Privacy Policy

The short version

We only collect what we genuinely need to connect people who need work done with people who can do it, to verify identity, to keep payments safe and to keep the platform free of fraud.

We never publish your NIN, your password, your emergency contact or your exact home address. Other users see your name, your area, your skills and whether your identity is verified — nothing more unless you choose to share it.

What we collect

We group the information we hold into five buckets.

• Account information — name, email address, phone number, password (stored only as a one-way hash) and profile photo.
• Identity verification — confirmation that your NIN check succeeded, the last 4 digits, a one-way hash and the reference from our verification partner. We do not store your full NIN.
• Task information — tasks you post or accept, offers, prices, the general area of the work and completion status.
• Communications — messages between you and the people you work with, support tickets and safety reports.
• Technical information — device type, browser, IP address, sign-in times and security events, used to protect your account.

Why we collect it and our legal basis

Under the Nigeria Data Protection Act 2023 we must have a lawful basis for every use of your information.

• To provide the service and perform our contract with you — account, tasks, messaging, payments.
• To meet legal obligations — identity verification, fraud prevention, tax and record-keeping.
• For our legitimate interests — platform safety, abuse detection, service improvement, in a way that does not override your rights.
• With your consent — marketing messages, optional location precision and any optional profile detail. You can withdraw consent at any time in Settings → Privacy & Security.

How your information is used

To create and secure your account, show relevant tasks near you, let customers and taskers reach each other, process payments held in escrow, verify identity, investigate reports and comply with the law.

We do not sell your personal information. We do not use your private messages for advertising.

How your information is stored and protected

Information is stored in managed, access-controlled databases. Traffic is encrypted in transit with HTTPS/TLS, and data is encrypted at rest by our infrastructure provider.

• Row-level security so a record can only be read by the person it belongs to.
• Role-based access — ordinary staff cannot read your private data; administrative access is limited, logged and reviewed.
• Passwords are hashed and salted, never stored or transmitted in readable form.
• Sensitive identity data is minimised: hashes and the last 4 digits only.
• An append-only audit log of sensitive actions, sign-ins and permission changes.

Who we share it with

Only where necessary, and only the minimum needed:

• The other party on a task — your name, photo, area, rating, verified badge and the messages you send them.
• Identity verification and payment partners, to complete a check or a transfer.
• Infrastructure and communications providers acting on our instructions under contract.
• Law enforcement, regulators or courts where we are legally required, or where it is necessary to prevent serious harm or fraud.

Cross-border transfers

Some of our providers process information outside Nigeria. Where that happens we rely on the transfer conditions in the NDPA 2023 and require appropriate contractual safeguards.

How long we keep it

Account and profile data: while your account is open, then up to 90 days after deletion.

Task, payment and dispute records: up to 6 years, because we are required to keep financial and dispute records.

Identity verification records: up to 6 years after account closure for fraud prevention and legal defence.

Security logs: 12 months. Support tickets: 24 months.

Your rights

Under the NDPA 2023 you can ask us to do the following, free of charge, and we will respond within 30 days:

• Access — get a copy of the personal information we hold about you.
• Correction — fix anything inaccurate or incomplete.
• Deletion — erase your information where we are not required to keep it.
• Objection and restriction — ask us to stop or pause a particular use.
• Portability — receive your data in a machine-readable format.
• Withdraw consent — where consent is the basis we rely on, withdrawing is as easy as giving it.
• Complain — to us first, and to the Nigeria Data Protection Commission if you are not satisfied.

How to exercise your rights

Open Settings → Privacy & Security → Data & privacy controls. You can download your data, request correction, or request deletion from there.

You can also email privacy@taska.ng and address it to the Data Protection Officer, Taska.

Security incidents and breaches

We run continuous monitoring and keep an incident response plan. If a breach happens that is likely to cause risk to you, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it and tell affected users without undue delay, explaining what happened, what we are doing and what you should do.

If you think your account has been accessed by someone else, change your password, sign out of all devices in Settings → Account & login, and report it immediately.

Children

Taska is for people aged 18 and over. We do not knowingly collect information from children.

Changes to this policy

Every version has a version number and an effective date. When we make an important change we will tell you in the app and by email before it takes effect, and ask you to accept it again where the law requires.

Contact us

Data Protection Officer, Taska — privacy@taska.ng, Yaba, Lagos, Nigeria. You may also complain directly to the Nigeria Data Protection Commission (NDPC).

More from Taska