YOHPAL

INTRODUCTION

YohPal International Limited ("YohPal," "we," "us," or "our") values your trust and is dedicated to protecting your personal information. This Privacy Policy explains, in detail, how we collect, use, store, share, and safeguard your information whenever you use the YohPal mobile application, website, and related services.

We believe in transparency and user empowerment. This policy has therefore been written in clear, explanatory language to ensure that you fully understand:

• What information we collect from you
• Why we collect it
• How we use and protect it
• When and why it may be shared
• What rights you have regarding your data

By accessing or using YohPal, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal information as described herein.

YohPal is a Kenyan-owned platform supporting Kenya's Vision 2030 and the broader digital transformation agenda. All data processing activities comply with the Kenya Data Protection Act, 2019, and align with recognized international privacy standards.

1. INFORMATION WE COLLECT

We collect several categories of information to provide you with reliable, personalized, and secure services. The type and amount of information we collect depends on how you use YohPal.

1.1 Personal Information

When you register for and use YohPal, you may provide us with the following details:

• Account Information: Your full name, chosen username, email address, phone number, date of birth, gender, and profile photos. You may also share biographical details to enrich your profile.
• Verification Information: For enhanced security and to comply with regulatory requirements we may collect government-issued identification documents.
• Professional Information (Hustle Users): If you use YohPal to offer services or seek work, we may collect details such as your skills, qualifications, experience, portfolio items, work samples, pricing preferences, and professional reviews or ratings.

This information allows us to establish your account, connect you with opportunities, and ensure trust and authenticity within the YohPal community.

1.2 Location Information

To enable location-based features, we may collect:

• Real-time GPS data to match freelancers with nearby clients and support on-demand service delivery.
• Approximate location to recommend relevant opportunities, content, or services.
• Address details for purposes such as delivery, verification, and identity confirmation.

Your control over location data:

• You can disable location services through your device settings at any time.
• Location information is cached for only 5 minutes to improve app responsiveness.
• Historical location data is retained for a maximum of 90 days, after which it is permanently deleted.

1.3 Content and Communications

As an interactive platform, YohPal processes:

• User-generated content: Photos, videos, posts, reviews, and ratings you share publicly or privately.
• Communications: Comments, in-app chats, and messages.

Content moderation:

• Automated systems screen content to detect and prevent harmful or illegal activity.
• Content flagged as potentially violating our policies may be reviewed by trained human moderators.

1.4 Technical Information

To maintain a smooth and secure user experience, we collect:

• Device details: Device type, operating system, hardware model, and app version.
• Network and usage data: IP address, network identifiers, interaction logs, and feature usage patterns.
• Performance data: Crash reports, error logs, and performance diagnostics.

Push Notifications:

• To deliver timely updates, we collect Firebase Cloud Messaging (FCM) tokens associated with your device.
• You may control notification preferences within the app settings.

2. HOW WE USE YOUR INFORMATION

We use your information for clearly defined purposes. The goal is always to enhance your user experience while keeping your data safe.

2.1 Core Platform Services

• Account Management: To create, verify, and maintain your YohPal account.
• Service Delivery: To connect freelancers and clients, facilitate bookings, and manage workflows.
• Customer Support: To respond to your inquiries, resolve complaints, and improve support quality.

2.2 Platform Safety and Security

• Identity Verification: To confirm user identities, reduce fraud, and build trust.
• Content Moderation: To enforce community standards and remove harmful content.
• Fraud Prevention: To detect suspicious activities and prevent misuse of our services.
• Security Monitoring: To safeguard accounts against unauthorized access and threats.

2.3 Personalization and Improvement

• Recommendations: To deliver personalized content, relevant job listings, and service matches.
• Analytics: To analyze usage patterns, track feature performance, and guide platform improvements.
• Optimization: To ensure faster app performance and more reliable services.

2.4 Communications

• Operational Updates: Informing you about service changes, system updates, or new features.
• Promotional Messages: Sharing marketing offers or newsletters, but only with your prior consent.
• Customer Support: Providing responses to your queries and follow-ups on service requests.

3. INFORMATION SHARING AND DISCLOSURE

3.1 Our Commitment

We want to be clear: YohPal does not sell, rent, or trade your personal data to third parties for commercial gain.

3.2 When We Share Information

• With Service Providers: Such as Google Cloud (hosting), analytics providers, and customer support tools. These partners are contractually required to protect your data.
• For Legal Purposes: To comply with Kenyan law, court orders, regulatory authorities (CAK, KRA, DPC), or law enforcement investigations.
• During Business Transactions: In the event of a merger, acquisition, or sale, your data may be shared with prospective buyers under strict confidentiality agreements.
• For Public Content: Information you choose to share publicly, such as your profile, posts, reviews, or ratings, will be visible to other users.

3.3 Government Cooperation

As a Kenyan company, YohPal collaborates with national initiatives that promote digital transformation. To support public policy and research, we may share aggregated and anonymized data that cannot identify individual users.

4. YOUR PRIVACY RIGHTS

At YohPal, we strongly believe that you should remain in control of your personal data. Under the Kenya Data Protection Act, 2019, and aligned with international privacy principles, you are entitled to the following rights:

4.1 Rights Under Kenyan Law

• Right to Access: You may request a copy of the personal information we hold about you, along with details on how it is processed.
• Right to Correction: You may request corrections or updates if your details are inaccurate, incomplete, or outdated.
• Right to Deletion: You may request permanent deletion of your account and associated data ("right to be forgotten"), except where retention is required by law.
• Right to Restrict Processing: You may request that we limit or suspend processing of your data for specific purposes, such as marketing.
• Right to Data Portability: You may ask us to provide your personal data in a structured, commonly used, and machine-readable format for transfer to another service.

