Privacy Policy for NovoKerja

Last Updated: February 21, 2026

1. Introduction

Welcome to NovoKerja ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services (collectively, the "Service").

NovoKerja is operated by NOVO KERJA ENTERPRISE (SSM Registration No: 202503322023 / SA0646341-T), Selangor, Malaysia. NovoKerja is an on-demand staffing platform that connects Malaysian businesses with skilled local workers instantly. By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

• Account Information: Name, email address, phone number, and password
• Profile Information: Professional skills, certifications, work experience, profile pictures
• Business Information: Company name, business registration details, contact information
• Payment Information: Payment details processed through our third-party payment provider (Billplz)
• Identity Verification: Government-issued identification documents for verification purposes

2.2 Location Information

We collect and process your location information when you use our Service:

• Precise Location: We collect your device's precise location (GPS) to match you with nearby job opportunities and verify work attendance for assignments
• Check-In Location: Location data is captured when you check in to assignments for verification and dispute resolution purposes
• Job Location: We use location to show workers jobs near them and help businesses find nearby workers

You can control location permissions through your device settings. However, disabling location may limit certain features of the Service.

2.3 Camera and Photo Library Access

We request access to your camera and photo library for the following purposes:

• Profile Pictures: To upload and update your profile photo
• Certification Documents: To upload professional certifications, licenses, and qualifications
• Identity Verification: To verify your identity for platform security

Photos are stored securely on our servers and are only visible to relevant parties (e.g., businesses reviewing worker applications).

2.4 Communication Data

• In-App Messages: Chat messages between workers and businesses for assignment coordination
• Notifications: Push notifications for job matches, assignment updates, and payment confirmations
• Customer Support: Communications with our support team

2.5 Usage and Device Information

• Device Information: Device type, operating system, unique device identifiers
• Usage Data: App interactions, features used, time spent on the app
• Log Data: IP address, crash logs, and error reports

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Provide and Improve Services

• Match workers with suitable job opportunities using AI-powered algorithms
• Enable businesses to post jobs and hire workers
• Process payments securely through our escrow system
• Verify work attendance through location-based check-ins
• Facilitate communication between workers and businesses
• Improve our matching algorithms and service quality

3.2 Safety and Security

• Verify user identities to prevent fraud and ensure platform safety
• Resolve disputes between workers and businesses
• Monitor for suspicious activity and enforce our Terms of Service
• Investigate violations and protect user rights

3.3 Communication

• Send push notifications about job matches, assignments, and payments
• Send service-related announcements and updates
• Respond to your inquiries and provide customer support
• Send promotional communications (you can opt-out anytime)

3.4 Analytics and Research

• Analyze usage patterns to improve user experience
• Generate aggregated statistics and insights
• Develop new features and services

4. How We Share Your Information

4.1 With Other Users

• Workers: Your profile information, skills, certifications, and ratings are visible to businesses when you apply for jobs
• Businesses: Your company information and job postings are visible to workers
• Assignment Parties: Contact information is shared between matched workers and businesses for assignment coordination

4.2 With Service Providers

We share information with third-party service providers who perform services on our behalf:

• Payment Processing: Billplz (for FPX payment processing)
• Cloud Hosting: Firebase/Google Cloud Platform (for data storage and hosting)
• AI Services: OpenAI (for job matching and analysis - anonymized data only)
• Communication: Firebase Cloud Messaging (for push notifications)

4.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Legal processes (court orders, subpoenas)
• Government or regulatory requests
• Protecting our rights, property, or safety
• Investigating fraud or security issues

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data is encrypted in transit (HTTPS/TLS) and at rest
• Access Controls: Strict access controls limit who can view your information
• Secure Payments: Payment data is processed through PCI-DSS compliant providers
• Regular Security Audits: We regularly review and update our security practices

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

• Active Accounts: We retain your data while your account is active
• Deleted Accounts: Data is deleted within 90 days of account deletion, except where retention is required by law
• Payment Records: Financial records are retained for 7 years as required by Malaysian tax law
• Dispute Records: Records related to disputes are retained for 2 years after resolution

7. Your Rights and Choices

7.1 Access and Update

• You can access and update your profile information through the app settings
• Request a copy of your personal data by contacting us

7.2 Delete Your Account

• You can delete your account at any time through the app settings
• Upon deletion, we will remove or anonymize your personal information within 90 days

7.3 Control Permissions

• Location: Disable location access in device settings (may limit job matching)
• Camera/Photos: Disable camera/photo access in device settings (may limit profile updates)
• Notifications: Disable push notifications in app settings or device settings

7.4 Opt-Out of Marketing

• Unsubscribe from promotional emails using the link in the email
• Disable marketing notifications in app settings

8. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries outside Malaysia, including the United States (for cloud hosting and AI services). We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy in the app
• Sending a push notification
• Updating the "Last Updated" date at the top of this policy

Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

11. Compliance with Malaysian Laws

We comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable data protection laws. Your personal data is processed lawfully, fairly, and transparently.

12. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

---

Permission-Specific Disclosures

Required by Google Play Store:

android.permission.CAMERA

Why we need it: To allow users to capture photos for profile pictures, certification documents, and identity verification.
When it's used: Only when you choose to take a photo within the app (profile setup, document upload).
Data retention: Photos are stored securely on Firebase Storage and deleted when you delete your account.

android.permission.ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION

Why we need it: To match workers with nearby jobs, help businesses find local workers, and verify work attendance through check-ins.
When it's used: When browsing jobs, applying for work, and checking in to assignments.
Data retention: Location data is stored with assignments and deleted 90 days after account deletion.

android.permission.READ_EXTERNAL_STORAGE / READ_MEDIA_IMAGES

Why we need it: To allow users to upload photos and documents from their device for profile pictures and certifications.
When it's used: Only when you choose to select a photo from your gallery.
Data retention: Uploaded files are stored on Firebase Storage and deleted with your account.

NOVO KERJA ENTERPRISE (SSM No: 202503322023)
© 2026 NovoKerja. All rights reserved.