Privacy Policy

Data we process

WhatMyJob processes only the data needed for accounts, tasks, collaboration, security, and lightweight product measurement.

• Account data: name, email, password stored as a hash, verification status, language, time zone, and optional WhatsApp number and avatar if you choose to add them.
• Work content: personal and group tasks, descriptions, dates and deadlines, resource or result links, task status, and result notes you enter.
• Collaboration data: connections, invitations, group membership, group roles, and notifications related to those activities.
• First-party usage analytics: internal user ID, a random session marker stored as a hash, platform, session start/activity times, and summaries such as active users and session counts.
• Server infrastructure may process technical information such as IP address, user agent, and security logs for service delivery, troubleshooting, and abuse prevention.

How we use data

• Operate login, profiles, tasks, connections, groups, notifications, and WhatMyJob core features.
• Protect accounts, prevent abuse, apply rate limits, and investigate security issues.
• Deliver necessary notifications about connection requests, group invitations, or tasks.
• Measure whether WhatMyJob is actually used and useful, such as DAU, WAU, MAU, sessions, tasks created/completed, and active groups.

Product analytics

WhatMyJob does not create analytics events for every click or button. MVP analytics focuses on usage sessions and aggregate product metrics. We do not use these analytics for behavioral advertising.

When data is shared or visible to others

WhatMyJob does not sell personal data and the MVP does not display ads.

• Certain task or profile information may be visible to group members or connections when required for features you choose to use.
• Infrastructure, hosting, email, or technical service providers may process data as needed to operate WhatMyJob.
• If you choose an email or WhatsApp action or open an external link, information you send to that service is handled under that provider’s policies.
• Data may be processed or disclosed when legally required or necessary to protect the service and its users.

Device permissions

The current MVP does not require precise location, device contacts, SMS, call logs, microphone, or camera access as a core function. If a future Android version or feature adds sensitive permissions, the policy and in-app disclosures must be updated before that data is used.

Security

We use HTTPS, password hashing, email verification, backend permission checks, CSRF protection for web requests, expiring tokens, and access controls to reduce unauthorized access risk.

Data retention

Data is kept while the account and related features remain necessary. Some data may be retained longer when needed for security, abuse prevention, temporary backups, or legitimate legal obligations.

Account and data deletion

You can request deletion of your account and associated data through the Account deletion.

Cookies and sessions

WhatMyJob uses sessions required for login, security, and basic preferences. The MVP does not install third-party advertising trackers.

Policy changes

This policy may be updated when features, platforms, or data processing practices change. The updated date will be shown on this page.

Contact

For privacy questions, contact [email protected].