Privacy Policy

1. About this policy

1.1 This Privacy Policy explains how Tasker collects, uses, shares and protects personal data when you use the Tasker mobile app, this website, our support channels, or any other service that links to this policy. "Personal data" means any information that identifies you or could be used to identify you.

1.2 It applies to customers, pros, people who use Aria or partner services in the app, people whose details a user gives us (such as passengers on a flight or the person receiving airtime), people who contact us, and visitors to this website. It does not apply to our own staff, who receive a separate notice.

1.3 We follow the Nigeria Data Protection Act 2023 (the "NDPA") and the General Application and Implementation Directive (GAID) 2025 issued by the Nigeria Data Protection Commission (the "NDPC"). This policy gives you the information the NDPA requires, including in section 27 of the Act.

1.4 Please read this policy together with our Terms of Service. Words such as "task", "offer", "hire", "job", "pro plan" and "Ready card" have the same meaning as in the terms.

Back to top

2. Who we are

2.1 Tasker is run by [Company legal name], a company registered in Nigeria with number [RC number], whose registered office is at [Registered address] ("Tasker", "we", "us", "our").

2.2 We are the data controller for the personal data described in this policy. This means we decide why and how it is used, and we are responsible for it under the NDPA.

2.3 Some partner services (see Partner services in our Terms) are provided by other companies that are data controllers for the data they collect, such as airlines and flight sellers, Quidax for crypto, and event organisers. Their own privacy notices apply, and we will show you where to find them before you use their service.

2.4 When a customer and a pro deal with each other through Tasker, each of them is responsible for how they use the other's personal data outside the app. Our terms require pros to use customers' details only for the job.

2.5 We have appointed a Data Protection Officer (DPO), [DPO name]. You can contact the DPO by emailing support@tasker.ng with the subject line "Data protection request". Our support team passes these messages to the DPO.

Back to top

3. Personal data we collect

3.1 The data we collect depends on how you use Tasker. We only collect what we need for the purposes in section 5.

Account data

• Phone number (used to sign in with a one-time SMS code).
• Name and profile photo, if you add one.
• Email address, if you choose to add one.
• Whether you use Tasker as a customer, a pro or both, your settings, and the devices signed in to your account.

Identity and verification data (pros, and wallet users where needed)

• National Identification Number (NIN) and the details returned when we check it, such as your name, date of birth and the photo held for that NIN.
• A selfie, which is compared with that photo to confirm it is you. This creates biometric data, which the NDPA treats as sensitive personal data (see section 6).
• Proof of your trade or experience, such as photos of past work, certificates, licences and references.
• For pros: the services you offer, the areas you cover, your base location and whether you are on duty.
• Customers may be asked for identity checks before using some wallet or partner features, or where we need to prevent fraud.

Tasks, offers and jobs

• Tasks you post: the description, photos, service, the place you pin on the map and the area name, the day and time window, the urgency and the budget range.
• Offers pros send: the price, when they can come and the message, and whether the offer was changed or withdrawn.
• Jobs: who hired whom, the agreed price, the job's timeline (hired, on the way, started, finished, done or cancelled), start code attempts, time changes, cancellation reasons and reports.
• Your exact address, which only the hired pro receives.

Location data

• The place you pin for a task, and the base location or area a pro sets for their work. We use these to tell pros about nearby tasks and to show distances.
• The app does not track your device's live location. When you view a map in the app, map pictures are loaded from OpenStreetMap's servers, which see your device's IP address.

Chat, voice notes and photos

• Messages, photos and voice notes you send in the app chat, and the time they were sent and read.
• Records of contact details that were hidden by masking before a hire, and the flags this creates for our staff.

Call data

• For in-app voice and video calls: the time of the call, how long it lasted, who took part and whether it was answered or missed. We do not record the audio or video of calls.

Aria

• What you type or say to Aria, her replies, the Ready cards she prepares, and whether you approved, changed or ignored them.
• If you speak to Aria, your phone's own speech service turns your voice into text, and we receive the text, not a recording.
• Profile details Aria uses to fill in cards, such as your name, phone number, area and saved passengers.

Plans, payments and the wallet

• For pros: your plan, offers used and left this month, plan periods, renewal reminders and payment receipts.
• Payments in the app (for plans, partner purchases, event tickets and adding money to the wallet): amounts, dates, method type (card, bank transfer, USSD), status and reference numbers. Paystack collects your full card details. We do not see or store your full card number. We may receive the card type and last four digits so you can recognise the card.
• Wallet activity: money in and out, transfers to and from other users, and withdrawals, including the bank account you withdraw to.
• We do not receive payment details for jobs, because customers pay pros directly. We only record the agreed price.

