1. Who we are
KuyaFix ("KuyaFix", "we", "us", "our") operates the KuyaFix mobile application and this website, which connect homeowners in the Philippines with nearby independent repair workers ("repairmen").
For the purposes of Republic Act No. 10173 (the Data Privacy Act of 2012) and its Implementing Rules, KuyaFix is the personal information controller for the data described here. We are based in Metro Manila, Philippines.
We collect what we need to match you with someone nearby and keep a record of the job. We never sell your data. Your exact home address is hidden from everyone until you accept a repairman's offer. You can delete your account and your data at any time.
2. What we collect
2.1 Account information
You sign in with Google. From that we receive your name, email address, profile picture, and Google account ID — see section 3. We never receive or store your Google password.
2.2 Profile information you give us
| Data | Why we need it |
|---|---|
| Mobile number | So a repairman and homeowner can reach each other about a booked job |
| Barangay and city | To show jobs to repairmen in the right area |
| Home address and coordinates | To measure distance and to give the booked repairman directions — see section 4 |
| GCash number (optional) | Held for future e-wallet payouts. Unused while payment is cash-only |
| Profile photo, bio, skills, years of experience, service radius (repairmen) | So homeowners can judge who they are letting into their home |
2.3 Job content
Everything you put into a job: the title and description of what needs fixing, the categories, your budget range, urgency and preferred date, and the photos you attach (up to five before the job, plus the repairman's "after" photos). For repairmen: the offers you send, including price, schedule, duration and materials list.
2.4 Messages
Chat messages between a homeowner and a repairman about a specific job. We store these so both sides — and, if a dispute is raised, our support team — can see what was agreed. Treat in-app chat as a record, not as a private channel.
2.5 Ratings and reviews
The star rating and written review you leave after a job, and the ones left about you. Only homeowners rate repairmen — repairmen do not rate homeowners back. Reviews are shown publicly on the rated repairman's profile alongside the reviewer's first name and photo. Separately, a repairman can send us a private report about a job; that is never published, never scored, and is visible only to our team.
2.6 Technical and device data
- Device model, operating system version and app version
- A push notification token, so we can alert you to a new offer or message
- IP address and timestamps recorded by our hosting provider
- Crash reports and error logs, which may include the screen you were on
2.7 What we do not collect
- Card or bank details. Payment is cash, handed directly to the repairman. We never see it and we do not process card payments.
- Background location. We only use location when you set your address or search for jobs — never continuously, and never when the app is closed.
- Your contacts, calls, SMS, or photo library at large. The photo picker only returns the specific images you choose.
- Government ID documents, unless and until we launch optional repairman verification — at which point this policy will be updated first.
3. Google sign-in data
KuyaFix uses Google Sign-In as its only login method. When you tap "Continue with Google", Google asks for your permission and then sends us a signed token containing:
- your name,
- your email address,
- your profile picture URL, and
- a Google account identifier unique to KuyaFix.
We request only the basic email and profile scopes. We do not request access to Gmail, Drive, Calendar, Contacts, Photos, or any other Google service, and we cannot read them.
We use this data solely to create and identify your KuyaFix account and to pre-fill your profile. KuyaFix's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer it to third parties except as described in section 7, we do not use it for advertising, and we do not allow humans to read it except for security, to comply with law, or where you have explicitly asked us for support.
You can revoke KuyaFix's access at any time from your Google account permissions page. Doing so stops future sign-ins but does not by itself delete the data already in your KuyaFix account — use section 11 for that.
4. Location and your address
Location is the most sensitive thing KuyaFix handles, so it gets its own section.
4.1 What we store
Your home or job address as you entered it, plus the coordinates for that address, so we can calculate how far a job is from a repairman.
4.2 Who can see it
While a job is open, other users — including every repairman who can see your listing — are shown only your barangay and an approximate distance. The full street address is released to exactly one person, the repairman whose offer you accept, at the moment you accept it, because they need it to reach you.
This is not only an app-level rule. The address column is revoked from ordinary client access in our database, and the job feed is served by a function that can only ever return barangay plus distance. An app bug could not expose the street address, because the database will not hand it over.
4.3 Device location permission
If you allow it, we use your device's location once to centre the address picker and to sort nearby jobs. Declining is fine — you can type your address instead. We do not track your location in the background or build a history of where you have been.
5. How we use your data
- To run the service — create your account, show jobs near you, deliver offers and messages, and keep a record of each job.
- To help you decide who to trust — display profiles, ratings, completion rates and reviews.
- To notify you — push notifications for new offers, messages, and job status changes. You can turn these off in your device settings.
- To process GCash payments and payouts — including showing a repairman their take-home after fees, and sending it to their GCash number.
