Version 5
Contact info you provide — name, email address, and phone number. Financial info — a payment reference or mobile money number, used either to confirm direct payment between you and the other party (Duck itself never holds that money) or to collect Duck's service fee from Workers through our payment processor (M-Pesa). Precise location — for gig matching, live gig tracking, and safety. User content — chat messages, photos and videos you send or upload (including gig photos and KYC verification photos), and anything you send us through customer support. Identifiers — an internal user ID tied to your account. Identity verification data handled by our KYC provider (we store a verification reference, not raw documents, wherever possible). Diagnostics — crash reports and performance data collected automatically when the app runs, to help us find and fix problems.
To operate the marketplace — matching gigs, verifying identity, enabling messaging and calling, computing ratings, and collecting Duck's service fee from Workers; to personalize your experience — for example, showing your name back to you in the app; to keep the platform safe — fraud detection, content moderation, and SOS response; to maintain and improve the app — using crash and performance data to find and fix bugs; and to communicate with you about your account, gigs, and safety-relevant updates.
A Worker’s live location is only visible to an Employer as a fuzzed approximate distance band (±500m) while the Worker is browsing as available — raw coordinates never leave our database for that purpose. Once a gig is assigned, the Worker’s precise live location is shared with that gig’s Employer for the duration of the job — from assignment through completion — so both sides can track progress; the Worker is shown the same live map as confirmation their location is being shared. This precise sharing is scoped to that one gig and stops once it is marked complete or cancelled. A gig’s exact address is revealed only to the Worker assigned to it.
Service providers who help us run Duck: identity-verification providers (e.g. Stripe Identity, Sumsub, Onfido, or Persona depending on your country), payment reference/mobile-money providers relevant to your country, SMS/communication providers, crash and performance monitoring (Sentry), and cloud infrastructure (Supabase). We do not sell your personal data or share it with data brokers. We may disclose data if required by law or to protect the safety of our users.
Duck does not run advertising and does not share your data with data brokers or other companies’ apps or websites for cross-app tracking. If your device’s App Tracking Transparency permission is requested, declining it will not limit any feature of Duck. You can review or change this permission at any time in your device Settings → Privacy → Tracking.
We retain account and transaction data for as long as your account is active and as needed to meet legal, tax, and dispute-resolution obligations after that. You can request deletion at any time — see “Your rights” below.
Depending on where you live (including under GDPR in the EU, the Kenya Data Protection Act 2019, Nigeria’s NDPR, India’s DPDP, and the CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. You can request a data export or account deletion from Trust Center → Privacy Controls, or by contacting support. Financial records required by law may be retained after deletion.
Authentication tokens are stored in your device’s secure keychain, never in plain storage. Access to your data is protected by row-level security in our database — other users can only see what this policy and the app’s design allow. No system is 100% secure; we work to detect and respond to issues quickly.
Duck is for users 18 and older. We do not knowingly collect data from anyone under 18.
Duck operates market-by-market and generally keeps matching, payments, and data within a user’s own country. Where data is processed by an infrastructure or service provider in another country, we require appropriate safeguards.
We may update this Privacy Policy as Duck adds features or launches new markets. Material changes will be presented for re-acceptance in-app.
Questions about this policy, or requests to exercise your data rights, can be sent through Help & Support in the app, or to info@kinstacktech.com.