Partner services

• The details needed to provide a partner service you choose: passenger names, dates of birth, contact details and, for international flights, passport details; phone numbers for airtime and data; meter or smartcard numbers for bills; gift card details; event ticket details; and the information Quidax needs to open a crypto account. Some of this is collected by the partner directly.

Device and usage data

• Device type, operating system, app version, language and time zone.
• A push notification token and Firebase installation identifier, so that we can send notifications and incoming call alerts to your device.
• IP address, crash reports and diagnostic logs.
• How you use the app, such as screens viewed and features used, so that we can fix problems and improve the app.

Reviews and ratings

• Ratings, tags and reviews you give and receive after jobs.

Support and communications

• Messages you send to our support team, reports, complaints, evidence you add to a dispute and our replies.
• Records of SMS, email and push notifications we send you, and your choices about marketing messages.

Website

• Basic technical data that our web server records when you visit, such as IP address, browser type and the pages requested. See section 16.

Back to top

4. Where we get personal data from

4.1 Most of the data we hold comes from you, when you create an account, post a task, send an offer, chat, call, talk to Aria, verify your identity, pay for something or contact us.

4.2 We also get personal data from:

• other users, such as when a customer writes a review of a pro, a pro rates a customer, or a user adds a passenger to a flight;
• our identity verification provider (currently Dojah), which confirms NIN details and compares your selfie with the photo held for that NIN, using official records;
• Paystack, which tells us whether a payment succeeded and gives us references for receipts, refunds and withdrawals;
• partners, when you use a partner service, such as a ticket number or an electricity token;
• your device, such as the push token and app version;
• fraud prevention and security tools that help us detect suspicious activity; and
• public authorities, courts or regulators, where they send us information or requests under the law.

Back to top

5. Why we use your data and our lawful bases

5.1 The NDPA allows us to process personal data only where we have a lawful basis under section 25 of the Act. The table below explains what we use data for and the basis we rely on.

5.2 When we rely on legitimate interests, we have considered whether our interests are outweighed by your rights and freedoms, and whether you would reasonably expect us to use your data in that way, as section 25(2) of the NDPA requires. You can ask us for more detail about this assessment.

5.3 If you do not give us data that we need under a contract (such as your phone number or, for pros, your NIN), we may not be able to provide the service.

5.4 We will only use your data for a new purpose if it is compatible with the original purpose, or if we have a new lawful basis and have told you about it.

Back to top

6. Sensitive data: the verification selfie

6.1 To confirm that a pro is the person linked to their NIN, we ask them to take a selfie in the app. The selfie is sent to our identity verification provider, which compares it with the photo held for that NIN and returns a match result. Facial images processed this way are biometric data, which the NDPA treats as sensitive personal data.

6.2 We process this data only with your explicit consent under section 30(1)(a) of the NDPA. We ask for this consent in the app, in clear words, before you take the selfie. Consent is not pre-ticked.

6.3 We use the selfie and match result only for identity verification, repeat checks, and preventing someone else from using your account or identity. We do not use it for marketing, and we do not use facial recognition on customers or on photos in tasks or chat.

6.4 Selfies and match results are encrypted, kept apart from general account data, and can only be seen by a small number of authorised staff who need to review a verification case.

6.5 You can withdraw your consent at any time (see section 12). Because verification is required to send offers on Tasker, withdrawing consent will mean you can no longer keep the ID-verified badge or send offers, unless we can offer another way to verify you.

6.6 We do not ask customers or pros for other sensitive data, such as health, religion or political opinions. Please do not share such information in tasks, chat, reviews or with Aria.

Back to top

7. Automated checks, matching and Aria

7.1 We use automated tools to run Tasker and keep it safe. Our systems:

• compare a pro's selfie with the photo held for their NIN, through our verification provider;
• choose which pros to tell about a new task, based on the service, the distance from the place you pinned, and whether the pro is verified and on duty;
• order offers by Best match, using rating, number of reviews, distance, reply times and a labelled boost for paid plans;
• scan tasks, offers and pre-hire chat for phone numbers, email addresses and links, hide them and flag the message for staff;
• count each pro's offers against their plan allowance; and
• flag accounts, payments or wallet activity that look like fraud or abuse.