- To resolve disputes — if either side raises a problem, our team may read the job's chat and photos to work out what happened.
- To keep the platform safe — detect fake accounts, spam, abuse, and fraud; enforce our Terms of Service.
- To improve the app — aggregate, non-identifying statistics such as which categories are most posted, and crash reports.
- To comply with the law and respond to lawful requests from Philippine authorities.
We do not sell your personal information, rent it to data brokers, or use it to target you with third-party advertising.
6. Our legal basis
Under the Data Privacy Act we rely on the following criteria for lawful processing:
| Basis | Applies to |
|---|---|
| Contract | Everything needed to deliver the service you asked for: your account, your jobs, offers, messages and the job record |
| Consent | Device location, push notifications, your optional GCash number, and any marketing email — each separately given and separately withdrawable |
| Legitimate interests | Fraud prevention, safety, dispute resolution, and improving the app — balanced against your rights |
| Legal obligation | Records we are required to keep, and lawful requests from authorities |
8. Where data is stored
Your data is stored on servers operated by Supabase and Google, which may be located outside the Philippines. Where personal data is transferred abroad, we take reasonable steps — including contractual commitments with our providers — to ensure it receives a comparable level of protection, consistent with Sections 21 and 44 of the Data Privacy Act. Data in transit is encrypted with TLS, and data at rest is encrypted by our providers.
9. How long we keep it
| Data | Retention |
|---|---|
| Account and profile | While your account is open, then deleted within 30 days of a deletion request |
| Job records, offers and messages | Up to 24 months after the job closes, for dispute and safety purposes |
| Ratings and reviews | Retained after account deletion in anonymised form ("Deleted user"), so the other party's rating history stays honest |
| Job photos | Deleted with the job record |
| Crash and access logs | Up to 12 months |
| Records required by law or an open dispute | As long as the obligation or dispute lasts |
10. Your rights
Chapter IV of the Data Privacy Act gives you the following rights over your personal information. Exercising them is free, and we will respond within 15 working days.
- To be informed — to know that your data is being processed, and how. That is what this page is for.
- To access — to get a copy of the personal data we hold about you.
- To rectify — to correct anything inaccurate. Most of it you can edit yourself in the app's profile screen.
- To erasure or blocking — to have your data removed, subject to the exceptions in section 9.
- To object — to refuse processing based on consent or legitimate interest, including withdrawing consent at any time.
- To data portability — to receive your data in a structured, commonly used electronic format.
- To damages — to be indemnified for damage caused by inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorised use of your data.
- To complain — to file a complaint with the National Privacy Commission.
To exercise any of these, email privacy@kuyafix.ph from the address on your account. We may ask you to verify your identity before acting, to make sure we are not handing your data to someone else.
If you are not satisfied with our response, you may complain to the NPC: 5th Floor, Delegation Building, PICC Complex, Pasay City, Metro Manila — privacy.gov.ph, info@privacy.gov.ph.
11. Deleting your account
You can delete your KuyaFix account and its data at any time, from inside the app (Profile → Settings → Delete account) or by following the instructions on our account deletion page.
Deletion removes your profile, address, contact details, job posts, offers, photos and messages within 30 days. Two things survive, in a form that no longer identifies you: ratings and reviews you left about other people (shown as from a deleted user, so their record stays accurate), and any record we are legally required to keep or that relates to an unresolved dispute.
You cannot delete an account with a job in progress or an open dispute. Finish or cancel it first.
12. Security
We apply organisational, physical and technical measures appropriate to the risk, including:
- TLS encryption for all data in transit, and encryption at rest by our hosting providers
- Row-level security in the database, so each account can only read the rows it is entitled to — enforced by the database, not by the app
- Column-level restrictions that keep exact addresses out of reach of ordinary client queries
- Authentication delegated to Google, so we never hold a password
- Access to production data limited to the few people who need it
No system is perfectly secure. If a breach occurs that is likely to seriously harm you, we will notify you and the National Privacy Commission within 72 hours of discovery, as required by law.
13. Children
KuyaFix is for adults. You must be at least 18 years old to create an account, whether as a homeowner or a repairman. We do not knowingly collect personal information from minors. If you believe a child has created an account, contact us and we will delete it.
14. Changes to this policy
We will update this page when the app changes, and always before a new kind of data collection starts. The "last updated" date at the top always reflects the current version. For a change that materially affects your rights, we will notify you in the app or by email at least 14 days before it takes effect, and where the law requires it, ask for your consent again.
15. Contact us
Questions, requests, or complaints about your personal data go to our Data Protection Officer:
- Privacy matters: privacy@kuyafix.ph
- Everything else: support@kuyafix.ph
- Metro Manila, Philippines
See also our Terms of Service, which govern your use of KuyaFix.