Privacy Policy

Effective September 16, 2026 · v1.8

Khench Inc. is incorporated in Ontario (Ontario Corporation Number 1001728522). Registered office: 1065 Canadian Place, Suite 201 #488, Mississauga, Ontario L4W 0C2.

Khench handles personal information under the federal Personal Information Protection and Electronic Documents Act (PIPEDA), which governs private-sector personal information in Ontario, and sends commercial electronic messages under Canada's Anti-Spam Legislation (CASL). Where a provincial law also applies to a particular interaction, such as Ontario's Consumer Protection Act or the Digital Platform Workers' Rights Act, 2022, Khench follows that law as well.

Data we collect: name, email, phone, DOB, address (incl. tax address for T4A), SIN (encrypted), payment methods (via Stripe), location pings during active assignments, photos of work, message history, ratings, IP/UA for legal acceptances.

Product analytics and telemetry: to operate, secure, and improve the platform we record how you use the apps: screens you view, features and buttons you interact with, taps and scrolls, time spent in the app, how often you open it, whether it is in the foreground or background, and performance, error, and device/session metadata. This activity is linked to your account. You can turn product analytics off under Settings → Privacy; we record that preference, but may still collect limited activity needed for security, fraud prevention, dispute resolution, audit, and core operation, marked as collected-under-opt-out. We never sell this data. Account-linked analytics records are retained for 90 days and included in your data export where available.

Third-party processors may include Stripe (payments + Connect), Twilio (SMS OTP), Expo (push), AWS S3 / MinIO (file storage), SMTP providers (transactional email), Sentry (error monitoring), and voice or transcription providers where enabled. We maintain the current processor inventory through our privacy operations.

Maps and addresses: when you type an address or drop a pin, the text or coordinate is sent to a geocoding service (Photon, built on OpenStreetMap data) through Khench's own servers, which cache results so repeated lookups do not leave our infrastructure. Map imagery is served by Esri. These services receive the address text or coordinate and the request's technical metadata; they do not receive your name, email, or account identifier.

Data residency: Khench hosts production application data, including uploaded photos and call recordings, on Khench-controlled infrastructure located in Canada. Third-party processors, including payment, messaging, push, email and error-monitoring providers, may store or process data outside Canada under their own terms and safeguards; personal information handled outside Canada may be accessible to the courts and authorities of that country. You may ask [email protected] where a specific category of your data is held.

Voice and video call recording: when you place or receive a Khench call we record the audio for safety, fraud prevention, dispute resolution, and platform-policy enforcement. You see a recording notice and tap Accept before the call connects, and declining cancels the call with no penalty. Recordings are encrypted at rest (AES-256), held on Khench-controlled infrastructure in Canada, and deleted 90 days after the call. An automated review system scans transcripts for signs of off-platform payment or contact. If it raises a flag, the recording is held past 90 days while a person reviews it. If every flag on a recording is dismissed on review, the hold comes off and the recording is deleted on the ordinary 90-day schedule measured from the call. If a flag is acted on, or the recording is needed for a dispute, an investigation or a legal proceeding, it is held for up to 7 years. Both parties' consent is recorded in our immutable LegalAcceptance log. You may request access to your recordings via [email protected]. DSAR exports include audio, transcripts, and any classifier flags raised on calls you participated in.

Retention: job photos 90 days post-completion; location pings 30 days; account-linked analytics 90 days; call recordings 90 days, extended only while a review flag is live or a hold is in place; tax and payment records 7 years. Legal acceptances and audit records are retained only as long as needed for the transaction, legal obligations, dispute defence, and platform integrity.

Security incidents: if a breach of security safeguards involving your personal information creates a real risk of significant harm to you, Khench will report the breach to the Office of the Privacy Commissioner of Canada and notify you as soon as feasible, as required by section 10.1 of PIPEDA. The notice will describe what happened, what information was involved, what Khench is doing about it, and the steps you can take to reduce your risk. Khench keeps a record of every breach of security safeguards, whether or not it triggers notification, and will make those records available to the Commissioner on request.

Your rights (PIPEDA): access to the personal information Khench holds about you, correction of that information, withdrawal of consent, and complaint to the Office of the Privacy Commissioner of Canada.

Separately, and as a service Khench chooses to offer rather than a right PIPEDA confers, you can download a machine-readable copy of your data at any time under Settings → Privacy → Download my data.

Contact: [email protected]. Mail privacy requests to the Privacy Officer, Khench Inc., 1065 Canadian Place, Suite 201 #488, Mississauga, Ontario L4W 0C2.