7.2 Automated flags do not, on their own, lead to a decision that has a serious effect on you, such as closing your account, refusing verification or pausing your wallet. A member of staff reviews the case before such a decision is made, and every verification is approved by staff.

7.3 Aria uses an artificial intelligence model from Anthropic, when that feature is switched on, to understand what you ask and prepare Ready cards. When it is off, a simpler built-in helper does this. Aria does not make decisions about you: she only prepares cards, and nothing happens until you approve. Anthropic processes your messages for us under a contract that does not allow it to use them to train its models.

7.4 Under section 37 of the NDPA, you have the right not to be subject to a decision based solely on automated processing that has legal or similarly significant effects on you. If we make a decision about you, you can ask for a person to review it, give your point of view and challenge the decision by contacting support@tasker.ng.

Back to top

8. Who we share personal data with

8.1 We do not sell your personal data. We share it only as described below, and only as much as each recipient needs.

Other users

• When you post a task, verified pros who offer that service nearby see your first name, profile photo if you have one, rating, the task description and photos, the area name (not your exact address), the day and time, the urgency and the budget range.
• Pros who send you an offer can chat and call with you in the app. Phone numbers, emails and links are hidden before you hire, and calls never show either side's number.
• When you hire a pro, that pro sees your exact address. Pros you did not hire never see it.
• Customers see a pro's name, photo, ID-verified badge, rating, reviews, number of jobs done on Tasker, distance, reply time, plan label (Featured) and their offers.
• Reviews you write are shown with your first name or display name. If you send money from your wallet to another user, they see your name.

Service providers who work for us

8.2 These companies process data on our behalf under written agreements that require them to protect it and use it only on our instructions, as section 29 of the NDPA requires. At the date of this policy they are:

• Paystack, to process payments for pro plans, partner purchases, event tickets and the wallet, and to send withdrawals and refunds;
• Dojah, to check NIN details and match pros' selfies;
• Termii, to send one-time codes and service SMS;
• Google's Firebase Cloud Messaging, to send push notifications and incoming call alerts to your device;
• Anthropic, to run Aria's artificial intelligence model when that feature is switched on;
• Contabo, which provides the servers our app, database, chat and call software run on;
• our email service, to send messages from noreply@tasker.ng and other Tasker addresses;
• mapping and address lookup services, to show maps and turn a pin into an area name; and
• providers of security, backup and support tools.

8.3 In-app calls and live chat run on LiveKit software on our own servers, not on a third party's call service.

Partners

8.4 When you choose to use a partner service, we share the data needed to provide it with that partner: Wakanow or Duffel, and the airline, for flights; VTpass, and the network, electricity company or TV provider, for airtime, data and bills; Reloadly for gift cards; Quidax for crypto; and the organiser for event tickets. The partner handles that data under its own privacy notice.

Professional advisers

8.5 We may share data with our lawyers, accountants, auditors and insurers where needed for their advice or services. They have a duty to keep it confidential.

Authorities and legal requests

8.6 We may share data with the police, courts, regulators (such as the NDPC, the Federal Competition and Consumer Protection Commission or financial regulators), tax authorities or other public bodies when the law requires it, when we receive a valid legal request, or when it is needed to protect someone's life or safety. We check that requests are lawful and only share what is required.

The other side of a job

8.7 If a customer and a pro have a dispute about a job and one of them asks for a copy of the job record (the task, the offer, the agreed price, the job's timeline and their chat), we may give it to them, so that they can settle the matter or take it further. We will not include data about anyone else.

Business changes

8.8 If Tasker is sold, merged or reorganised, or if we sell part of our business, personal data may be transferred to the new owner. The new owner will have to protect it in line with this policy and the NDPA, and we will tell you before your data becomes subject to a different privacy policy.

Back to top

9. Transfers outside Nigeria

9.1 Our main servers are in the European Union. Some of our providers and partners process data in other countries, including the United States (Anthropic and Google's Firebase), the United Kingdom (Duffel and OpenStreetMap's map servers) and other countries where airlines and partners operate. This means your personal data may be stored or processed outside Nigeria.

9.2 The NDPA allows personal data to be transferred out of Nigeria only in the situations set out in sections 41 to 43 of the Act. We transfer data only where:

• the recipient country, or the recipient itself, is subject to a law, binding corporate rules, contractual clauses, a code of conduct or a certification that gives an adequate level of protection under the NDPA; or
• another condition in section 43 applies, such as where the transfer is needed to perform our contract with you (for instance, sending your passenger details to the airline that will fly you).

