Privacy Policy

Effective June 1, 2026 · v1.1

Khench complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Ontario provincial regulations.

Data we collect: name, email, phone, DOB, address (incl. tax address for T4A), SIN (encrypted), payment methods (via Stripe), location pings during active assignments, photos of work, message history, ratings, IP/UA for legal acceptances.

Product analytics and telemetry: to operate, secure, and improve the platform we record how you use the apps — screens you view, features and buttons you interact with, taps and scrolls, time spent in the app, how often you open it, whether it is in the foreground or background, and performance, error, and device/session metadata. This activity is linked to your account. You can turn product analytics off under Settings → Privacy; we record that preference, but for security, fraud-prevention, dispute-resolution, audit, and core-operation purposes we continue to collect this activity and flag it as collected-under-opt-out rather than ceasing collection. We never sell this data. Analytics records follow the retention schedule below and are included in your PIPEDA data export on request.

Third-party processors: Stripe (payments + Connect), Twilio (SMS OTP), Expo (push), AWS S3 / MinIO (file storage), nodemailer SMTP (transactional email), Sentry (error monitoring), Daily.co (voice/video media), OpenAI (Whisper transcription).

Data residency: production data hosted in Canada (NAS-based infra). Stripe processes globally per its DPA. Daily.co stores call audio temporarily before our sidecar uploader copies it to NAS S3. OpenAI Whisper processes audio for transcription only — no audio is retained by OpenAI.

Voice and video call recording: when you place or receive a Khench call we record the audio for safety, fraud prevention, dispute resolution, and platform-policy enforcement. You see a recording notice and tap Accept before the call connects — declining cancels the call with no penalty. Recordings are encrypted at rest (AES-256), stored in Canadian data centers, retained for 90 days unless flagged for review (in which case retention may extend to 7 years for legal evidence). Both parties' consent is recorded in our immutable LegalAcceptance log. You may request access to your recordings via [email protected] — DSAR exports include audio, transcripts, and any classifier flags raised on calls you participated in.

Retention: job photos 90 days post-completion; location pings 30 days; call recordings 90 days (or 7 years on legal hold); tax records 7 years; legal acceptances + immutable audit log retained indefinitely.

Your rights (PIPEDA): access, correction, withdrawal of consent, complaint to the Office of the Privacy Commissioner of Canada, and data portability via Settings → Privacy → Download my data.

Contact: [email protected].