Privacy Policy

Updated: 2026-10-19

1. Data controller

FolkNet Inc., a Delaware corporation, 1401 Lavaca Street, STE 80284, Austin, TX 78701, USA. Contact for data questions: [email protected].

2. Data we process

Account and profile: email, name, profile photo, country and city, skills, interface language, role and verification status.

Orders and communication: task texts, responses, chat messages, attachments (photos, video, files), receipts, reviews, reports.

Payments and payouts: amounts, currencies, statuses, Stripe identifiers. Card numbers and bank details are handled by Stripe; we do not receive or store them.

Identity verification of Taskers is performed by Stripe Connect; Stripe holds the documents. Depending on your country, the check may include a photo of your ID and a selfie or facial comparison, processed by Stripe under its own privacy policy; we receive the verification status.

Shipping: for orders with delivery, the client enters the recipient's name, phone number, optional email and postal address. We also process parcel details, shipping labels and tracking status. The recipient's details come from the client, not from the recipient.

Address search: the text you type in an address field is sent to Google to suggest addresses.

Device permissions: notifications (to alert you about orders) and the camera or photo library (only when you attach a photo or video). You can change these in your device settings.

Tax and legal reporting: where the law requires it, we and Stripe may collect tax information from Taskers and report their earnings to tax authorities.

Technical data: push notification token, device data and app version, error logs.

Launch list: if you leave your email on our website, we store it and use it to email you about the launch and occasional product news. Every email has an unsubscribe link, and you can also write to [email protected] to have it deleted.

3. Why we use it

To run the Service: registration, matching, chat, held payments and payouts, notifications, dispute resolution, fraud and abuse prevention, support, and legal compliance.

We do not sell personal data and do not show ads based on it.

If you are in the EU, the UK or Switzerland, our legal bases are: performance of our contract with you (accounts, orders, payments, chat, support), our legitimate interests (fraud and abuse prevention, security, handling disputes, keeping the Service reliable), legal obligations (accounting, tax, answering authorities) and, where required, your consent (for example, notification permissions on your device).

Receipt checks and similar AI features are automatic hints. The final decision is made by the users or by our staff.

If you are in Canada, we rely on your express or implied consent, or on exceptions the law allows (for example, fraud prevention and legal claims). You can withdraw consent at any time by contacting us.

4. Who receives it

Stripe: payments, Stripe Connect, Tasker identity verification and tax calculation (Stripe Tax uses your country and address).

Supabase: database, authentication, file storage and server functions.

Google Cloud Translation: texts you ask to translate (including chat messages).

AI providers (Google Gemini, Groq): receipt photos and order texts for receipt checks, checklists and agreements. Data is sent only to fulfil the request.

Support chat: your messages in a support request are processed by an AI assistant powered by Groq (third-party provider). Complex questions are passed to a staff member.

Apple, Google (Firebase) and Expo push services: to deliver notifications.

Google Maps Platform (Places API): the address text you type, to suggest and complete addresses.

AfterShip: shipment tracking and shipping-label services for orders with delivery (names, phone numbers, addresses and parcel data of the sender and the recipient).

EasyPost: shipping labels, carrier rates, shipping insurance and parcel tracking for orders with delivery (names, phone numbers, addresses and parcel data of the sender and the recipient).

Resend: sending service emails such as sign-up confirmation and password reset (your email address).

Sentry: crash and error reports from the app (device model, operating system, app version and error details). We do not send message texts or payment data.

OpenStreetMap: map tiles on the Taskers map screen (the map provider can see your IP address).

Order participants see what the order needs: name, photo, rating, city, and the order chat with attachments.

Our administrators may read the order chat and attachments when a report is filed or a dispute is opened on the order, or when our fraud-protection system flags it. This is done to review the case and protect participants. Only authorized staff have access.

Business transfers: if FolkNet is involved in a merger, financing, acquisition or sale of assets, personal data may be transferred as part of that transaction. We will tell you if it becomes subject to a different privacy policy.

Authorities and courts when the law requires it.

5. International transfers

We are based in the United States. Our processors (Stripe, Supabase, Google, Groq, AfterShip and others) may process data in the United States and other countries, including countries outside the EU and the UK.

For transfers of personal data from the EU, the UK or Switzerland we rely on the European Commission's Standard Contractual Clauses (and the UK addendum) contained in our processors' data processing agreements, or on another lawful transfer mechanism.

6. Retention and deletion

Data is kept while your account is active. You can delete your account in your profile (when you have no active orders or money held for an order): personal data and profile files are erased, while anonymised records of orders, payments and counterparties' messages are kept for accounting, dispute resolution and legal obligations. Stripe keeps payment data under its own rules.

Support conversations are kept for 12 months after the last message and then deleted automatically.

Typical periods: account and profile data until you delete your account; anonymised order, payment and tax records up to 7 years after the transaction, as required for accounting and legal obligations; technical logs up to 90 days.

7. Your rights

You may request access, correction, deletion, restriction, portability, object to processing or withdraw consent by writing to [email protected]. You may also complain to your local data protection authority.

We reply within one month (45 days for residents of California and other US states, extendable where the law allows). Residents of California, Colorado and other US states may also ask what data we hold, request correction or deletion, and opt out of the sale or sharing of personal data. We do not sell personal data and do not share it for cross-context behavioural advertising, and we do not discriminate against you for using your rights. If we refuse a request you can appeal by replying to our email.

You can also delete your account yourself in your profile (section 6).

If a decision with legal or similarly significant effects is ever made solely by automated means, we will tell you and offer a human review.

We may need to verify your identity before handling a request. If you use an authorised agent, we may ask for written proof of their authority. If you are in the UK you can complain to the Information Commissioner's Office (ico.org.uk); if you are in the EU, to your national data protection authority.

We do not use or disclose sensitive personal information (such as account login details, payment data or the contents of messages) for purposes other than operating the Service and those the law allows.

California residents may ask once a year which categories of personal data we disclosed to third parties for their direct marketing and to whom. We do not disclose personal data for third-party direct marketing.

We do not currently respond to browser Do-Not-Track signals, because the app does not track you across other websites or services.

8. Security and children

We use encryption in transit, access controls and staff access limits, but no system is perfectly secure. The Service is not intended for anyone under 18 and we do not knowingly collect their data. If we learn that we hold data of someone under 18, we will deactivate the account and delete the data.

9. Changes

We may update this policy and will announce material changes in the app. Questions: [email protected].