9.3 We protect transferred data by:

• choosing providers in countries with strong data protection laws, such as EU countries under the EU General Data Protection Regulation;
• signing contracts with providers that require them to protect data to the standard the NDPA requires;
• encrypting data in transit and, where possible, at rest; and
• recording the basis for each transfer, as section 41(2) of the NDPA requires.

9.4 You can ask us for more information about the safeguards for a particular transfer by contacting our DPO.

Back to top

10. How long we keep personal data

10.1 We keep personal data only as long as we need it for the purposes in this policy. In general, we keep your data while your account is open. After that, we keep some data for longer to meet legal, tax and accounting duties, prevent fraud and deal with disputes or legal claims.

10.2 The periods below are Tasker's retention policy. They are the longest we normally keep each type of data. If a dispute, investigation or legal claim is open, we may keep the related data until it is finished.

10.3 When data is no longer needed, we delete it or anonymise it so that it can no longer be linked to you. Anonymised data may be kept and used for statistics, such as the number of tasks posted in an area.

Back to top

11. How we protect your data

11.1 We use technical and organisational measures that suit the risks, as section 39 of the NDPA requires. They include:

• encryption of data in transit (HTTPS and TLS) and encryption of sensitive data at rest, including identity and verification data and the keys we use to connect to partners;
• hiding your exact address from every pro except the one you hire, and hiding contact details in tasks, offers and chat before a hire;
• making a fresh copy of every photo you upload and removing hidden details such as the camera's location, and showing photos only through private links that expire after 15 minutes;
• in-app calls that never reveal phone numbers and are not recorded;
• access controls, so that staff can only see the data they need for their role, with extra checks for sensitive actions and extra protection for verification data;
• audit logs that record staff access to sensitive data and every money action;
• two-person approval for manual money actions, such as wallet withdrawals our staff need to handle;
• one-time codes for sign-in, limits on code attempts, and a list of signed-in devices you can sign out;
• not storing full card numbers, which stay with Paystack;
• written data protection agreements with our service providers;
• regular backups, security updates and testing; and
• staff training on data protection and confidentiality.

11.2 No system is completely secure. You can help by keeping your phone locked, not sharing one-time codes, not putting private details in task photos, and contacting us straight away if you think your account has been misused.

Back to top

12. Your rights

12.1 The NDPA gives you rights over your personal data, mainly in sections 34 to 38. You have the right to:

• Access: ask whether we hold your personal data and get a copy of it, together with information about how we use it.
• Rectification: ask us to correct data that is wrong, out of date, incomplete or misleading. You can update much of your profile yourself in the app.
• Erasure: ask us to delete your personal data. We will do so unless we need to keep it, such as to meet a legal duty or to deal with a dispute or legal claim. If we cannot delete some data, we will tell you why.
• Restriction: ask us to limit how we use your data while we deal with a request or an objection, or while a legal claim is decided.
• Portability: ask for the data you gave us in a structured, commonly used and machine-readable format, or ask us to send it to another organisation where technically possible.
• Objection: object to our use of your data based on legitimate interests. We will stop unless we have legitimate grounds that override your interests. You can object to direct marketing at any time, and we will stop.
• Withdraw consent: where we rely on consent (such as for marketing or the biometric selfie check), you can withdraw it at any time. This does not affect what we did before you withdrew it.
• Automated decisions: ask for a person to review a decision made by automated means (see section 7).
• Complain: complain to the Nigeria Data Protection Commission (see below).

How to use your rights

12.2 You can use your rights in any of these ways:

• in the app, under your profile and settings, where the feature is available (such as to edit your profile, sign out devices or delete your account); or
• by emailing support@tasker.ng with the subject "Data protection request", from the email address on your account if you have one. Tell us what you are asking for.

12.3 To protect your data, we will check that the request comes from you, normally by sending a one-time code to the phone number on your account. If someone is making a request for you, we will ask for proof that they are allowed to act for you.

12.4 Using your rights is free. If a request is plainly unfounded or excessive, or would impose unreasonable costs on us (such as many repeat copies of the same data), we may charge a reasonable fee or refuse, and we will explain why.

12.5 We will confirm we have received your request within 7 days. We aim to respond in full within 30 days. If a request is complex, we may need longer, and we will tell you why and when to expect a reply. If the law sets a shorter time, we will follow it.

