Privacy Policy

1. About this policy

1.1 This Privacy Policy explains how Tasker collects, uses, shares and protects personal data when you use the Tasker mobile app, this website, our support channels, or any other service that links to this policy. "Personal data" means any information that identifies you or could be used to identify you.

1.2 It applies to customers, pros, people who join our waitlist, people who contact us, and anyone else whose personal data we handle in running Tasker. It does not apply to our own staff, who receive a separate notice.

1.3 We follow the Nigeria Data Protection Act 2023 (the "NDPA") and the General Application and Implementation Directive (GAID) 2025 issued by the Nigeria Data Protection Commission (the "NDPC"). This policy gives you the information the NDPA requires, including in section 27 of the Act.

1.4 Please read this policy together with our Terms of Service. Words such as "booking", "pro" and "held payment" have the same meaning as in the terms.

Back to top

2. Who we are

2.1 Tasker is run by [Company legal name], a company registered in Nigeria with number [RC number], whose registered office is at [Registered address] ("Tasker", "we", "us", "our").

2.2 We are the data controller for the personal data described in this policy. This means we decide why and how it is used, and we are responsible for it under the NDPA.

2.3 Some partner services (see Partner services in our Terms) are provided by other companies that are data controllers for the data they collect. Their own privacy notices apply, and we will show you a link to them before you use their service.

2.4 We have appointed a Data Protection Officer (DPO), [DPO name]. You can contact the DPO by emailing support@tasker.ng with the subject line "Data protection request". Our support team passes these messages to the DPO.

Back to top

3. Personal data we collect

3.1 The data we collect depends on how you use Tasker. We only collect what we need for the purposes in section 5.

Account data

• Phone number (used to sign in with a one-time SMS code).
• Name and profile photo, if you add one.
• Email address, if you choose to add one.
• Your role (customer, pro, or both) and your settings.

Identity and verification data (pros, and customers where needed)

• National Identification Number (NIN) and the details returned when we check it, such as your name, date of birth and ID photo.
• A selfie, which is compared with your ID photo to confirm it is you. This creates biometric data, which the NDPA treats as sensitive personal data (see section 6).
• Proof of skills or experience, such as photos of past work, certificates, licences and references.
• Bank account details for payouts.
• Customers may be asked for extra identity checks for some partner services, such as a wallet or crypto, or where we need to prevent fraud.

Booking data

• The services you search for, book, quote for or provide.
• Job descriptions, addresses, dates and times, prices, quotes, parts approved, start code and completion records.
• Cancellations, no-shows, redo requests and disputes.

Payment data

• Payment amounts, dates, method type (card, bank transfer, USSD), status and reference numbers.
• For pros: payout records and bank account details.
• Our payment providers collect your full card details. We do not see or store your full card number. We may receive the card type, the last four digits and the expiry date so that you can recognise the card.

Location data

• If you allow it, your device's approximate or precise location, to show pros near you and to estimate distance and arrival time.
• For pros: precise location while a job is active (from accepting or starting the trip until the job is finished), so the customer can see the pro on the way and so we can resolve disputes about arrival and no-shows.
• Job addresses you enter.

Chat and photos

• Messages, photos and videos you send in the app chat, and the time they were sent and read.

Call data

• For in-app voice and video calls: the time of the call, how long it lasted and who took part. We do not record the audio or video of calls.

Device and usage data

• Device type, operating system, app version, language and time zone.
• A device identifier and push notification token.
• IP address, crash reports and diagnostic logs.
• How you use the app, such as screens viewed and features used, so that we can fix problems and improve the app.

Reviews and ratings

• Ratings and reviews you give and receive after completed bookings.

Support and communications

• Messages you send to our support team, complaints, dispute evidence and our replies.
• Records of SMS, email and push notifications we send you, and your choices about marketing messages.

Website and waitlist

• If you join the waitlist on our website, your phone number, whether you want to book pros or work as a pro, and your area.
• Basic technical data that our web server records when you visit, such as IP address, browser type and the pages requested. See section 16.

Partner services

• If you use a partner service, the details needed to provide it, such as passenger names for flights, ticket details, bill account numbers, or the information needed to open a wallet or crypto account. Some of this data is collected by the partner directly.

Back to top

4. Where we get personal data from

4.1 Most of the data we hold comes from you, when you create an account, book, chat, verify your identity or contact us.

4.2 We also get personal data from:

• other users, for example when a customer writes a review of a pro, or a pro uploads a photo of the completed job;
• identity verification providers, which confirm NIN details and compare your selfie with your ID photo, using official records where available;
• payment providers such as Paystack, which tell us whether a payment succeeded and give us references for refunds and payouts;
• partners, when you use a partner service;
• your device, for example location and device data, if you allow it;
• fraud prevention and security tools that help us detect suspicious activity; and
• public authorities, courts or regulators, where they send us information or requests under the law.

