Privacy Policy

Last Updated: 4th May 2026
Platform: FriendlyFeat
Data Controller: Kittitude Labs Limited, Malta (in founding)

This Privacy Policy explains how Kittitude Labs Limited (“we”, “us”, or “our”) collects, uses, and protects personal data when you use the FriendlyFeat platform. We are committed to complying with the General Data Protection Regulation (GDPR) and the Data Protection Act of Malta.

1. Data We Collect
To operate the platform, we collect the following categories of personal and organizational data:

Account Information: Name, email address, password, age confirmation (must be 18+), and account type (Individual, Company, Local Government, NGO, School, or Club).
Profile & Task Data: Information you voluntarily provide in listings, including task descriptions, general location data, budgets, bids placed, and your user ratings or reviews.
Communications: Content of private messages sent through our platform, support requests, and user reports/flags.
Financial Information: For entities holding a paid subscription, we collect billing details and transaction history. Note: We do not collect or process payment information for individual tasks arranged between users.
Technical & Usage Data: IP addresses, browser types, device information, login timestamps, and cookies necessary for platform functionality (e.g., maintaining user sessions).

2. How We Use Your Data (Legal Basis)
We process your data under the following lawful bases:

Performance of a Contract: To create and manage your account, publish tasks, process bids, facilitate private messaging, and manage entity subscriptions.
Legitimate Interests: To maintain platform security, prevent fraud, enforce our Terms of Service, moderate flagged content, and improve our technical infrastructure.
Legal Obligation: To comply with Maltese law, tax reporting requirements, and the EU Digital Services Act (DSA) regarding illegal content and moderation logs.

3. Data Sharing and Visibility

Publicly Visible Data: Task listings, including the general location, task description, and the Tasker’s profile name/entity name, are visible to users.
User-to-User Sharing: When a bid is placed or accepted, the relevant users will see each other’s profiles and be able to communicate via private messaging.
Third-Party Service Providers: We share necessary data with trusted processors (e.g., web hosting, email delivery services, subscription payment gateways) under strict confidentiality agreements.
Legal Authorities: We may disclose your data to law enforcement or regulatory bodies in Malta or the EU if legally compelled to do so, or to protect the vital interests of any person.

4. Communications and Moderation
FriendlyFeat provides a private messaging system for users to coordinate tasks. To ensure user safety and comply with our legal obligations, messages are not end-to-end encrypted. If a conversation or user is flagged for violating our Terms of Service, platform administrators reserve the right to access, review, and retain those communications for moderation and safety purposes.

5. Data Retention
We retain your personal data for as long as your account remains active. If you delete your account, we will erase your personal data within 30 days, except where we are legally required to retain it (e.g., subscription invoice records for tax purposes, or archived records of flagged disputes and bans for legal defense).

6. Your GDPR Rights
Under the GDPR, you possess the following rights regarding your personal data:

Right of Access: Request a copy of the data we hold about you.
Right to Rectification: Correct inaccurate or incomplete data.
Right to Erasure (“Right to be Forgotten”): Request the deletion of your account and personal data.
Right to Restriction: Request we temporarily suspend processing your data.
Right to Data Portability: Receive your data in a structured, commonly used format.
Right to Object: Object to processing based on legitimate interests.

7. Cookies We use essential cookies to keep you logged in and ensure the platform functions securely. We do not use third-party tracking or advertising cookies without your explicit consent.

8. Contact Information
If you have any questions about this Privacy Policy or wish to exercise your GDPR rights, please contact our Data Protection Officer at:
Email: thias@kittitude.com
Address: Kittitude Labs Limited, 48, Flat 3, Triq San Frangisk, Floriana

9. Changes to this Policy
We may update this Privacy Policy from time to time. Significant changes will be communicated via email or platform notification prior to taking effect.