Privacy Policy

Kerjakan (kerjakan.my) connects people in Malaysia who need a job done with local traders who can do it. This policy explains what we collect, why, who else handles it, how long we keep it, and what control you have. It describes what our platform actually does — if something here doesn't match your experience, please tell us.

What we collect

• Your account — name, email address, password (stored only as a one-way hash), and optionally a phone number, profile photo, and the city and state you're in.
• If you sign in with Google or Apple — your name, email address and account identifier from them. If you use Apple's "Hide My Email", we only receive the relay address. We never receive your Google or Apple password.
• WhatsApp number — if you add one, so we can send you codes and job alerts. We confirm it belongs to you with a one-time code.
• 2-step verification — if you turn it on: which channel you chose (WhatsApp or email), backup codes (stored only as hashes) and the devices you asked us to remember.
• Jobs and offers — what you post, the location and budget of the job, the materials you list, photos you attach, the offers and counter-offers you send or receive, and the steps of the job (for example "On my way", "Arrived", "Done").
• Messages — your conversations on a job and with our support team, including photos, videos, voice notes, documents and any location you choose to share.
• Location —
  • a private home pin you can save, used as the default location for new jobs;
  • for taskers, a private base pin and how far you'll travel, used to show you nearby jobs;
  • your current position when you use "Near me", pick a place on the map, or share your location in a chat;
  • for drivers on a delivery or errand, your position while the app is open and you are on duty or on a trip, so the job goes to the nearest driver and the customer sees when you'll arrive. We don't track your location in the background.
• Payments and payouts — what you paid or were paid, and when. Card and bank login details are entered with our payment providers, not with us. If you are a tasker, we keep the bank account you want to be paid into; the account number is encrypted and only ever shown masked.
• Verification — if you apply to be a verified tasker, the identity or business documents you upload (for example IC or SSM). If you verify with MyDigital ID, we receive your official name; we keep only a scrambled (hashed) form of your IC number, never the number itself, to stop one person holding two accounts.
• Support calls — if you request a support call about a job, the call is answered first by our AI support assistant and then, if needed, by a member of our team. Calls are not recorded; a text transcript of the conversation is kept with the dispute so our team can follow up.
• Reviews and reputation — the ratings and comments you leave and receive, your completed jobs, and how often you cancel or turn down jobs you are offered.
• Referrals — who invited you, who you invited, and any referral bonus.
• Device and technical information — a push notification token for your phone, the app version, your phone's platform (iPhone or Android) and your chosen language. Our servers also keep short-lived technical logs (such as IP address and time of request) for security.

How we use it

• To run the marketplace: show your job to the right taskers, let you exchange offers and messages, take and pass on payments, and keep a record of what was agreed.
• To find you a tasker: we ask suitable taskers near the job one at a time, and choose who is asked first by fixed rules (for example who has earned least recently and how reliable they have been).
• To keep people safe: we screen messages for contact details, account numbers and abusive language, and we investigate reports and disputes.
• To show reputation: your rating, completed jobs and reliability are visible to others.
• To contact you about your account and your jobs, by push notification, WhatsApp or email.

Where we use AI

Some features send the information they need to an AI service to work:

• our support assistant (in chat and on support calls) sees the conversation and the details of the job you're asking about;
• when you cancel a job, the reason you give is checked against our cancellation rules;
• for paid-in-advance jobs, the job description is used to estimate a fair price;
• replies to our WhatsApp messages may be read and answered by our AI assistant.

We don't let AI providers use your information to train their models where we can choose that. If an AI isn't sure, a person on our team decides. If you disagree with any outcome, contact us and a person will review it.

Messages are screened, and can be read for disputes

To keep jobs and payments on the platform where we can help if something goes wrong, phone numbers, email addresses, bank or account numbers and messaging links are automatically hidden from chat messages before they are delivered. The hidden details are not stored — they are removed before your message is saved.

Our administrators can read conversations in order to investigate a dispute or a report. Every time an administrator opens a conversation, that access is recorded.

