Privacy Policy

KitaWork is a community employment platform operated by [ORGANIZATION NAME] together with the Public Employment Service Office (PESO) of the municipalities it serves: Carrascal, Cantilan, Madrid, Carmen, and Lanuza.

For the purposes of RA 10173, [ORGANIZATION NAME] acts as the personal information controller for the data described below. Questions about this policy go to [CONTACT EMAIL].

We only collect what the service needs. Nothing here is sold, and none of it is used for advertising.

Full name

Identifies you to the PESO admin reviewing your account, and to the employers or job seekers you are matched with.

Email address

Signing in, verifying that the address is real during registration, and password resets.

Mobile number

Lets an employer or hirer contact you about a job once you are connected. Shown on your profile.

City, municipality, and address

Routes your account to the PESO office that reviews it, and matches you with work near you.

Government ID or business permit

Verification only. A PESO admin checks it to confirm you are a real person or a registered business before your account is activated.

School and course (job seekers who are students)

Shown to employers considering your application, and used to describe you on your profile.

Class schedule (job seekers who are students)

Filters out jobs that conflict with your classes and contributes to your match score.

Skills and interests

Calculates how well you match a job post. Visible to an employer when you apply or are recommended.

Profile photo or company logo

Shown on your profile, your job posts, and in conversations, so people can recognise you.

Job posts and applications

Running the service: publishing work, applying for it, and tracking the outcome.

Messages you send in the app

Delivering your message to the person you are talking to about a job.

Work history

Shows employers what work you have completed through KitaWork.

Sign-in activity (failed attempts, lockouts, session timing)

Protecting your account from password guessing and from being left open on a shared computer.

You give this information when you register, and when you later edit your profile, post a job, apply for one, or send a message.

We process your data on the basis of the consent you give when you register, which you record by ticking the consent box before submitting your account for verification. We also process it where it is necessary to provide the service you asked for, and, in the case of PESO review, to fulfil a function of a public authority.

You may withdraw your consent at any time by deleting your account (see section 7). Withdrawing consent means we can no longer provide the service to you.

• PESO admins in your municipality. They review your registration, including your government ID or business permit, and they review changes you make to information that other users can see. An admin assigned to another municipality cannot see your account.
• Employers and individual hirers. When you apply to a job or are recommended for one, that employer sees your name, photo, city, course and school if you added them, skills, interests, availability, bio, and the work you have completed through KitaWork.
• Job seekers. They see published job posts and the public part of the employer profile behind them: business or hirer name, photo or logo, industry, city, About text, website, and contact details.
• The person you are messaging. Messages are visible to you and to the recipient.
• Our hosting and email providers. The platform runs on Supabase for its database, authentication, and file storage, and sends email through its mail provider. They process data on our instructions in order to run the service.

Your government ID and business permit are never shown to other job seekers or employers. They are held in private storage that no browser can read directly; an admin sees one only through a link that expires after a few minutes.

• While your account is active, we keep your data so the service works.
• If your registration is rejected, your account and the documents you uploaded are deleted 30 days after the decision.
• If you delete your account, your profile, documents, photos, applications, job posts, saved jobs, notifications, and messages are removed. Records of work you completed for an employer remain in that employer's own history, because they are that employer's record of work performed, and they no longer link back to your account.
• If you deactivate rather than delete, your data is kept so you can reactivate later, and your job posts are closed in the meantime.

• Passwords are stored hashed by our authentication provider. Nobody at KitaWork can read them.
• Repeated failed sign-in attempts lock an account for a period that grows with each repeat offence.
• Two-factor authentication is available to every account and recommended for all of them.
• You are signed out automatically after a period of inactivity.
• Government IDs and business permits sit in private storage reachable only by the server, and only an admin in your own municipality can request a short-lived link to view one.
• Database access rules restrict every account to its own rows, and changes to information other users can see are applied only after an admin approves them.
• All traffic between your device and KitaWork is encrypted in transit.

As a data subject under RA 10173 you have the right to:

• Be informed that your personal data is being collected and processed, and why. This policy is how we tell you.
• Access your data. Your profile page shows what we hold about you, and the Data Privacy panel lists the categories we store.
• Rectification — to have inaccurate data corrected. You can edit most of your profile directly, and request a correction to anything fixed at registration.
• Erasure or blocking — to have your data removed or withheld where it is incomplete, outdated, false, or unlawfully obtained. Deleting your account does this.
• Object to the processing of your data, including by withdrawing the consent you gave at registration.
• Damages — to be indemnified for damage caused by inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.
• Lodge a complaint with the National Privacy Commission at privacy.gov.ph if you believe your rights have been violated.

• See what we hold: open your profile, then Account Settings → Security & Data → Data Privacy.
• Correct something you can edit: use Edit Profile. Changes to details verified at registration — your name, phone, address, photo, school and course — are sent to a PESO admin for review first; your current version stays visible until the change is approved.
• Correct something you cannot edit (your email address, municipality, industry, or uploaded documents): Account Settings → Security & Data → Request a correction, and describe what is wrong. An admin makes the change.
• Pause your account: Account Settings → Danger Zone → Deactivate.
• Erase your data: Account Settings → Danger Zone → Delete account.
• Anything else: email [CONTACT EMAIL]. We aim to respond within a reasonable period.

KitaWork is intended for people of legal working age. If you believe a child's data has been submitted to us, contact [CONTACT EMAIL] so it can be removed.

If we change this policy in a way that affects how your data is handled, we will raise the policy version and ask you to review and accept the new version the next time you sign in. The version in force is shown at the top of this policy.

For any question about this policy, about the data we hold about you, or to exercise a right described above, contact [ORGANIZATION NAME] at [CONTACT EMAIL], or visit the PESO office of your municipality.

See also our Terms of Service.