Privacy Policy — Tasknex

Effective date: 8 July 2026

This Privacy Policy explains how Edwin Wong (the interim operator of Tasknex) ("we", "us", "our") collects, uses, and protects personal data when you use the Tasknex mobile application (the "App").

Tasknex is a workforce attendance and field-activity application used by brand ambassadors and other field staff ("you") on behalf of the agencies, brands, or employers that engage you (each, an "Organization"). We provide the App as a service to these Organizations and process your personal data both to operate the App and on the relevant Organization's behalf.

If you have questions about this policy or how your data is handled, contact us at privacy@tasknex.ai.

1. Information we collect

We collect the following categories of personal data:

Identity and profile: your name, mobile phone number, employment type, and the Organization or agency you are associated with.
Authentication data: a personal identification number (PIN), stored in hashed form; one-time passcodes (OTP) sent by SMS; and session identifiers used to keep you signed in.
Location data:your device's GPS location, collected when you clock in and periodically during an active shift, used to verify your presence at the assigned outlet and to monitor compliance with location ("geo-fence") requirements.
Attendance and shift data: clock-in and clock-out times, shift dates, break periods, and time spent at an outlet.
Field activity data: records you enter during a shift, such as customer or order logs, order values, and customer or transaction types, along with the outlet they relate to.
Photos: images you capture with your camera or select from your photo library to attach to a shift or attendance record.
Device and technical data: information collected automatically to operate, secure, and improve the Service, including your IP address, device identifiers, app version, operating system and device type, push-notification tokens, and usage and diagnostic logs.

2. Website and enquiries

If you visit our website or contact us — for example by email or through an enquiry form — we collect the contact details and the content of the message you provide, so that we can respond to you and for our legitimate business interests in operating and improving the Service. You can reach us for general enquiries at support@tasknex.ai.

3. How we use your data

We use your personal data to:

verify attendance and confirm you are at the correct outlet when clocking in;
monitor location/geo-fence compliance during your shift;
record shifts, breaks, and field activity, and make this information available to your Organization for attendance, payroll, and reporting purposes;
authenticate you (PIN and SMS one-time passcodes) and keep your account secure, including enforcing single-device sign-in;
operate, maintain, and improve the App; and
comply with legal obligations and prevent fraud or misuse.

4. Legal basis for processing

Where the Thailand Personal Data Protection Act (PDPA) or similar laws apply, we process your data on the basis of: performance of your engagement with the Organization; the legitimate interests of the Organization in managing its field workforce; your consent (for example, location access, which you can manage through your device settings); and compliance with legal obligations.

We do not sell your personal data, and we do not share it with third parties for their own advertising or marketing. We share data only as follows:

With your Organization:the agency, brand, or employer that engages you can access the data relating to you — attendance, location/compliance, shift, and field-activity records — through the App's administrative dashboard. This is a core function of the service.
With service providers: we use trusted providers to run the App, including Supabase (database, storage, and authentication hosting), Vonage (SMS one-time passcode delivery), Expo / EAS (app build, delivery, and notifications), and Apple and Google (app distribution and push-notification delivery). These providers process data only to provide their services to us.
For legal and safety reasons: where required by law, regulation, or legal process, or to protect rights, safety, or property.

6. No sale of data; no marketing use

We do not sell personal data. We do not use Personnel data for our own advertising or marketing, and we do not share it with third parties for their own advertising or marketing purposes.

7. Third-party integrations

Where an Organization enables an integration with a third-party provider — for example an attribution or analytics provider — relevant data may be exchanged with that provider as configured by the Organization. Any processing carried out by that provider is governed by the Organization's own arrangement with it, and not by this policy. The Organization is responsible for enabling such integrations and for its arrangements with the relevant provider.

8. Change of control

Edwin Wong currently operates Tasknex as its interim operator. If Tasknex, or its business or assets, is involved in a merger, acquisition, reorganization, transfer to a new operating entity, or sale of assets, personal data may be transferred to the successor entity as part of that transaction. Any successor entity will continue to be bound by this Privacy Policy, or by a policy that is materially equivalent in the protections it provides. We will take reasonable steps to notify affected users or Organizations of any such change where required.

9. International transfers

Some of our service providers process data on servers located outside Thailand. Where we transfer personal data internationally, we take steps to ensure it is protected in line with applicable data protection laws.

10. Data retention

We retain your personal data for as long as needed to provide the service and as instructed by the relevant Organization, and thereafter for any period required to meet legal, accounting, or reporting obligations. When data is no longer needed, we delete or anonymize it.

11. Security

We use reasonable technical and organizational measures to protect personal data, including encryption of data in transit, hashed storage of PINs, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Your rights

Subject to applicable law, including the PDPA, you have the right to access, correct, update, or request deletion of your personal data; to object to or restrict certain processing; to withdraw consent where processing is based on consent; and to request a copy of your data. Some data is controlled by your Organization, and we may direct such requests to them. To exercise your rights, contact us at privacy@tasknex.ai. You also have the right to lodge a complaint with the relevant data protection authority (in Thailand, the Office of the Personal Data Protection Committee).

13. Data deletion and account removal

You can request deletion of your personal data — including your name, mobile phone number, location records, attendance and field-activity records, and photos — at any time.

To request deletion, email us at privacy@tasknex.ai from, or quoting, the mobile number associated with your account; or ask your Organization's administrator to remove your account. Because your account is created and managed by your Organization, we may coordinate deletion requests with them.

When we receive a verified deletion request, we delete your personal data from our active systems within 30 days. We may retain limited records where required to meet legal, accounting, tax, or employment obligations; such records are deleted once those obligations end.

General enquiries: support@tasknex.ai

Privacy requests: privacy@tasknex.ai