Privacy Policy

XOLV ("we", "our", or "the Platform") is operated by CYT MODEATS ENTERPRISE (SSM Registered), Malaysia. This Privacy Policy explains how we collect, use, and protect your personal information when you use the XOLV mobile application.

1. Information We Collect

• Account Information: Name, email address, and profile photo (via Google Sign-In)
• Identity Verification (KYC): Malaysian Identity Card (MyKad) front and back images, and a real-time selfie photo
• Location Data: GPS coordinates when you publish or browse tasks (with your explicit permission)
• Financial Data: Wallet balance, transaction history, task payment records
• User-Generated Content: Task descriptions, photos attached to tasks, chat messages
• Device Information: Device type, operating system, and FCM push notification token

2. How We Use Your Information

• To verify your identity and comply with anti-fraud requirements
• To match task employers and workers based on proximity
• To process escrow payments and maintain your wallet balance
• To send push notifications about task updates and messages
• To resolve disputes between users
• To improve platform safety and user experience

3. Identity Verification (KYC) Data

Your MyKad images and selfie are stored securely in Firebase Cloud Storage and are only accessible by authorized XOLV administrators for identity verification purposes. We do not share this data with third parties. Once verified, your KYC status is stored as "approved" and your documents are not routinely accessed again.

4. Location Data

Location access is requested only when publishing or viewing tasks. We use your GPS coordinates to calculate task proximity and match you with nearby opportunities. We do not track your location continuously or in the background.

5. Data Sharing

We do not sell your personal data. We share data only with:

• Google Firebase: For authentication, database, storage, and push notifications (Google Privacy Policy applies)
• Other Users: Your display name and task-related information are visible to relevant parties (e.g., your name is visible to employers when you apply for a task)
• Legal Authorities: When required by Malaysian law or court order

6. Data Retention

We retain your account data for as long as your account is active. KYC documents are retained for compliance purposes in accordance with Malaysian financial regulations. You may request deletion of your account and associated data by contacting us.

7. Your Rights (Malaysian PDPA 2010)

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access your personal data held by us
• Correct inaccurate personal data
• Withdraw consent for data processing (note: this may affect your ability to use the platform)
• Request deletion of your account data

8. Security

We use Firebase's enterprise-grade security infrastructure. All data is transmitted over HTTPS. Access to KYC documents is restricted to authorized administrators only. However, no system is 100% secure and we cannot guarantee absolute security.

9. Children's Privacy

XOLV is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If we discover that a minor has registered, we will delete their account immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via in-app notification. Continued use of the platform after changes constitutes acceptance of the updated policy.