Privacy Policy

KitaWork is a community employment platform operated by the KitaWork Project Team of North Eastern Mindanao State University (NEMSU) together with the Public Employment Service Office (PESO) of the municipalities it serves: Carrascal, Cantilan, Madrid, Carmen, and Lanuza.

For the purposes of RA 10173, the KitaWork Project Team of North Eastern Mindanao State University (NEMSU) acts as the personal information controller for the data described below. Questions about this policy go to admin.kitawork@gmail.com.

We only collect what the service needs. Nothing here is sold, and none of it is used for advertising.

Full name

Identifies you to the PESO admin reviewing your account, and to the employers or job seekers you are matched with.

Email address

Signing in, verifying that the address is real during registration, and password resets.

Mobile number

Lets an employer or hirer contact you about a job once you are connected. Shown on your profile.

City, municipality, and address

Routes your account to the PESO office that reviews it, and matches you with work near you.

Birth date

Checked during registration to confirm you are 18 or older. It is not stored.

Government ID, photo holding the ID, or business permit

Verification only. A PESO admin checks it to confirm you are a real person or a registered business before your account is activated.

Business TIN (business employers)

Checked by the PESO admin against your business permit or BIR certificate, and used to keep to one account per business. Never shown to other users.

School and course (job seekers who are students)

Shown to employers considering your application, and used to describe you on your profile.

Class schedule (job seekers who are students)

Filters out jobs that conflict with your classes and contributes to your match score.

Resume and portfolio link (optional, job seekers)

Shown to an employer once you apply to one of their jobs or accept their invite, and to the PESO admin of your municipality. If you choose "Let any approved employer view my resume", any approved employer can see it.

Skills and interests

Calculates how well you match a job post. Visible to an employer when you apply or are recommended.

Profile photo or company logo

Shown on your profile, your job posts, and in conversations, so people can recognise you.

Job posts and applications

Running the service: publishing work, applying for it, and tracking the outcome.

Messages, photos and files you send in the app

Delivering them to the person you are talking to about a job. Only the two of you can open them.

Work history

Shows employers what work you have completed through KitaWork.

When you last used KitaWork

Shows the PESO office whether an account is still in use, and starts the inactive-account warning described in section 5.

Sign-in activity (failed attempts, lockouts, session timing)

Protecting your account from password guessing and from being left open on a shared computer.

You give this information when you register, and when you later edit your profile, post a job, apply for one, or send a message.

We process your data on the basis of the consent you give when you register, which you record by ticking the consent box before submitting your account for verification. We also process it where it is necessary to provide the service you asked for, and, in the case of PESO review, to fulfil a function of a public authority.

You may withdraw your consent at any time by deleting your account (see section 7). Withdrawing consent means we can no longer provide the service to you.

• PESO admins in your municipality. They review your registration, including your government ID, the photo of you holding it, your business permit and TIN, and they review changes you make to information that other users can see. To run the office's employment services they can also see your profile and resume, when you last used KitaWork, the work you completed through KitaWork with its ratings and how many times you were hired, and, for employers, your job posts with their number of applicants and the people you hired. An admin assigned to another municipality cannot see your account.
• The System Administrator. During the pilot, the KitaWork Project Team of North Eastern Mindanao State University (NEMSU) oversees the five PESO offices. It can see the same account details and work records as your PESO office, across all five municipalities, but not your government ID, ID photo, business permit, TIN, or resume, which stay with your PESO office. It cannot approve, reject, or delete accounts, and it cannot send or read messages.
• Employers and individual hirers. When you apply to a job or are recommended for one, that employer sees your name, photo, city, course and school if you added them, skills, interests, availability, bio, and the work you have completed through KitaWork.
• Job seekers. They see published job posts and the public part of the employer profile behind them: business or hirer name, photo or logo, industry, city, About text, website, and contact details.
• The person you are messaging. Messages, and the photos and files sent with them, are visible to you and to the recipient.
• Our hosting and email providers. The platform runs on Supabase for its database, authentication, and file storage, and sends email through its mail provider. They process data on our instructions in order to run the service.

