KAYA.

Tasker means a user who accepts or performs a task through KAYA.

Platform means the KAYA website, mobile applications, systems, and related services.

Account Information

When creating an account, we may collect:

• First name
• Last name
• Email address
• Mobile phone number
• Password (encrypted)
• Date of birth
• User category
• Profile photograph

Identity Verification Information

To maintain trust and safety, KAYA requires identity verification for all users. We may collect:

• Verification status
• Verification timestamps
• Verification provider reference numbers
• Limited verification metadata

KAYA seeks to minimize personal data collection and generally avoids storing full copies of identity documents whenever reasonably possible. Identity verification may be performed by trusted third-party providers.

Profile Information

Users may voluntarily provide:

• Biography
• Languages spoken
• Skills
• Experience
• Service areas
• Business information
• Portfolio photographs

Task Information

• Task titles
• Task descriptions
• Task categories
• Task schedules
• Task budgets
• Task locations
• Task status updates
• Photos and documents uploaded by users

Messaging Information

KAYA provides in-app messaging between Posters and Taskers. Message content may be processed and stored to facilitate task completion, support users, investigate disputes, detect fraud, maintain platform safety, and comply with legal obligations.

Ratings and Reviews

• Ratings
• Reviews
• Feedback
• Complaint records

Payment Information

Payments are processed by third-party payment providers. KAYA may receive transaction identifiers, payment status, payout status, refund information, and limited billing information. KAYA does not store complete payment card details.

Technical Information

• IP address
• Device information
• Browser type
• Operating system
• App version
• Log data
• Usage activity
• Security events

To facilitate marketplace transactions, KAYA may display:

• First name and last initial
• Nickname
• Profile photograph
• Ratings
• Reviews
• Verification status
• Service area
• Profile information voluntarily provided by users

Government-issued identity documents are never publicly displayed.

Before task acceptance: Exact addresses are hidden. Only approximate locations, districts, cities, or service areas may be displayed.

After task acceptance: Necessary address information may be shared with the assigned Tasker solely for task completion purposes.

Users agree not to misuse location information obtained through the platform.

We may share personal data with:

KAYA profiles are intended for use within the platform. Profiles are generally visible only to authenticated users. KAYA does not intend for user profiles to be publicly indexed by search engines.

Some service providers may process data outside Finland or the European Economic Area (EEA). Where required, KAYA will implement appropriate safeguards, including Standard Contractual Clauses, Adequacy Decisions, and other GDPR-approved transfer mechanisms.

Subject to applicable law, users may have the right to:

• Access personal data
• Correct inaccurate information
• Request deletion of personal data
• Restrict processing
• Object to processing
• Receive personal data in a portable format
• Withdraw consent

Privacy requests may be submitted to: privacy@kayatask.com. KAYA will normally respond within one month as required by GDPR.

If you believe your personal data has been handled improperly, you may contact KAYA first.

You also have the right to lodge a complaint with the Finnish supervisory authority: Office of the Data Protection Ombudsman (Finland).

Users may request account deletion at any time. Certain information may be retained where necessary to:

• Meet legal obligations
• Fulfill accounting requirements
• Prevent fraud
• Investigate security incidents
• Resolve disputes
• Protect legal rights

KAYA uses cookies and similar technologies necessary for authentication, security, session management, and core platform functionality.

At MVP launch, KAYA does not use advertising tracking technologies such as Meta Pixel, TikTok Pixel, LinkedIn Insight Tag, or similar advertising trackers.

If additional analytics or marketing technologies are introduced, KAYA will update this Privacy Policy and obtain any legally required consent.

KAYA implements reasonable technical and organizational measures to protect personal data, including encryption where appropriate, access controls, secure authentication, security monitoring, and incident response procedures.

No method of transmission or storage can guarantee absolute security. In the event of a personal data breach, KAYA will comply with applicable legal notification requirements.

KAYA is intended only for individuals aged 18 years or older. KAYA does not knowingly collect personal data from children. Accounts found to belong to minors may be suspended or removed.

KAYA may use automated systems for fraud detection, security monitoring, and identity verification assistance. KAYA does not currently make legally significant decisions based solely on automated processing. Where appropriate, human review may be involved.

KAYA follows privacy-by-design principles, including:

• Collecting only information reasonably necessary to operate the platform
• Limiting access to personal data
• Minimizing data retention
• Protecting information through appropriate safeguards
• Respecting user rights under GDPR
• Continuously improving privacy and security practices

KAYA may update this Privacy Policy periodically. Material changes will be communicated through the platform or by other appropriate means where required by law. Continued use of KAYA after updates constitutes acknowledgment of the revised Privacy Policy.