Privacy Policy

KBahay Service (“KBahay”, “we”, “our”, “us”) operates a digital marketplace platform that connects Customers with Home Service Providers, Rental Providers, Grocery Stores, KTrike Drivers, and Solar Panel Installers in the Philippines.

As a data controller under RA 10173, KBahay is responsible for the personal data we collect from you when you use our Platform. We are committed to handling your data with the utmost care, transparency, and respect for your rights.

This Privacy Policy explains:

• What personal data we collect and why.
• How we collect, store, use, and share your data.
• Your rights as a data subject.
• How to exercise those rights.
• How to contact us or the NPC with privacy concerns.

By using the KBahay Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue use of the Platform.

We collect the following categories of personal data depending on how you use the Platform:

2.1 Identity & Account Data

• Full name, date of birth, and gender.
• Profile photo (optional).
• Government-issued ID number (for Service Providers and KTrike Drivers).
• Business registration details (for business accounts).

2.2 Contact Information

• Mobile phone number (required for account registration and OTP verification).
• Email address.
• Home or business address (for service delivery).

2.3 Financial & Transaction Data

• Payment method details (last 4 digits of cards; full card numbers are processed by payment processors and never stored by KBahay).
• Transaction history, including booking amounts, dates, and providers.
• Refund and dispute records.
• Bank account or e-wallet information for Service Provider payouts.

2.4 Location Data

• Real-time GPS location (when using KTrike or placing a delivery order).
• Pickup and drop-off addresses entered during booking.
• IP address (approximate location).

2.5 Device & Technical Data

• Device type, operating system version, and unique device identifiers.
• Mobile network provider and connection type.
• App version and crash logs.
• Push notification tokens.

2.6 Usage & Behavioral Data

• Pages visited, features used, and time spent on the Platform.
• Search queries within the app.
• Booking frequency and preferred service categories.
• Interaction with notifications and in-app messages.

2.7 Communications Data

• Messages exchanged with Service Providers through the in-app chat.
• Customer support inquiries and correspondence.
• Reviews and ratings submitted by you.

2.8 Sensitive Personal Information

In limited circumstances, KBahay may process sensitive personal information as defined under RA 10173, such as:

• Health-related information (e.g., if you request medical-related home services).
• Government ID numbers (for provider verification only).

Such sensitive data is collected only with your explicit consent and processed under strict security measures.

We collect personal data through the following means:

3.1 Directly From You

• When you register for an account.
• When you make a booking, order, or transaction.
• When you contact our customer support team.
• When you submit reviews, feedback, or complaints.
• When you apply to become a Service Provider or KTrike Driver.

3.2 Automatically

• Through app usage tracking and analytics tools.
• Through GPS and location services when enabled on your device.
• Through cookies and similar tracking technologies on our website.
• Through error logs and performance monitoring tools.

3.3 From Third Parties

• Payment processors (PayMongo, GCash, Maya) confirming transaction status.
• Identity verification services used during provider onboarding.
• Social login providers if you choose to register using Facebook or Google.
• Background check providers for Service Providers and KTrike Drivers.

KBahay uses your personal data for the following purposes:

4.1 Account Management

• Creating and managing your KBahay account.
• Verifying your identity and eligibility.
• Sending OTPs and authentication codes.
• Managing account security and fraud prevention.

4.2 Service Delivery

• Processing and fulfilling bookings, orders, and rides.
• Matching Customers with appropriate Service Providers or KTrike Drivers.
• Sharing your address and contact details with Providers to facilitate service delivery.
• Tracking delivery or service status in real time.

4.3 Payments

• Processing transactions and issuing receipts.
• Facilitating refunds and resolving payment disputes.
• Disbursing earnings to Service Providers.

4.4 Platform Improvement

• Analyzing usage patterns to improve app features and performance.
• Conducting research and analytics to enhance the user experience.
• Testing new features and resolving technical issues.

4.5 Communications

• Sending booking confirmations, reminders, and status updates.
• Responding to customer support inquiries.
• Sending important security and policy updates.
• Marketing communications and promotions (with your consent).

4.6 Safety & Security

• Detecting, preventing, and investigating fraud and abuse.
• Verifying Service Provider credentials and background checks.
• Monitoring for violations of our Terms and Conditions.
• Responding to law enforcement and legal requests.

4.7 Legal Compliance

• Complying with applicable Philippine laws and regulations.
• Maintaining records required by tax authorities and regulators.
• Responding to lawful requests from government agencies.

Under the Philippine Data Privacy Act (RA 10173), KBahay processes your personal data based on the following legal grounds:

KBahay does not sell your personal data to third parties. We share your data only in the following circumstances:

6.1 With Service Providers and Drivers

We share relevant information with the Service Provider, Rental Provider, Grocery Store, or KTrike Driver assigned to your booking, including your name, contact number, address, and booking details. This is strictly necessary to fulfill your booking.

6.2 With Payment Processors

Payment information is shared with our payment partners (PayMongo, GCash, Maya) for transaction processing. These processors are bound by their own privacy policies and applicable data protection regulations.

6.3 With Business Partners

We may share anonymized, aggregated data with our marketing and analytics partners. No personally identifiable data is shared in this context without your explicit consent.