Which jobs you apply to is private. No admin can see the list of jobs you applied to, how far each application got, or your match scores; only the employer you applied to sees your application. PESO offices and the System Administrator see application totals for reports, never who applied where.

No admin can read your messages. Your government ID and business permit are never shown to other job seekers or employers. They are held in private storage that no browser can read directly; an admin sees one only through a link that expires after a few minutes.

• While your account is active, we keep your data so the service works.
• If your registration is rejected, your account and the documents you uploaded are deleted 30 days after the decision.
• If you don't open KitaWork for 60 days, we email you a warning. If you still don't log in within 30 days of that email, your account is deleted. The PESO office can restore it within 30 days after that; then it is deleted for good. This doesn't apply while you have an open job post or a job application in progress.
• If you delete your account, your profile, documents, photos, applications, job posts, saved jobs, and notifications are removed. Records of work you completed for an employer remain in that employer's own history, because they are that employer's record of work performed, and they no longer link back to your account.
• Your conversations are not removed from the other person's Messages when you delete your account. They keep the conversation, including photos and files and your name on your messages, for 3 years, so it remains available as a record if it is ever needed to establish, exercise, or defend a legal claim (for example, to report harassment or a scam). No one can send you new messages, and PESO staff still cannot read it. After 3 years, or once both of you have deleted your accounts, the conversation is deleted for good.
• If you deactivate rather than delete, your data is kept so you can reactivate later, and your job posts are closed in the meantime.

• Passwords are stored hashed by our authentication provider. Nobody at KitaWork can read them.
• Repeated failed sign-in attempts lock an account for a period that grows with each repeat offence.
• Two-factor authentication is available to every account and recommended for all of them.
• You are signed out automatically after a period of inactivity.
• Government IDs and business permits sit in private storage reachable only by the server, and only an admin in your own municipality can request a short-lived link to view one.
• Database access rules restrict every account to its own rows, and changes to information other users can see are applied only after an admin approves them.
• All traffic between your device and KitaWork is encrypted in transit.
• Backups are made on the server so the system can be restored after a failure. They are kept in private storage and cannot be downloaded or opened from the app.

As a data subject under RA 10173 you have the right to:

• Be informed that your personal data is being collected and processed, and why. This policy is how we tell you.
• Access your data. Your profile page shows what we hold about you, and the Data Privacy panel lists the categories we store.
• Rectification — to have inaccurate data corrected. You can edit most of your profile directly, and request a correction to anything fixed at registration.
• Erasure or blocking — to have your data removed or withheld where it is incomplete, outdated, false, or unlawfully obtained. Deleting your account does this.
• Object to the processing of your data, including by withdrawing the consent you gave at registration.
• Damages — to be indemnified for damage caused by inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.
• Lodge a complaint with the National Privacy Commission at privacy.gov.ph if you believe your rights have been violated.

• See what we hold: open your profile, then Account Settings → Security & Data → Data Privacy.
• Correct something you can edit: use Edit Profile. Changes to details verified at registration — your name, phone, address, photo, school and course — are sent to a PESO admin for review first; your current version stays visible until the change is approved.
• Correct something you cannot edit (your email address, municipality, industry, or uploaded documents): Account Settings → Security & Data → Request a correction, and describe what is wrong. An admin makes the change.
• Pause your account: Account Settings → Danger Zone → Deactivate.
• Erase your data: Account Settings → Danger Zone → Delete account.
• Anything else: email admin.kitawork@gmail.com. We aim to respond within a reasonable period.

KitaWork is intended for people of legal working age. If you believe a child's data has been submitted to us, contact admin.kitawork@gmail.com so it can be removed.

If we change this policy in a way that affects how your data is handled, we will raise the policy version and ask you to review and accept the new version the next time you sign in. The version in force is shown at the top of this policy.

For any question about this policy, about the data we hold about you, or to exercise a right described above, contact the KitaWork Project Team of North Eastern Mindanao State University (NEMSU) at admin.kitawork@gmail.com, or visit the PESO office of your municipality.

See also our Terms of Service.