Back to top

5. Why we use your data and our lawful bases

5.1 The NDPA allows us to process personal data only where we have a lawful basis under section 25 of the Act. The table below explains what we use data for and the basis we rely on.

5.2 When we rely on legitimate interests, we have considered whether our interests are outweighed by your rights and freedoms, and whether you would reasonably expect us to use your data in that way, as section 25(2) of the NDPA requires. You can ask us for more detail about this assessment.

5.3 If you do not give us data that we need under a contract (for example, your phone number or, for pros, your NIN), we may not be able to provide the service.

5.4 We will only use your data for a new purpose if it is compatible with the original purpose, or if we have a new lawful basis and have told you about it.

Back to top

6. Sensitive data: the verification selfie

6.1 To confirm that a pro is the person shown on their ID, we ask them to take a selfie in the app. The selfie is compared with the photo linked to their NIN or ID document, either by us or by a third-party verification provider. Facial images processed this way are biometric data, which the NDPA treats as sensitive personal data.

6.2 We process this data only with your explicit consent under section 30(1)(a) of the NDPA. We ask for this consent in the app, in clear words, before you take the selfie. Consent is not pre-ticked.

6.3 We use the selfie and match result only for identity verification, repeat checks, and preventing someone else from using your account or identity. We do not use it for marketing, and we do not use it to identify customers.

6.4 Selfies and match results are encrypted, stored separately from general account data, and can only be seen by a small number of authorised staff who need to review a failed or disputed check.

6.5 You can withdraw your consent at any time (see section 12). Because verification is required to work as a pro on Tasker, withdrawing consent will mean you can no longer keep the ID-checked badge or accept jobs, unless we can offer another way to verify you.

6.6 We do not ask customers or pros for other sensitive data, such as health, religion or political opinions. Please do not share such information in chat or reviews.

Back to top

7. Automated checks and decisions

7.1 We use some automated tools to keep Tasker safe. For example, our systems may:

• compare a pro's selfie with their ID photo;
• flag payments, bookings or accounts that look like fraud, such as many failed card attempts or unusual refund patterns;
• flag possible attempts to move payments off the app; and
• rank pros in search results using distance, availability, ratings and completed jobs.

7.2 Automated flags do not, on their own, lead to a decision that has a serious effect on you, such as closing your account, refusing verification or keeping your money. A member of staff reviews the case before such a decision is made. Refunds and manual money actions also need approval from two staff members.

7.3 Under section 37 of the NDPA, you have the right not to be subject to a decision based solely on automated processing that has legal or similarly significant effects on you. If we make a decision about you, you can ask for a person to review it, give your point of view and challenge the decision by contacting support@tasker.ng.

Back to top

8. Who we share personal data with

8.1 We do not sell your personal data. We share it only as described below, and only as much as each recipient needs.

Other users

• When you send a booking request, the pro sees your first name, profile photo if you have one, the job details and the general area of the job, so they can decide whether to accept. The pro sees the full address once the booking is confirmed.
• Customers see a pro's name, photo, ID-checked badge, ratings, reviews, number of completed jobs, quotes and, during an active job, the pro's live location.
• Both sides see the chat for their booking. Phone numbers are masked: calls go through the app, and neither side sees the other's phone number.
• Reviews you write are shown with your first name or display name.

Service providers who work for us

8.2 These companies process data on our behalf under written agreements that require them to protect it and use it only on our instructions, as section 29 of the NDPA requires:

• payment processors and banking partners, such as Paystack, to process payments, hold booking money, pay out pros and make refunds;
• identity verification providers, to check NIN details and match selfies;
• SMS providers, such as Termii, to send one-time codes and booking messages;
• Google's Firebase Cloud Messaging, to send push notifications to your device;
• our email service, to send messages from noreply@tasker.ng and other Tasker addresses;
• LiveKit infrastructure, to carry in-app voice and video calls (calls are not recorded);
• cloud hosting and storage providers, which run our servers and databases;
• mapping and location services, to show addresses, distances and routes; and
• providers of crash reporting, security and customer support tools.

Partners

8.3 When you choose to use a partner service, we share the data needed to provide it with that partner, for example with a licensed travel partner for flights, with a licensed wallet provider, or with Quidax for crypto. The partner handles that data under its own privacy notice.

