1. Applicable Law
Kwickly processes personal data in accordance with applicable data protection law, including Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and applicable Portuguese data protection rules.
2. Account Data
We may collect name, email, phone, account type, profile photo, login data, passkey/authentication data where applicable, language, device information, app settings and notification preferences.
3. Task Poster Data
We may collect posted tasks, task title, description, category, location, budget, urgency, photos, attachments, task status, payment status, reviews, messages, complaints and optional identity verification status.
4. Task Doer Data
We may collect provider profile, business type, categories, radius, availability, working hours, languages, portfolio, task history, reviews, Stripe Connect status and payout eligibility.
5. Verification Data
We use Didit to verify the identity of Task Doers, and may use Stripe Connect, Stripe Express, or other authorised partners to support business, payment, payout, fraud prevention, and compliance checks.
Depending on the verification process, Stripe or another authorised partner may process identity details, document type, identity documents, business documents, selfie or liveness information where applicable, bank account or IBAN details, tax information, business activity information, verification status, account capability status, payout eligibility status, and related compliance decisions.
Kwickly may receive limited verification-related information, including verification status, connected account status, required actions, payout eligibility, capability status, restriction status, and compliance or risk signals. Kwickly does not normally store full payment card details and may not have access to all documents submitted directly to Stripe or other verification partners.
6. Professional Documents and Verification (Service Providers)
If you offer services that require professional credentials, you may upload documents such as insurance certificates and professional licences or certifications. We use these to help confirm your eligibility to offer those services and to show customers which documents you have provided.
What we process: the documents you upload and the key facts read from them — for example the insurer or issuing body, policy or certificate number, holder name, tax number (NIF/NIPC) and expiry date.
How we process them: we use automated tools (including AI services provided by Google) to read the key facts from your documents and to check that the name and tax number match the identity on your account. Our team may also review the documents. Based on this, we may mark your profile as having those documents on file and, where relevant, unlock certain job types.
What we do not do: we do not independently guarantee the authenticity, validity, or ongoing status of these documents, and having documents on file does not mean we certify that you are legally qualified. You remain solely responsible for holding valid licences, certifications and insurance and for meeting all legal requirements for your work.
Storage and retention: documents are stored securely and are accessible only to authorised administrators. We keep them while your account is active and delete them when your account is closed, unless we must retain them to comply with a legal obligation or to resolve a dispute.
Lawful basis: performance of our contract with you as a service provider and our legitimate interest in a safe, trustworthy marketplace; and, where applicable, compliance with legal obligations.
7. Payment Data
Kwickly uses Stripe and/or Stripe Connect. Kwickly does not store full card details. We may receive limited payment status, transaction ID, refund, chargeback, dispute, payout, Stripe account, capability and verification data. Stripe may process payment, KYC, fraud prevention and compliance data under its own terms.
8. Location Data
We may process task location, approximate location, service radius, Task Doer location during active tasks, arrival/progress information and city/area information for matching, dispatch, tracking, safety, fraud prevention and dispute review.
9. Messaging Data
We may process chat messages, attachments, images, delivery/read status, message metadata and moderation signals to provide chat, prevent fraud, detect unsafe content, prevent payment circumvention, handle disputes and enforce terms.
10. Technical Data
We may collect IP address, device ID, device type, operating system, app version, browser, crash logs, security logs, usage events, cookies or similar technology data and analytics events.
11. Analytics
We use analytics tools to understand how the app is used and to improve it. This includes Mixpanel and Google Firebase Analytics. These tools collect usage information such as the screens you view, actions you take in the app, device and app version information, and a pseudonymous identifier — but not the contents of your documents or messages.
Mixpanel data is stored on European Union servers (EU data residency). Mixpanel, Inc. is based in the United States; where any transfer outside the EU/EEA occurs, it is covered by appropriate safeguards (Standard Contractual Clauses and/or the EU–US Data Privacy Framework).
We do not sell your personal data. You can turn analytics off at any time in the app's settings.
Lawful basis: your consent and/or our legitimate interest in maintaining and improving the service.
12. Support and Dispute Data
We may process support messages, complaint details, dispute evidence, photos, admin decisions, refund decisions, account actions and legal correspondence.
13. Purposes of Processing
We process data to create accounts, authenticate users, provide the app, post tasks, match users, send notifications, enable messaging, process payments, support Stripe Connect payouts, support verification, display profiles and badges, use internal trust, safety, ranking and reliability signals, handle cancellations, refunds and disputes, prevent fraud, improve safety, moderate content, enforce terms, provide support, comply with law, improve services and send permitted marketing.