Complaining to the NDPC

12.6 We would like the chance to fix any concern first, so please contact our DPO. You also have the right, under section 46 of the NDPA, to lodge a complaint with the Nigeria Data Protection Commission if you believe we have not handled your data in line with the law. You can find the NDPC's contact details on its website, ndpc.gov.ng.

Back to top

13. Your choices

Marketing

13.1 We will only send you marketing messages about Tasker (such as news or promotions) if you agree. You can change your choice at any time in the app settings, by using the opt-out link in an email, or by replying STOP to a marketing SMS where this option is shown. Service messages, such as codes, new offers, messages, job updates, plan reminders and receipts, are part of the service and are not marketing.

What you put in a task

13.2 You decide what goes into a task. Pros you have not hired can see the description and photos, so leave out faces, documents, house numbers and anything else private. You can edit or close a task at any time before you hire.

Notifications, microphone, camera and photos

13.3 You can turn push notifications off in your phone settings, but you may miss offers, messages, calls and job updates. The app asks for camera, photo and microphone access only when you choose to take or attach a photo, record a voice note, make or answer a call, speak to Aria, or take a pro's verification selfie.

Closing your account

13.4 You can close your account in the app or by emailing support. We will then delete or anonymise your data as described in section 10.

Back to top

14. Children

14.1 Tasker is only for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has created an account, please contact us and we will close the account and delete the data, except where the law requires us to keep it.

14.2 A customer may post a task that involves a child, such as lessons or grooming at home, or add a child as a passenger on a flight. In that case, the customer is responsible for the task or booking and for the child's supervision, and should only share information about the child that is needed. Any processing of a child's personal data will respect section 31 of the NDPA and the Child's Rights Act 2003.

Back to top

15. If there is a data breach

15.1 If a personal data breach happens that is likely to put your rights and freedoms at risk, we will notify the NDPC within 72 hours of becoming aware of it, as section 40 of the NDPA requires.

15.2 If the breach is likely to put you at high risk, such as of fraud or identity theft, we will tell you directly and promptly, in plain language. We will explain what happened, what data was involved, what we are doing about it, and steps you can take to protect yourself. If we cannot reach everyone directly, we may make a public announcement instead.

15.3 We keep a record of all personal data breaches and the action we took.

Back to top

16. This website and cookies

16.1 This website (tasker.ng) is for information only. There is no account, login or form on it.

16.2 The website does not use tracking cookies, advertising cookies or analytics tools. It does not use third-party fonts or scripts that track you; the fonts and icons are served from our own site. Because of this, we do not show a cookie banner.

16.3 Our web server keeps basic logs of visits, such as IP address, browser type, the pages requested and the time. We use these logs only to keep the website secure and working, and we keep them for up to 12 months. Our lawful basis is legitimate interests.

16.4 If we start using cookies or analytics in the future, we will update this policy and, where the law requires consent, ask for it before setting any non-essential cookies, in line with the NDPC's requirements for cookie notices.

Back to top

17. Links and partner services

17.1 The app and website may contain links to other websites or services, such as our partners, app stores or payment pages. When you leave Tasker, the other organisation's privacy notice applies. We are not responsible for how they handle your data, so please read their notices.

Back to top

18. How we stay accountable

18.1 Before we start processing that is likely to put people's rights at high risk, such as the biometric selfie check or a new use of artificial intelligence, we carry out a data protection impact assessment, as section 28 of the NDPA requires.

18.2 We keep records of our processing, our lawful bases, our service providers and our transfers abroad. Where the NDPA and the GAID 2025 require it, we register with the NDPC and file compliance audit returns, and our DPO reports on our data protection programme to the company's management.

18.3 We review this policy and our retention periods at least once a year.

Back to top

19. Changes to this policy

19.1 We may update this policy from time to time, such as when we add new features or partner services, change service providers, or when the law changes. The date at the top shows when it was last updated.

19.2 If we make an important change, such as using your data for a new purpose or sharing it with a new type of recipient, we will tell you in the app, by SMS or by email before the change takes effect. Where the law requires your consent, we will ask for it.

Back to top

20. Contact us and our DPO

20.1 For questions about this policy or your personal data, or to use your rights, contact our Data Protection Officer, [DPO name], by email at support@tasker.ng with the subject "Data protection request".

20.2 For general questions, email hello@tasker.ng. For help with a task or a job, use the help section in the app or email support@tasker.ng.

20.3 You can also write to us at: [Company legal name], RC [RC number], [Registered address]. Please mark the letter "For the attention of the Data Protection Officer".

Back to top