Privacy Policy for JumushBar

Last updated: 2025/Aug/18

JumushBar provides a platform to connect employees and employers. This Privacy Policy explains what data we collect, why we collect it, how we use and protect it, and your rights. If you have questions, contact us at devstudiokg@gmail.com.

Platform review note

JumushBar has been reviewed and accepted on the Apple App Store. We include this to indicate the app has passed a separate platform review; we understand Google Play conducts an independent evaluation.

1. What information we collect

• Account information: name, surname, email address, phone number, password (hashed), and profile information you provide.
• Verification documents (employees only): government-issued ID front and back images and a selfie holding the ID (used for identity verification).
• Profile data: profession/category, skills, availability.
• Usage data: app analytics, logs, crash reports, and device information (device model, OS version, IP address) required to operate and improve the service.
• Communications: messages between users and support requests (content you send to us).

2. Purpose & legal basis

We collect and process personal data for these purposes:

• To create and manage user accounts and enable login (contractual necessity).
• To verify identity and reduce fraud and illegal behavior by employees (legitimate interest and user consent where applicable).
• To deliver the service, manage profiles and match users (contractual necessity / legitimate interest).
• To comply with legal obligations and respond to lawful requests.
• To analyze and improve the app and for security monitoring (legitimate interest).

3. Why we collect government ID and selfie

Employees are asked to upload a government ID (front and back) and a selfie holding the ID so we can verify identity and help protect employers and users from potential illegal activity or misrepresentation. Verification is mandatory for employee accounts that offer services where identity verification is necessary for safety and trust.

4. How we store and protect your data

Verification documents and personal data are stored securely. We implement technical and organizational measures such as encryption at rest and in transit, access controls, and audit logs to limit access to authorized staff only. Only personnel who need access for verification or legal compliance can view verification documents.

5. Data retention

We retain verification documents and personal information only as long as necessary for the purpose collected, generally for verification and fraud-prevention purposes. Typical retention periods:

• Active account data: while account is active.
• Verification documents: up to 90 days after verification is complete, unless retention is required by law or a safety investigation requires longer retention; in such cases we will only retain what is strictly necessary.
• Support and communications: up to 1 year unless needed longer for legal reasons.

6. Sharing and third parties

We do not sell personal data. We may share data with:

• Third-party service providers (e.g., secure storage, identity verification services, analytics) who process data on our behalf and under contract.
• Law enforcement or government agencies when required by law or to respond to lawful requests.
• Other users: basic profile information that you choose to make public for matching purposes (profession, name as shown in profile).

7. Your rights

Depending on your jurisdiction, you may have rights including access, correction, deletion, restriction of processing, portability, and to object to certain processing. To exercise these rights, contact us at devstudiokg@gmail.com. We will respond to verified requests in accordance with applicable law.

8. Children

Our service is not intended for children under 13 (or applicable local age). We do not knowingly collect personal data from children under the applicable age. If you believe we have collected such data, contact us and we will remove it as required by law.

9. Security

We use industry-standard security measures. However, no internet transmission is completely secure. If you suspect a security issue, contact us immediately at devstudiokg@gmail.com.

10. International transfers

We may transfer data to servers or service providers located in other countries. When we do so, we use safeguards required by law (e.g., standard contractual clauses) to protect your information.

11. Changes to this policy

We may update this policy. We will post the updated date at the top of this page.

JumushBar — Protecting users with secure identity verification.