14. Legal Bases
We rely on contract, legal obligation, legitimate interests, consent and, in rare cases, vital interests. Contract covers platform delivery. Legal obligation covers tax, accounting, consumer, payment, regulatory and legal requirements. Legitimate interests cover safety, fraud prevention, moderation, dispute handling, security and service improvement. Consent applies to optional marketing, certain cookies, optional permissions and optional verification where required.
15. Sharing Data
We may share data with Stripe, verification providers, hosting providers, email/SMS/push providers, analytics providers, customer support tools, fraud prevention tools, legal advisers, accountants, regulators, courts, authorities, law enforcement where required, and other users where necessary for task completion.
16. Sub-processors and Third Parties
We work with the following processors and sub-processors to help us provide Kwickly:
- Stripe — payment processing and Stripe Connect payouts.
- Didit — identity verification for Task Doers.
- Mixpanel, Inc. — product analytics (EU data residency).
- Google Ireland Limited / Google LLC (Firebase, Google Cloud, Gemini) — app infrastructure, analytics, and automated reading of uploaded professional documents.
This list may change as we add or replace providers. Material changes will be reflected in this Privacy Policy.
17. Stripe and Connected Accounts
Task Doers using Stripe Connect may be required to provide identity, business, tax and bank account information. Kwickly may receive Stripe status information. Stripe may act as an independent controller for certain payment, KYC, risk and compliance processing.
18. Identity Verification
Identity verification is required for Task Doers and may be optional for Task Posters where available.
Kwickly may display verification badges or provider type labels, such as Verified Client, Verified Task Doer, Freelancer or Registered Company, where applicable. Unless expressly stated, provider type labels may be based on information provided by the user and do not mean that Kwickly has independently verified every business registration, licence, insurance policy, qualification, tax status or professional authorisation.
Verification does not guarantee skill, legality, insurance, service quality, suitability or future behaviour.
19. Cookies
The website may use cookies or similar technologies for essential functionality, security, analytics, performance, preferences and marketing where permitted. Where required, users will receive cookie choices.
20. Marketing
We may send marketing where permitted by law. Users can unsubscribe at any time. Service messages about tasks, safety, payments, account activity, verification or legal notices are not marketing and may still be sent.
21. Retention
We keep personal data only as long as necessary for account operation, task history, payment records, legal obligations, tax/accounting, disputes, chargebacks, fraud prevention, safety investigations, legal claims, compliance and platform security. When no longer needed, data may be deleted, anonymised or archived.
22. User Rights
Subject to legal limits, users may request access, correction, deletion, restriction, objection, portability, withdrawal of consent and may complain to a supervisory authority. Requests should be sent to privacy@kwickly.app. We may verify identity before responding.
23. Account Deletion
Users may request account deletion. Deletion requested in the app takes effect immediately once confirmed. Deletion requested by email is completed once we verify the request came from the account owner — within 30 days, and usually much sooner. We email the user once deletion is complete. Some data may be retained where necessary for legal obligations, tax/accounting, fraud prevention, disputes, chargebacks, safety, legal claims or regulatory compliance.
24. International Transfers
Some providers may process data outside Portugal or the EEA. Where required, Kwickly will use appropriate safeguards such as adequacy decisions, standard contractual clauses or other lawful transfer mechanisms.
25. Security
Kwickly uses technical and organisational measures such as access controls, encryption where appropriate, secure authentication, role-based admin access, logging, monitoring, data minimisation, document restrictions and payment processing through Stripe. No system is completely secure.
26. Children
Kwickly is not intended for users under 18. Users under 18 must not create accounts or use Kwickly.
27. Automated Systems
Kwickly may use automated or semi-automated systems for task matching, dispatch, ranking, notifications, fraud detection, risk review and moderation support. Where legally required, users may request information, explanation or human review of significant decisions.
28. Admin Access
Authorised staff, contractors or service providers may access data only where necessary for support, verification, payments, disputes, safety, fraud prevention, legal compliance, technical maintenance and platform operations. Admin access may be logged and restricted.
We may access and review communications and task records where necessary to resolve disputes, investigate reports, prevent fraud or abuse, and enforce our Terms.
29. Data Breaches
If a personal data breach occurs, Kwickly will assess the risk and, where legally required, notify the supervisory authority and affected users.
30. Complaints
Users may contact Kwickly at support@kwickly.app or privacy@kwickly.app. Users may also complain to the Comissão Nacional de Proteção de Dados in Portugal.
31. Changes and Contact
Kwickly may update this Privacy Policy from time to time. Material changes may be notified through the app, website or email. For privacy questions, users may contact privacy@kwickly.app. For general support, users may contact support@kwickly.app.