Professional advisers

8.4 We may share data with our lawyers, accountants, auditors and insurers where needed for their advice or services. They have a duty to keep it confidential.

Authorities and legal requests

8.5 We may share data with the police, courts, regulators (such as the NDPC, the Federal Competition and Consumer Protection Commission or financial regulators), tax authorities or other public bodies when the law requires it, when we receive a valid legal request, or when it is needed to protect someone's life or safety. We check that requests are lawful and only share what is required.

Business changes

8.6 If Tasker is sold, merged or reorganised, or if we sell part of our business, personal data may be transferred to the new owner. The new owner will have to protect it in line with this policy and the NDPA, and we will tell you before your data becomes subject to a different privacy policy.

Back to top

9. Transfers outside Nigeria

9.1 Some of our servers and service providers are located outside Nigeria, for example in the European Union or South Africa. This means your personal data may be stored or processed in those countries.

9.2 The NDPA allows personal data to be transferred out of Nigeria only in the situations set out in sections 41 to 43 of the Act. We transfer data only where:

• the recipient country, or the recipient itself, is subject to a law, binding corporate rules, contractual clauses, a code of conduct or a certification that gives an adequate level of protection under the NDPA; or
• another condition in section 43 applies, for example where the transfer is needed to perform our contract with you.

9.3 We protect transferred data by:

• choosing providers in countries with strong data protection laws, such as EU countries under the EU General Data Protection Regulation and South Africa under its Protection of Personal Information Act;
• signing contracts with providers that require them to protect data to the standard the NDPA requires;
• encrypting data in transit and, where possible, at rest; and
• recording the basis for each transfer, as section 41(2) of the NDPA requires.

9.4 You can ask us for more information about the safeguards for a particular transfer by contacting our DPO.

Back to top

10. How long we keep personal data

10.1 We keep personal data only as long as we need it for the purposes in this policy. In general, we keep your data while your account is active. After that, we keep some data for longer to meet legal, tax and accounting duties, prevent fraud and deal with disputes or legal claims.

10.2 The periods below are Tasker's retention policy. They are the longest we normally keep each type of data. If a dispute, investigation or legal claim is open, we may keep the related data until it is finished.

10.3 When data is no longer needed, we delete it or anonymise it so that it can no longer be linked to you. Anonymised data may be kept and used for statistics, such as the number of bookings in an area.

Back to top

11. How we protect your data

11.1 We use technical and organisational measures that suit the risks, as section 39 of the NDPA requires. They include:

• encryption of data in transit (HTTPS and TLS) and encryption of sensitive data at rest, including identity and verification data;
• access controls, so that staff can only see the data they need for their role, with extra protection for verification data;
• two-person approval: refunds and manual money actions need approval from two separate staff members;
• audit logs that record staff access to sensitive data and every money action;
• one-time codes for sign-in, and checks on suspicious sign-ins;
• masking phone numbers between customers and pros;
• not storing full card numbers, which stay with our payment providers;
• written data protection agreements with our service providers;
• regular backups, security updates and testing; and
• staff training on data protection and confidentiality.

11.2 No system is completely secure. You can help by keeping your phone locked, not sharing one-time codes, and contacting us straight away if you think your account has been misused.

Back to top

12. Your rights

12.1 The NDPA gives you rights over your personal data, mainly in sections 34 to 38. You have the right to:

• Access: ask whether we hold your personal data and get a copy of it, together with information about how we use it.
• Rectification: ask us to correct data that is wrong, out of date, incomplete or misleading. You can update much of your profile yourself in the app.
• Erasure: ask us to delete your personal data. We will do so unless we need to keep it, for example to meet a legal duty or to deal with a dispute or legal claim. If we cannot delete some data, we will tell you why.
• Restriction: ask us to limit how we use your data while we deal with a request or an objection, or while a legal claim is decided.
• Portability: ask for the data you gave us in a structured, commonly used and machine-readable format, or ask us to send it to another organisation where technically possible.
• Objection: object to our use of your data based on legitimate interests. We will stop unless we have legitimate grounds that override your interests. You can object to direct marketing at any time, and we will stop.
• Withdraw consent: where we rely on consent (for example, for marketing, precise location or the biometric selfie check), you can withdraw it at any time. This does not affect what we did before you withdrew it.
• Automated decisions: ask for a person to review a decision made by automated means (see section 7).
• Complain: complain to the Nigeria Data Protection Commission (see below).

How to use your rights

12.2 You can use your rights in any of these ways:

• in the app, under Settings, where the feature is available (for example, to edit your profile, download your data or delete your account); or
• by emailing support@tasker.ng with the subject "Data protection request", from the email address on your account if you have one. Tell us what you are asking for.

