Privacy policy

1. What this document is about

GoTask is a mini app inside Telegram: a map of tasks nearby, responses from executors, a chat about the task and settlements. To make that work, the app stores data about you. Everything that is stored is listed below, section by section.

Every point answers four questions: what we collect, why, how long we keep it and who we show it to. If no retention period is set in the app, that is what it says — “not limited” — instead of an invented number.

2. Signing in through Telegram

When you sign in, Telegram passes the app a signed set of data about you: your numeric Telegram identifier, first and last name, username (@username, if you have one) and a link to your profile photo. Nothing else comes from Telegram: no phone number, no contact list, none of your conversations.

Why: to recognise you without a password and to show you to other people — by name and photo. The Telegram identifier is also needed so the bot can write to you in a private chat.

The name and the photo are refreshed at every sign-in, from whatever is currently set in your Telegram. They are kept as long as the GoTask account exists: the period is not limited.

Who sees them: the name and the photo — everyone who sees your tasks, responses, reviews and profile. The Telegram identifier and the @username are never given out: only the server and the service administrator see them.

When you register, we ask you to state three things about yourself: your first name, your city and your age. There is no way past that screen without them. Beside them we ask for your last name — that one is optional, and registration goes through without it. Each field is described separately — what it is, what it is for and who sees it.

The first name is what you are called in the app. Everyone who opens your profile, your task or your response sees it. With “Hide name and photo” switched on, they see “Hidden profile” instead. Erased when the profile is deleted.

The last name is for disputes, support threads and lawful requests: it is what tells one person from another when money is involved. Stating it is optional, and it can be cleared in the same place it was filled in. Only you and the service administrator see it: it is in no profile, no feed, no response and in no answer this server gives to anybody else. Erased when the profile is deleted.

The city is what tasks are matched by. Only you and the service administrator see it; somebody else’s profile shows no city. Erased when the profile is deleted.

The age is for one thing only: making sure you are 18 or older. We keep two numbers — how old you said you were and the day you said it — and add them up on every request, so the age grows by itself and gains a year on each anniversary. Nothing else reads it — not the feed, not tasks, not the profile. Only you and the service administrator see it. It is stated once and does not change: a second number is refused, the same one included, though the profile can be deleted and signed up for again. Erased when the profile is deleted.

We do not collect or store dates of birth. We used to, in place of the age; for everybody who registered before that change the date of birth was deleted from the database during an upgrade, and the age it gave on that day was written in its place. The day and the month of birth are kept nowhere.

On top of what is required you may write more about yourself: a name to be shown under instead of the one you stated, and a short piece about yourself (profile → “About me”). Both are seen by everyone who opens your profile; neither is required, and both can be cleared in the same place they were filled in. If you switched on “Hide name and photo”, the text about yourself is hidden with them.

We keep the moment you last reached the server — one time, with no history of visits: each new one replaces the previous. What leaves the server is not that moment but one word about you: “online”, “offline” or “on a job”. Other people see it as a ring around your photograph — in your profile and on the map of people, if you are on it. “On a job” is not stored at all: it is the answer to whether you hold a task in progress right now. With “Hide name and photo” switched on, nothing leaves at all — no word and no ring. Erased together with the profile.

After the sign-in the server issues the app a temporary access key valid for a day. It lives only in the memory of the open tab: it does not reach cookies, browser storage or the address bar. Close the app and the key is gone.

3. Tasks, responses and reviews

The task you create consists of what you put into it yourself: title, description, category, price and currency, deadline, photos, the address in words and the point on the map. A task is the public part of the service: other people see it in the feed and on the map. Task photos lie in public storage under unguessable links — whoever gets such a link opens it without signing into the app.

A response to a task keeps your text and the distance to the task, calculated at the moment of the response. It is the distance — a number of metres — that is stored, not your coordinates. Only the author of the task sees the list of responses: it is not shown to the other people who responded.

A review and a rating after a finished task are public and signed with the name of the person who wrote them. Ratings add up into two scores (as an executor and as a customer), the number of finished tasks, the share of tasks without a dispute and the executor level — these numbers are visible to everyone on the profile.

The retention period is not limited: tasks, responses and reviews are not deleted, neither by time nor at your request — they are part of other people’s deals and other people’s reputation.

4. Location

The app asks for permission to use geolocation exactly when it is about to show “near you”. Refusing is a normal answer: the map and the feed work without it, the map is then centred on a default point, and distances are simply not shown.

