Privacy Policy
Effective Date: May 25, 2026 | Last Updated: June 26, 2026
TaskA (“we,” “our,” or “us”), operated by TaskA (Pvt) Ltd, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our website (taskaliving.com), mobile application (TaskA), and related services (collectively, the “Services”).
By using our Services, you consent to the data practices described in this policy. If you do not agree, please discontinue use of our Services.
1. Information We Collect
We collect the following categories of personal data:
| Data Type | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, display name | Account creation, service delivery, provider identification |
| Contact Data | Email address, phone number | Account verification, booking coordination, provider contact, notifications |
| Location Data | Saved service addresses (street, city) | Service delivery – providers need to know where to go |
| Profile Data | Profile photo (optional) | Helps service providers recognize you at the service location |
| Transaction Data | Booking history, payment records, subscription status | Service fulfillment, billing, account history, audit |
| Device Data | FCM push notification token | Deliver booking, payment, and status notifications |
| Crash Data | App crash logs, error reports | Improve app stability and fix bugs |
Data Minimization (Apple App Store 5.1.1(i)): We only collect data that is strictly necessary for the functioning of our home services platform. Phone numbers help providers contact you about bookings. Addresses are required for service delivery. Profile photos are optional and help providers identify you. We do not collect sensitive data (health, biometrics, financial account credentials), precise geolocation, contacts, or browsing history from other apps.
2. How We Use Your Information
- Create and manage your user account
- Process service bookings and coordinate with service providers
- Process payments via PayHere (our third-party payment processor)
- Manage subscription plans, billing, and renewals
- Send push notifications for booking confirmations, provider assignments, payment receipts, quotations, and promotional offers
- Display service ratings and reviews (your name and rating are visible to other users)
- Improve app performance and fix bugs via crash reporting
- Respond to support inquiries and enforce our Terms of Service
- Comply with legal obligations under Sri Lankan law
We do NOT sell your personal data to third parties. We do not use your data for automated decision-making or profiling.
3. Legal Basis for Processing
We process your data under the following legal bases:
- Contractual necessity: To provide the Services you request (booking services, processing payments)
- Consent: For push notifications, promotional communications, and optional profile photos. You may withdraw consent at any time
- Legitimate interests: Crash reporting, service improvement, fraud prevention
- Legal obligation: Compliance with Sri Lankan law (PDPA No. 9 of 2022), applicable GDPR and CCPA where relevant
4. Data Storage & Processing
Your data is stored and processed using Firebase (a Google Cloud service) with data hosted in the asia-east1 region. Firebase services we use include:
- Cloud Firestore: Database for user profiles, addresses, bookings, payments, subscriptions, reviews, notifications
- Firebase Authentication: Secure login and identity management
- Cloud Storage: Profile photo storage
- Cloud Messaging (FCM): Push notification delivery
- Crashlytics: Crash and error reporting (crash-only mode; does not track user behavior)
Google Cloud / Firebase acts as our data processor. Google’s privacy policy and data processing terms apply to the infrastructure layer.
5. Third-Party Sharing
We share your data only with the following categories of recipients:
- Service Providers: Your name, phone number, and service address are shared with the service provider assigned to your booking so they can contact you and reach the service location
- PayHere (Payment Processor): When you make an online payment, your name, email, phone, and payment amount are transmitted to PayHere to process the transaction. PayHere’s privacy policy governs their handling of this data
- Firebase / Google Cloud: Infrastructure provider (see Section 4)
- Legal Authorities: When required by law, court order, or government regulation
We do not share your data with advertisers, data brokers, or analytics platforms.
6. Data Retention (Apple 5.1.1(v))
| Data | Retention Period |
|---|---|
| Account data (name, email, phone) | Account lifetime + 90 days after deletion |
| Addresses | Account lifetime; deleted with account |
| Booking history | Account lifetime + 90 days (anonymized post-deletion for audit) |
| Payment records | 7 years (legal requirement) or account lifetime + 90 days, whichever is longer |
| Profile photo | Deleted with account |
| FCM push token | Until logout or account deletion |
| Crash logs (Crashlytics) | 90 days |
7. Data Security
We implement industry-standard security measures including encryption at rest (Firebase/Firestore) and in transit (HTTPS/TLS), Firebase Authentication for identity management, Firestore Security Rules that restrict data access to the owning user, and server-side validation via Cloud Functions for sensitive operations. However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
8. Your Rights
Depending on your jurisdiction, you have the following rights:
- Access: Request a copy of your personal data we hold
- Rectification: Correct inaccurate or incomplete data (you can do this in-app via Edit Profile)
- Deletion: Delete your account and associated data (see Section 9). You may also request partial deactivation instead of full deletion
- Portability: Receive your data in a structured, machine-readable format
- Withdraw Consent: Withdraw consent for notifications, marketing, or optional data collection at any time
- Object: Object to processing based on legitimate interests
To exercise these rights, contact us at support@taskaliving.com. We will respond within 30 days. For account deletion, you may also use the in-app “Delete Account” option or visit https://taskaliving.com/delete-account.
9. Account Deletion
You can delete your account and all associated personal data at any time:
- In-App: Go to Profile → Delete Account. You will be asked to re-authenticate for security. All your data (profile, addresses, bookings, payments, reviews, notifications, photos) will be permanently deleted. This action is irreversible.
- Web: Visit https://taskaliving.com/delete-account, enter your registered email, and follow the confirmation link.
After deletion, some transaction records may be retained in anonymized form for 90 days for audit and legal compliance purposes. Payment records may be retained for up to 7 years as required by Sri Lankan law.
Apple App Store Note (Guideline 5.1.1(v)): In addition to full account deletion, you may request account deactivation (temporary suspension without data deletion) by contacting support@taskaliving.com.
10. Cookies & Tracking
Our website uses essential cookies for session management and security. Our mobile app uses local storage (SharedPreferences / UserDefaults) to remember your onboarding completion and login state. The PayHere payment WebView within our app may set its own cookies per PayHere’s privacy policy. We do not use tracking cookies, advertising identifiers, or cross-app tracking.
11. Children's Privacy
Our Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us immediately.
12. International Users
Your data is stored in Singapore (asia-east1) via Google Cloud. If you access our Services from outside Sri Lanka, your data will be transferred to and processed in that location. By using our Services, you consent to this transfer.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes via email (to the address on file) or through an in-app notice. Continued use after changes constitutes acceptance.
14. Contact Us
For privacy-related inquiries or to exercise your data rights:
- Email: support@taskaliving.com
- Website: https://taskaliving.com/contact
- Address: TaskA (Pvt) Ltd, Colombo, Sri Lanka
You also have the right to lodge a complaint with your local data protection authority.
This policy is compliant with:
- Sri Lanka Personal Data Protection Act (PDPA) No. 9 of 2022
- EU General Data Protection Regulation (GDPR)
- California Consumer Privacy Act (CCPA)
- Apple App Store Review Guidelines 5.1.1
- Google Play User Data Policy