12.3 To protect your data, we will check that the request comes from you, normally by sending a one-time code to the phone number on your account. If someone is making a request for you, we will ask for proof that they are allowed to act for you.

12.4 Using your rights is free. If a request is plainly unfounded or excessive, or would impose unreasonable costs on us (for example, many repeat copies of the same data), we may charge a reasonable fee or refuse, and we will explain why.

12.5 We will confirm we have received your request within 7 days. We aim to respond in full within 30 days. If a request is complex, we may need longer, and we will tell you why and when to expect a reply. If the law sets a shorter time, we will follow it.

Complaining to the NDPC

12.6 We would like the chance to fix any concern first, so please contact our DPO. You also have the right, under section 46 of the NDPA, to lodge a complaint with the Nigeria Data Protection Commission if you believe we have not handled your data in line with the law. You can find the NDPC's contact details on its website, ndpc.gov.ng.

Back to top

13. Your choices

Marketing

13.1 We will only send you marketing messages about Tasker (such as offers or news) if you agree. You can change your choice at any time in the app settings, by using the opt-out link in an email, or by replying STOP to a marketing SMS where this option is shown. Service messages, such as booking updates, codes and receipts, are part of the service and are not marketing.

Location

13.2 You can choose whether to give the app access to your device's location in your phone settings. Without it, you can still enter an address by hand. Pros must share location during active jobs to use live tracking, which is part of working on Tasker.

Notifications, camera and photos

13.3 You can turn push notifications off in your phone settings, but you may miss booking updates. The app asks for camera and photo access only when you choose to take or attach a photo, or for a pro's verification selfie.

Closing your account

13.4 You can close your account in the app settings or by emailing support. We will then delete or anonymise your data as described in section 10.

Back to top

14. Children

14.1 Tasker is only for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has created an account, please contact us and we will close the account and delete the data, except where the law requires us to keep it.

14.2 A customer may book a service that involves a child, such as lessons or grooming at home. In that case, the customer is responsible for the booking and for the child's supervision, and should only share information about the child that the pro needs for the job. Any processing of a child's personal data will respect the Child's Rights Act 2003, as the NDPA requires.

Back to top

15. If there is a data breach

15.1 If a personal data breach happens that is likely to put your rights and freedoms at risk, we will notify the NDPC within 72 hours of becoming aware of it, as section 40 of the NDPA requires.

15.2 If the breach is likely to put you at high risk, for example of fraud or identity theft, we will tell you directly and promptly, in plain language. We will explain what happened, what data was involved, what we are doing about it, and steps you can take to protect yourself. If we cannot reach everyone directly, we may make a public announcement instead.

15.3 We keep a record of all personal data breaches and the action we took.

Back to top

16. This website and cookies

16.1 This website (tasker.ng) is for information only. There is no account or login on it.

16.2 The website does not use tracking cookies, advertising cookies or analytics tools today. It does not use third-party fonts or scripts that track you; the fonts and icons are served from our own site. Because of this, we do not show a cookie banner.

16.3 Our web server keeps basic logs of visits, such as IP address, browser type, the pages requested and the time. We use these logs only to keep the website secure and working, and we keep them for up to 12 months. Our lawful basis is legitimate interests.

16.4 If we start using cookies or analytics in the future, we will update this policy and, where the law requires consent, ask for it before setting any non-essential cookies, in line with the NDPC's requirements for cookie notices.

16.5 If you join the waitlist, we use your phone number only to send you one SMS when the app is live, and we keep it as described in section 10.

Back to top

17. Links and partner services

17.1 The app and website may contain links to other websites or services, such as our partners, app stores or payment pages. When you leave Tasker, the other organisation's privacy notice applies. We are not responsible for how they handle your data, so please read their notices.

Back to top

18. Changes to this policy

18.1 We may update this policy from time to time, for example when we add new features or partner services, change service providers, or when the law changes. The date at the top shows when it was last updated.

18.2 If we make an important change, such as using your data for a new purpose or sharing it with a new type of recipient, we will tell you in the app, by SMS or by email before the change takes effect. Where the law requires your consent, we will ask for it.

Back to top

19. Contact us and our DPO

19.1 For questions about this policy or your personal data, or to use your rights, contact our Data Protection Officer, [DPO name], by email at support@tasker.ng with the subject "Data protection request".

19.2 For general questions, email hello@tasker.ng. For help with a booking, use the help section in the app or email support@tasker.ng.

19.3 You can also write to us at: [Company legal name], RC [RC number], [Registered address]. Please mark the letter "For the attention of the Data Protection Officer".

Back to top