When you look at the feed or the map, the coordinates go to the server as request parameters — so it can calculate the distance to tasks and sort them. The app makes no separate record of that: those coordinates are not stored anywhere.

If you switched on “Open to invitations” (profile → “Invitations”), the app stores where you are every time you open it. One point and the moment it was written are kept — no history, no trail: every new point replaces the previous one. That is what the switch exists for: without a place there is no telling who is near a task, and a customer will not invite you.

On its own, that consent gives no coordinates out. A customer inviting executors sees only the distance to their own task — the place itself stays on the server, and the distance is measured from a coarsened grid node, not from your door. A point older than a day is not used at all.

If you switched on “Show me on the map” as well (profile → “Map of people”), your point is published as a point. A circle with your name, your photo and your level appears on the map of people — where you actually are, not in a district and not “approximately”. It is seen by members: signed in through Telegram, adults, past identity verification — and only inside the piece of the map they are looking at that minute.

This is a consent of its own, and it is off by default on every account. “Open to invitations” on its own does not put you on the map, and switching invitations off switches the map off with them. You are also absent from the map in other cases: if your point is older than a day, if “Hide name and photo” is on, if the profile is deleted, and if there is a block between you and the person looking — in either direction.

It is kept while the switch is on: turn it off and the point is erased at once, together with the consent to store it. Deleting the profile erases it too. While the switch is off — and it is off on every account by default — the app sends no coordinates and the server accepts none.

The point of a task and its address are what you set yourself when creating it; they are stored with the task and are public, just like the task.

If you switched on “tasks nearby” notifications, the point and the radius around it are stored: they are that subscription — the server uses them to choose which new task to write to you about. You set the point yourself. When you switch such notifications off, the subscription is not deleted but switched off: the point, the radius and the categories stay, so you do not have to set them again. The retention period is not limited.

5. The selfie for identity confirmation

Identity confirmation is for executors: without an accepted selfie one cannot respond to tasks, accept invitations or receive payouts. A customer is vouched for by their payment — publishing tasks, paying and writing to people work without a selfie, and browsing tasks, the map and profiles is open to anyone. Besides that, the selfie puts an “Identity confirmed” badge next to your name.

What is stored: one photo — your selfie — the date it was sent, the date of the decision, who decided (an administrator or the automatic check) and the reason for a refusal, if the answer was “no”. You are not asked for documents, and there is no need to send them here.

The server looks at the selfie first: it checks that the frame holds exactly one face of acceptable size, and if so it accepts the photo at once. This is face detection, not recognition: the shot is compared with nobody, no biometric templates, vectors or hashes are built or stored; what the check leaves behind is one flag, “accepted automatically”. What the server did not let through — and a part of what it did, picked at random as a spot check — is looked at by an administrator. The same face detection is applied to the profile photo.

The selfie lies in closed storage: no permanent link to it exists. A link is created for one viewing and stops working after an hour, and it is given to two people — you and the administrator who reviews the request. Other users only see the blue check next to your name, not the photo.

One photo is kept: a new one replaces the previous one. No archive of rejected selfies is kept, and that is deliberate. The retention period of the selfie that lies there now is not limited.

6. The chat about the task

The task chat stores everything sent into it: the text of the messages, photos, videos, voice messages, documents, the time of sending and the time of reading.

Exactly two people can read the conversation — the customer and the executor of that task. The right is checked on every request for history and on every connection to the chat. Administrators do not read the conversation: there are no chats in the administrator panel at all.

Chat attachments lie in closed storage, links to them live for an hour and are created anew for every viewing. There is one exception, and it is fair to name it: photos sent to a chat before this rule appeared stayed in public storage and still open by a direct link.

A notification about a new message carries the beginning of the text — up to 120 characters. It arrives in Telegram and stays in the notification log.

The retention period is not limited: messages are not deleted, and there is no “clear the conversation” button in the app.

7. Notifications and the bot

The notification log stores what you were told about: the type of the event, the task, the values for the text (the title of the task, the name of a person, the price, the beginning of a message) and the read mark.

Notifications are delivered by the GoTask bot — into a private chat with you; your Telegram identifier serves as the address. The bot has no database of its own: it stores nothing about you and only passes on messages and Telegram payment answers.

The retention period of the log is not limited.

8. Money

A subscription is paid with Telegram Stars. The payment is carried out entirely by Telegram: the app neither sees nor stores card numbers or payment details. What is left of a payment is its Telegram number, the plan bought and its period, the number of stars, the auto-renewal flag, the service string of the invoice, the date of the payment and the date of a refund, if there was one.

