WorkGY — Privacy Policy

Effective date: 31 July 2026

Operator: Anish Alexander Sharma, an individual trading as “WorkGY” (business name registered in Guyana under the Business Names Registration Act).

Contact: privacy@workgy.gy

1. What we collect

2. Why we collect it

• Run the marketplace (matching, bookings, chat, reviews).
• Process the connection-fee payment via Stripe (we share booking id + the fee amount; Stripe holds cards). WorkGY processes no other payments — workers pay and receive nothing through WorkGY, and we collect no worker identity/bank/payout data.
• Maintain your in-app credit balance and ledger (cancellation credits and redemptions).
• Send push and in-app notifications about your bookings, applications, messages, reviews, and payment status.
• Detect abuse and prevent fraud.
• Diagnose crashes (Crashlytics) and measure aggregate funnel health (Analytics) — never advertising or cross-app tracking.
• Comply with legal obligations (tax, law-enforcement requests).

3. Who we share with

• Other WorkGY users, but only what's needed to complete a booking: a customer sees their assigned worker's profile and messages; a worker sees the customer's task and messages. Task postings — including attached photos/videos — are visible to all signed-in users so workers can find and evaluate jobs.
• Official Partner coordinators (Terms §3b): when you book a worker whose profile is labelled “Managed by [Partner]”, that Partner’s coordinator(s) can read and send messages in the booking’s conversation and see the booking’s details — they are how the Partner arranges your job. This applies only to bookings with Partner-managed workers and is visible in the app before you pay the connection fee.
• Stripe, for payment processing. See Stripe's privacy policy.
• Firebase / Google Cloud, our backend infrastructure (data stored in Canada, processed in the United States — see §4; Google's standard data-processing terms apply).
• Apple, for push delivery via APNs (token only, no message bodies in delivery infra).
• Law enforcement, when compelled by a valid legal request.

We do not sell personal information to third parties.

4. Where we store it

Your data lives in two places, both Google Cloud:

• Account, booking, chat, and review data — northamerica-northeast2 (Toronto, Canada).
• Files you upload — task photos and videos, profile photos, and CVs — us-central1 (Iowa, United States).

The Cloud Functions that process all of it also run in us-central1 (Iowa, United States). Your data may therefore be stored and processed in countries other than your own.

5. How long we keep it

• Account + worker profiles: while the account exists.
• Bookings + reviews: 7 years (tax / payment-audit / dispute window).
• Chat messages: deleted 90 days after the booking closes (completed or cancelled), by an automated daily job. Two exceptions, both to protect you: messages in a disputed booking are kept until the dispute is resolved — they are the evidence — and messages that are the subject of an open safety report are kept until moderation closes it.
• Push tokens: rotated when the device reinstalls or signs out.
• Crash logs (Crashlytics): 90 days (Firebase default retention).
• Analytics events: 2 months — the shortest Google Analytics retention setting, chosen to match WorkGY's data-minimizing, no-tracking posture.

6. Your rights

• Access: request a copy of your data via privacy@workgy.gy.
• Correct: edit profile / worker fields in-app.
• Delete: open the app → Settings (gear icon) → Delete account. The action is irreversible and runs server-side via our deleteUserAccount Cloud Function. You can also email privacy@workgy.gy if you prefer.

  What gets deleted immediately:

  • your user profile (users/{uid}) and, if applicable, your worker profile (workers/{uid});
  • your push notification tokens (users/{uid}/fcmTokens);
  • your in-app notification inbox (notifications rows targeting your uid);
  • any tasks you posted that are still open (no commitments made);
  • any pending applications you submitted;
  • your Firebase Authentication record (frees the email for re-signup).

  What gets anonymized (kept for the other party's history + legal/payment audit):

  • past bookings you participated in — your uid is rewritten to a one-way hash (deleted:<hash>), so the booking, money trail, and timestamps remain for tax + dispute compliance, but no one can re-identify you from them;
  • reviews you wrote or received — same hash; rating + comment preserved so the counter-party's rating average stays honest;
  • tasks you posted that already moved past open — anonymized so the assigned worker still sees the booking.

  Retention of anonymized records is up to 7 years to satisfy payment-audit and tax obligations (Privacy §5). After that window, an audit row in accountDeletions/{uid} is purged and is then deleted automatically.

• Object / restrict / port: GDPR / CCPA requests are honored — contact us.
• Withdraw push consent: iOS Settings → Notifications → WorkGY → Allow Notifications → off.
• Withdraw location consent: iOS Settings → Privacy → Location Services → WorkGY → Never.

7. Children

WorkGY is intended only for adults. You must be at least 18 years old to create an account or use the service (see Terms of Service §2) — WorkGY is a marketplace for paid, in-person work and is not directed to, or intended for, anyone under 18. We do not knowingly collect personal information from anyone under 18; if we learn we have, we delete it.

8. Security

We use TLS in transit, Firestore security rules for access control, and Stripe for PCI-DSS-compliant payment handling. No system is perfect; you are responsible for keeping your account credentials safe.

9. Changes

We will post any material change at this URL with a new effective date. Significant changes may trigger an in-app notice.

10. Contact

support@workgy.gy · 476 Republic Park, Peter's Hall, Guyana