4.2 How to Exercise Your Rights

• In-App Controls: Adjust privacy and notification settings, update or correct account details, or delete your account.
• Direct Requests: Email support@yohpal.com, use the in-app Help Desk, or call +254 758 873 938.
• Response Timelines: We typically respond within 30 days. Complex cases may require more time, but you will be kept informed.

5. DATA SECURITY AND PROTECTION

Protecting your information is one of our highest priorities. We use a combination of technical, organizational, and operational safeguards to ensure your data remains safe.

5.1 Technical Safeguards

• Encryption: All data transmitted between your device and our servers is protected with TLS 1.3, and stored data is encrypted with AES-256. Sensitive communications use end-to-end encryption.
• Access Controls: Only authorized staff members with the proper credentials can access data. Access is protected with multi-factor authentication and monitored continuously.
• Infrastructure Security: YohPal uses Google Cloud Platform, certified under ISO 27001 and SOC 2 standards. Our systems are monitored 24/7 for suspicious activity.

5.2 Organizational Safeguards

• Staff Training: All employees undergo privacy and security training, and staff handling sensitive data sign confidentiality agreements.
• Background Checks: Personnel with access to sensitive systems are vetted to minimize risks.
• Incident Response: In case of a security breach, our systems automatically detect unusual activity. Our team follows a documented incident response plan, including notifying affected users promptly.

6. DATA RETENTION AND DELETION

We retain your personal data only for as long as it is necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law.

6.1 Retention Periods

• Active Accounts: Personal and content data remain stored while your account is active. Technical data is anonymized after 12 months.
• Deleted Accounts: Most personal data is deleted within 7 days of account deletion; except data required for legal, tax, or regulatory compliance.
• Specific Retention Rules:
  • Location data: 90 days
  • Support tickets: 3 years, for service improvement

6.2 Automatic Data Deletion

• Inactive accounts are flagged after 3 years.
• Temporary files (logs, caches) are regularly purged.
• Anonymous, non-identifiable analytics may be retained indefinitely for research and service improvement.

7. INTERNATIONAL DATA TRANSFERS

YohPal relies on Google Cloud Platform for hosting and data storage, which may involve servers located outside Kenya.

7.1 Safeguards in Place

• Legal Compliance: All transfers comply with the Kenya Data Protection Act, 2019, and use Standard Contractual Clauses to guarantee protection.
• Security Measures: All data transfers are encrypted and monitored for security.
• User Rights: Regardless of where your data is stored, your Kenyan privacy rights remain protected. You may also request, where technically possible, that your data be stored locally.

8. CHILDREN'S PRIVACY

8.1 Age Restrictions

• YohPal is designed for users aged 18 and above.
• We do not knowingly collect information from persons under 18.

8.2 Protection Measures

• Suspected underage accounts are automatically suspended.
• Users between 18–21 may undergo additional verification.
• If an account is confirmed to belong to someone under 18, the account and its data are permanently deleted.

9. COOKIES AND TRACKING TECHNOLOGIES

Cookies and similar technologies help us provide a smoother, more personalized experience.

9.1 Types of Cookies

• Essential Cookies: Ensure login sessions, account security, and platform stability.
• Analytics Cookies: Collect data to help us understand how users interact with the app and identify areas for improvement.
• Preference Cookies: Store user choices, such as language, theme, or location settings.

9.2 Your Control

You can manage or disable cookies in your device or app settings. However, disabling essential cookies may affect app functionality.

10. THIRD-PARTY INTEGRATIONS

YohPal integrates with several third-party services to provide a full-featured experience.

10.1 Examples

• Google Services: Firebase Authentication, Cloud Firestore, Firebase Cloud Messaging.
• OTP Services: OTP messages are provided through Advanta Africa LTD for user verification.
• Other Tools: Social media sharing, map integrations, and analytics services.

10.2 Third-Party Policies

Each partner has its own privacy policy. We only work with third parties that commit to protecting your privacy, and links to their policies are available within the app.

11. MARKETING AND COMMUNICATIONS

11.1 Types of Communications

• Transactional Messages: Security alerts, receipts, job updates.
• Marketing Communications: Newsletters, promotions, and recommendations (only if you opt in).

11.2 Your Choices

• You can opt in or out of marketing emails, push notifications, or SMS campaigns at any time.
• Critical system messages, such as account or security alerts, will always be sent.

12. DATA BREACH NOTIFICATION

If your information is compromised in a data breach, YohPal is committed to transparency and quick action.

• Affected users will be notified within 72 hours of discovery.
• We will disclose the nature of the breach, what data was affected, possible risks, and what steps you should take.
• You will also be provided with contact details for further assistance.

13. UPDATES TO THIS POLICY

• YohPal may update this policy to reflect legal requirements, new features, or user feedback.
• For significant changes, you will receive at least 30 days' advance notice via email or in-app notification.
• The updated policy will always be available on our website and app.
• Continued use of YohPal after updates will constitute acceptance.

14. CONTACT INFORMATION

If you have any questions, concerns, or requests regarding your privacy, you can reach us through the following channels:

• Email: support@yohpal.com
• Phone: +254 758 873 938
• In-App Help Desk: Submit a privacy-related request

Regulatory Complaints: If you believe your rights have been violated, you can contact and submit the complaint at our help desk and we will respond within 30 days.