Settlements on tasks go in TON. What is stored: the address of the wallet you linked (which is also the payout address), amounts, transfer hashes, the sender address and the comment of the incoming transfer. The app does not see the keys to your wallet: the signature is given by your wallet, and TON Connect establishes the link with it.

Separately and plainly: a blockchain is public. Everything that went onto the chain — addresses, amounts, times — is visible to anyone without us, and neither we nor you can delete it.

Inside the app your balances by currency and a ledger of operations are stored: what happened, for what amount, on which task and when. The ledger is append-only — a row cannot be removed or corrected, because it is exactly what confirms every payout.

Who sees them: the amounts and the operations — you. An administrator — when confirming a payout or settling a dispute. The retention period of money records is not limited.

9. Reports, blocks and disputes

A report stores who it is about, the reason, your text and what it concerns — a task or a message. Support reads it. The person reported is not told who reported them, and nothing happens automatically because of a report.

A block is stored as a pair “who blocked whom”. The blocked person is not told about it. A block can be lifted — then the record of it is deleted.

A dispute on a task stores the reason, both sides, the administrator’s decision, who took it and when. It is kept with the task, the period is not limited.

10. Who else sees this data

Telegram — because the app works inside it: signing in, delivering notifications and paying with stars all go through Telegram, by its own rules.

OpenStreetMap — the map is drawn with images from their servers. A request for such an image shows them your network address and the piece of the map you are looking at. Your coordinates are not sent there.

The TON network — transfers and addresses are, as said above, public by the design of a blockchain.

Service administrators — within the administrator panel: people and their plans, tasks, disputes, reports, payout requests and selfies waiting for review. There are no conversations in the panel.

Nobody else. There are no advertising counters and no analytics systems in the app: apart from the Telegram code and the OpenStreetMap map, it loads nothing from third parties.

11. What we do not collect

We do not collect identity documents, payment details, contacts from your address book or the history of your conversations outside the task. The camera and the microphone are switched on only by your action — when you take a photo or record a voice message yourself.

12. How long all of this is kept

No retention periods are set in the app. While your account exists, everything listed is kept without a time limit: there is no automatic cleanup and no deletion “after so many days” in the service.

Short periods exist for three things only, and they are not data retention: a link to a closed file lives an hour, permission to connect to a chat lives half a minute, the sign-in key lives a day.

13. Deleting data

The rule is this: personal things are erased, traces of deals stay. We erase what belongs to you as a person: the first name, the last name, the age and the day it was stated, the city, the photo, the username, the text about yourself, the selfie, the last stored place, the moment you last reached the server, the linked wallet, the notification subscription and the settings.

What stays are tasks, the reviews other people wrote about you and money records. These are other people’s deals and the proof of settlements: they cannot be erased at one side’s request — otherwise the other side would lose the proof that the work was done and the money was paid.

You can delete the profile in the app: profile → “About me” → “Delete the profile”. Deletion is irreversible for personal data: neither you nor we can restore what was erased.

While something is still on you, the deletion is postponed, and the app says what exactly: an unsettled dispute, an unfinished task, money on the balance or a money request an administrator is still handling. This is not a formality: in each of the four cases another person is waiting for you, or money is waiting that only you can take.

If you sign in again with the same Telegram account, the profile comes back — the very same one, with the same reviews and history of deals, but without what was erased. A new profile is not created instead of the old one: otherwise deleting would be a way to get rid of your reviews.

When a profile is deleted, we ask Telegram ourselves to stop the auto-renewal of a Stars subscription. If Telegram is unavailable at that moment, the request is not lost — we repeat it until it goes through. This is not instant: the cancellation may not happen the same second, and if Telegram stays unavailable for a long time, the next charge may go through before it. If that happens, write to us or to Telegram support: it is Telegram that refunds the stars. You can also switch auto-renewal off yourself, in Telegram, in your list of subscriptions. The deletion of the profile does not wait for any of this and is not postponed because of it.

14. Writing to support

When you write to us from the app, the text of the message, your account and the time are saved. Service administrators read the text, and it is also forwarded to them in Telegram so that they can answer you with a message. Support messages are not deleted automatically.

15. Changes

This text changes along with the app: a new kind of data collection appears — a point about it appears too. The document is always available by the link next to the terms of service.

16. Disclaimer

This text has not been reviewed by a lawyer. It is written from the way the service works — from what is really collected and stored in the code — and is not an opinion on compliance with the law. The owner of the service is responsible for the legal side of this document.