1. Who we are
MyKaniko is a vehicle-service marketplace that connects vehicle owners (“Customers”) with service providers (“Mechanics”) in the Philippines. For the purposes of the Data Privacy Act, the Personal Information Controller is:
- MyKaniko Solutions Inc.
- Registered office: 2nd Floor JM Bldg, Margarita 23, Purok 1, Milagrosa (Tulo), Calamba 4027, Philippines
- Data Protection Officer — privacy@mykaniko.com
“We”, “us”, and “our” refer to MyKaniko. “You” refers to any Customer or Mechanic who uses our services.
2. Data we collect
We collect only the data we need to run the marketplace. Depending on how you use MyKaniko, this includes:
From everyone
- Account details — mobile number, name, and your role (Customer or Mechanic).
- Authentication data — a one-time password (OTP) sent by SMS and a hashed 6-digit MPIN. We never store your MPIN in readable form.
- Precise location — GPS location, used to match you with nearby mechanics and to show live travel tracking during a booking.
- Device & usage data — app version, device identifiers, push-notification tokens, and diagnostic/error logs.
- Communications — in-app chat messages between Customers and Mechanics, and messages you send our support team.
From Customers
- Vehicle information — brand, model, colour, type, and (optionally) plate number.
- Alternate contact person — if you choose to add one, their name and phone number.
- Booking details — service address, landmarks, schedule preferences, and notes you provide.
From Mechanics
- Verification documents (sensitive personal information) — government-issued ID, a selfie, an NBI or police clearance, Certificate of Employment (COE), and TESDA NC II certificate details, submitted when you apply.
- Proof of work — photos and a short engine-on video you upload to confirm a completed service, and photos of parts receipts.
Payments & wallet
- Wallet & transaction records — top-ups, service charges, platform commission, holds, and settlements. Card or e-wallet payment details are processed by our payment provider; we do not store full card numbers.
3. How we use your data
We use your personal data to:
- Create and secure your account and verify your identity;
- Match Customers with nearby Mechanics and enable bookings, live location tracking, chat, scheduling, and completion confirmation;
- Verify Mechanic applications and maintain trust and safety on the platform;
- Process payments, wallet top-ups, commissions, holds, settlements, and disputes;
- Send service notifications, reminders, and OTPs;
- Detect, prevent, and investigate fraud, abuse, and violations of our Terms;
- Provide customer support and resolve disputes between Customers and Mechanics;
- Improve, troubleshoot, and secure the app (including crash and error monitoring); and
- Comply with legal, tax, and regulatory obligations.
4. Legal bases for processing
Under the Data Privacy Act, we process your personal data on one or more of the following bases:
- Your consent — for example, when you agree to this Policy at sign-up, allow location access, or (for Mechanics) submit verification documents;
- Performance of a contract — to deliver the services you request through the marketplace;
- Compliance with a legal obligation — such as tax, accounting, and regulatory record-keeping; and
- Legitimate interests — such as securing the platform and preventing fraud, balanced against your rights.
Where processing relies on consent, you may withdraw it at any time (see Your rights), without affecting processing already carried out.
6. How long we keep your data
We keep personal data only for as long as necessary for the purposes above, then delete or anonymise it. In particular:
- Account data — for as long as your account is active, and for a reasonable period afterwards.
- Transaction, wallet, and commission records — kept for the period required by Philippine tax and accounting laws (which may be several years), even after your account is deleted.
- Dispute and fraud-prevention records — kept as long as needed to resolve the matter and protect the platform.
- Evidence for completed jobs — proof-of-work photos and video, and any parts receipts, are kept as a record of the service delivered and to resolve later disputes or tax queries, even after your account is deleted.
- Mechanic verification documents — kept while your application is active and, if approved, for the duration of your engagement; rejected applications are kept only for the limited period needed to prevent abuse.
When you delete your account, we delete or anonymise your personal data except for the limited records we are legally required or permitted to retain (see Account deletion).
7. How we protect your data
We use organisational, physical, and technical measures to protect your data, including encryption of data in transit, hashed MPINs, access-controlled storage, pre-signed time-limited links for uploaded media, and role-based access for staff. No system is completely secure, but we work to protect your data and to respond quickly to incidents.
If a personal data breach is likely to give rise to a real risk of serious harm, we will notify the National Privacy Commission and affected individuals in accordance with the Data Privacy Act (generally within 72 hours of knowledge of the breach).
8. Your rights
As a data subject under the Data Privacy Act, you have the right to:
- Be informed about how your data is processed;
- Access the personal data we hold about you;
- Object to processing, including direct marketing;
- Rectify inaccurate or outdated data;
- Erase or block your data where allowed by law (right to be forgotten);
- Data portability — obtain a copy of your data in a commonly used electronic format;
- Withdraw consent at any time; and
- Be indemnified for damages due to inaccurate, unlawfully obtained, or unauthorised use of your data.
To exercise any of these rights, contact us at privacy@mykaniko.com. We may need to verify your identity before acting on your request.
9. Account deletion
You can request deletion of your account and associated personal data at any time, from within the app or via the web. See our Account Deletion page for how it works, what is deleted, and what we are required to keep.
10. Children
MyKaniko is intended for users aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can remove it.
11. Changes to this Policy
We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app. Your continued use of MyKaniko after changes take effect means you accept the updated Policy.
12. Contact us & complaints
For questions or to exercise your rights, contact our Data Protection Officer at privacy@mykaniko.com or by post at 2nd Floor JM Bldg, Margarita 23, Purok 1, Milagrosa (Tulo), Calamba 4027, Philippines.
If you believe your data privacy rights have been violated, you also have the right to lodge a complaint with the National Privacy Commission (info@privacy.gov.ph).