What we don't do

• We don't sell your personal information.
• We don't show you third-party advertising, and we don't track you across other apps or websites.
• We don't share another user's contact details with you, and we don't share yours with them.

Who else handles your data

We use these service providers. Each gets only what it needs for its job:

• Other users — your name, photo, city/state, rating and reviews are visible to people you interact with. Your email and phone are not.
• Hosting and storage — the platform runs on a server we control, and uploaded files are stored in our own storage.
• Payments — Billplz and Curlec (by Razorpay) process payments and payouts.
• Notifications — Google Firebase Cloud Messaging and Apple Push Notification service deliver push notifications; WhatsApp (Meta) delivers WhatsApp messages; our email provider delivers emails.
• Calls — Agora carries support calls; Microsoft Azure (and, if we switch to it, ElevenLabs) turns speech into text and text into speech.
• AI — OpenRouter, which passes requests to the AI model providers behind it.
• Maps and places — OpenStreetMap shows maps and turns a location into a town and state; Google estimates driving times for deliveries.
• Identity and sign-in — MyDigital ID, Google and Apple, only if you choose to use them.
• Authorities — only where the law requires it.

Some of these providers process data outside Malaysia. Where they do, we rely on their contractual and security commitments to protect it to a standard comparable with Malaysian law.

Where your data is kept, and how we protect it

Your data is stored on our servers and in our own storage. Passwords and backup codes are stored only as hashes, bank account numbers are encrypted, and identity documents you upload for tasker verification are kept privately and are never published — only you, or an administrator reviewing your application, can open them.

If a data breach is likely to affect you, we will tell you without undue delay by email or in the app, and notify the Personal Data Protection Commissioner where the law requires.

How long we keep it

• While your account is open — we keep your account information for as long as you use Kerjakan.
• When you delete your account — your personal details are erased straight away (see below).
• Payment records — kept for as long as Malaysian tax and accounting law requires, even after you delete your account.
• Jobs, messages, reviews and dispute records — kept with nothing identifying you, because the other people involved rely on them.
• Technical logs — kept for a short period, then deleted.

Deleting your account

You can delete your account yourself in the app: Account → Delete account (also on Edit profile), or on the website, or by contacting us. When you confirm, your account is deleted immediately: you are signed out, and we erase your name, email address, phone number, WhatsApp number, photo, saved locations, tasker profile and payout bank details, identity documents and MyDigital ID details, push tokens and 2-step verification data. There is no waiting period, and no one needs to approve it.

Some records remain, with nothing identifying you attached: jobs, offers, messages and reviews stay so that the other people involved keep their own history and the ratings they earned, and payment records stay as described above. Your account cannot be recovered or signed into after deletion.

You can't delete your account while a job is in progress or while money is waiting in your wallet — finish or cancel the job, or withdraw the money, first. Someone on the other side is relying on it.

If we contacted you on WhatsApp

We sometimes send WhatsApp messages about Kerjakan to people who may want to post jobs or find work. If we did, we hold your name (if we have it), your WhatsApp number, our messages and your replies, and whether you asked us to stop. Our AI assistant may answer your replies until a person takes over. Reply STOP or BERHENTI at any time and we won't message you again; you can also ask us to delete your details.

Your choices and rights

• You can edit or remove your name, phone, WhatsApp number, photo and locations at any time from your account.
• You can turn push notifications off in the app (Account → Push notifications) or in your phone's settings. Pushes for Kerjakan news and offers are off unless you switch them on there. You can stop WhatsApp messages by replying STOP.
• You can turn off location access for Kerjakan in your phone's settings at any time; features that need it (such as "Near me" or driving jobs) will then ask you to enter a place instead or won't work.
• Under Malaysia's Personal Data Protection Act you can ask us for a copy of your data, ask us to correct it, ask us to send it to another service, or withdraw your consent.
• You can delete your account, as described above.

Children

Kerjakan is not intended for anyone under 18, and we don't knowingly collect data from children.

Changes

If we change this policy we'll update this page and the date below, and tell you in the app if the change is significant.

Last updated: 5 November 2026

Contact us

Questions about this policy, or about your data, can be sent to support@kerjakan.my.