6.4 For Legal Requirements

We may disclose your personal data if required to do so by law, court order, or lawful government request, including requests from the National Privacy Commission, law enforcement agencies, or the courts of the Philippines.

6.5 Corporate Transactions

In the event of a merger, acquisition, or sale of KBahay’s assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

6.6 With Your Consent

We may share your data for any other purpose with your explicit, informed consent.

KBahay retains your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with NPC guidelines.

KBahay implements industry-standard technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

8.1 Technical Safeguards

• End-to-end encryption for data in transit (TLS 1.2 or higher).
• Encryption at rest for sensitive personal data stored in our databases.
• Multi-factor authentication for administrative access to data systems.
• Regular security audits and penetration testing.
• Automated monitoring for unusual access patterns and potential breaches.

8.2 Organizational Safeguards

• Access to personal data is limited to authorized personnel on a need-to-know basis.
• All staff with access to personal data are bound by confidentiality obligations.
• Regular data privacy training for KBahay employees and contractors.
• A designated Data Protection Officer (DPO) oversees compliance.

8.3 Data Breach Response

In the event of a personal data breach that poses a real risk of serious harm, KBahay will notify the National Privacy Commission (NPC) within 72 hours of discovery and will notify affected users without undue delay, in accordance with NPC Circular No. 16-03.

Under the Philippine Data Privacy Act (RA 10173) and its Implementing Rules, you have the following rights as a data subject:

10.1 When We Use Location

KBahay requests access to your device’s location services for the following purposes:

• Matching you with nearby Service Providers, Rental Providers, or KTrike Drivers.
• Real-time driver tracking during KTrike rides.
• Automatically populating your address when placing orders or bookings.
• Verifying that you are within a supported service area.

10.2 Location Permissions

For most features, KBahay only requires foreground location access (location is accessed only while the app is open). KTrike Drivers may grant background location access to allow continuous location sharing during active trips. You can manage location permissions at any time through your device settings.

10.3 Opting Out

You may revoke location permissions at any time through your device settings. However, doing so will limit the functionality of location-dependent features such as KTrike and delivery services. In such cases, you may manually enter your address for service bookings.

10.4 Retention of Location History

KTrike trip location data is retained for 90 days for safety, dispute resolution, and analytics purposes, after which it is permanently deleted or anonymized.

With your permission, KBahay sends push notifications for the following purposes:

• Booking confirmations, reminders, and status updates.
• Chat messages from Service Providers.
• KTrike driver arrival and trip status alerts.
• Promotional offers, discounts, and new feature announcements.
• Important security alerts and policy changes.

You may manage push notification preferences in the KBahay app settings or through your device’s notification settings at any time. Opting out of promotional notifications will not affect transactional alerts related to active bookings.

12.1 Website Cookies

The KBahay website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies we use include:

• Essential cookies: Required for the website to function properly (login sessions, cart state).
• Analytics cookies: Help us understand how visitors interact with our website (e.g., page views, click paths).
• Preference cookies: Remember your settings and preferences for a better experience.
• Marketing cookies: Track ad performance and allow us to show relevant promotions (only with consent).

12.2 Managing Cookies

You can control or delete cookies through your browser settings. Note that disabling essential cookies may affect website functionality. A cookie consent banner will be displayed on your first visit to our website.

12.3 Mobile App Tracking

The KBahay mobile app uses similar technologies (device identifiers, analytics SDKs) to track in-app behavior. You may limit ad tracking through your device’s privacy settings (e.g., iOS: Settings > Privacy > Tracking; Android: Settings > Privacy > Ads).

KBahay integrates with the following third-party services that may process your personal data:

Each third-party service operates under its own privacy policy. We encourage you to review their policies. KBahay is not responsible for the privacy practices of these third parties beyond our contractual obligations.

The KBahay Platform is not intended for children under the age of thirteen (13). We do not knowingly collect personal data from children under 13 without verifiable parental consent.

Users between the ages of 13 and 17 may use the Platform only with the consent and supervision of a parent or legal guardian who agrees to these Terms and this Privacy Policy on their behalf.

If we discover that we have inadvertently collected personal data from a child under 13 without appropriate consent, we will take immediate steps to delete such data. Parents or guardians who believe their child’s data has been collected should contact us at privacy@kbahayservice.com.

Your personal data is primarily stored and processed in the Republic of the Philippines. However, some of our third-party service providers (e.g., Google, Firebase) may process data in other countries.

When transferring data outside the Philippines, KBahay ensures that appropriate safeguards are in place, consistent with NPC Advisory Opinion and RA 10173, including:

• Standard contractual clauses or data processing agreements with international processors.
• Transfers only to countries or organizations with adequate data protection levels.
• Your explicit consent for specific cross-border transfers where required.

If you believe KBahay has violated your data privacy rights or failed to comply with RA 10173, you have the right to file a complaint with the National Privacy Commission (NPC).

We encourage you to contact KBahay directly first, as we will make every effort to resolve your concern promptly and fairly before escalation to the NPC.

KBahay may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy.
• Notify you via push notification, email, or a prominent in-app notice.
• Where required by law, seek your renewed consent.

We encourage you to review this policy periodically. Your continued use of the Platform after the effective date of the revised policy constitutes your acceptance of the changes.

The most current version of this policy is always available at kbahayservice.com/legal/privacy.

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact our Data Protection Officer (DPO):