Kerja is a professional networking app for digital nomads, starting in Canggu, Bali. This policy explains what personal data the Kerja app and the website trykerja.com collect, why, who receives it, and your rights.
Kerja is run by Zayd Benhacine, an independent developer (“Kerja”, “we”). We are responsible for your personal data. Contact us at hello@trykerja.com.
Last updated: 5 October 2026.
We collect only what the app needs to sign you in and show who is at which café.
| Data | Where it comes from | Why |
|---|---|---|
| Email address | You (sign-in by code), or Apple or Google | To sign you in and send sign-in codes |
| Name | Google; Apple at your first sign-in, if you share it; none for code sign-in | To show who is at a café |
| Google profile picture link | Google, with your sign-in | Received from Google; not shown in the app today |
| Check-ins | You: the café, when you checked in and out | To show who is at a café now |
| Sign-in sessions | Your phone: IP address and device type, per signed-in device | To keep you signed in and protect your account |
| Crash reports | The app, when it fails | To fix bugs |
| Usage statistics | The app: one event when you sign in | To count sign-ins by method |
Location. Kerja asks for your location only when you tap the locate button on the map, and only while the app is open. Your position stays in the phone’s memory: it centres the map, places your dot and gives distances to cafés. Kerja never stores it and never sends it to us or anyone else. A check-in sends only the café you chose. When the map shows the area around you, Mapbox delivers the map images for that area; it sees the area, not your position.
Sign-in codes. We keep only a scrambled form of each code, and it expires after one hour. There are no passwords.
What we don’t collect. No contacts, photos, camera, microphone, advertising ID or cross-app tracking.
Legal bases (EU and UK): providing the service you asked for (account, check-ins); our legitimate interests (security, crash reports, statistics); your consent (location permission).
Other members see you only while you are checked in at a café.
These companies process data for us, each only for the job below. We don’t sell personal data.
| Provider | Job | What it receives |
|---|---|---|
| Supabase | Database and sign-in | Your account data and check-ins; your IP address with each request |
| Resend | Sends sign-in code emails | Your email address and the code |
| Apple | Sign in with Apple; TestFlight during the beta | Your sign-in; testers’ feedback |
| Sign in with Google; reCAPTCHA on the website’s contact form | Your sign-in | |
| Sentry | Crash reports | What failed, device model, system version, app version; IP address removed, no location, no account ID |
| PostHog | Usage statistics | One sign-in event with a random ID, device model, system version, app version, language, timezone; IP address discarded |
| Mapbox | Map images | Your IP address and the map area on screen; an anonymous usage count. Mapbox telemetry is off |
| Expo | App updates | A random install ID, platform, app version, your IP address |
| GoDaddy | Hosts trykerja.com | Website visits, contact-form messages and email-list sign-ups (see Website) |
| ImprovMX | Forwards mail to hello@trykerja.com | The emails you send us |
Mapbox’s own setting. The map’s (i) button includes Mapbox’s telemetry choice. Kerja turns telemetry off; if you turn it on there, Mapbox collects data under its own privacy policy, and Kerja turns it off again the next time the app starts. Kerja never asks you to turn it on.
When you sign in with Apple or Google, their own privacy policies apply to that sign-in.
Our database is in Singapore; crash reports and statistics stay in the EU. Sign-in code emails go through Resend’s servers in Japan. Other providers above may process data in other countries, including the United States.
When data leaves the EU or the UK, we rely on our providers’ safeguards, such as the European Commission’s Standard Contractual Clauses. For users in Indonesia, we handle personal data in line with Law No. 27 of 2022 on Personal Data Protection.
Your account data and check-ins stay until you delete your account; the rest expires on its own.
| Data | Kept for |
|---|---|
| Account, name, email | Until you delete your account |
| Check-in history | Until you delete your account |
| Sign-in sessions | Until you sign out or delete your account |
| Sign-in codes | 1 hour |
| Supabase service logs (with IP addresses) | Up to 7 days |
| Crash reports | Up to 90 days |
| Usage statistics | 1 year |
| Emails to hello@trykerja.com | As long as needed to answer you |
You can delete everything we hold about you from inside the app.
Age. Kerja is for people 18 and over. If you’re under 18, please don’t use it.
Security. Your sign-in on the phone is encrypted, with its key in the phone’s secure storage. Data travels encrypted, and database rules let each person read only what they’re allowed to see.
Website. trykerja.com is hosted by GoDaddy. Its contact form collects your name, email address and message, which GoDaddy stores and forwards to us; if you tick its box, you also join our email list for updates and promotions, and you can unsubscribe at any time. Google’s reCAPTCHA protects the form. We keep form messages as long as needed to answer you, and list sign-ups until you unsubscribe. The cookie banner lets you accept or decline cookies that measure traffic; GoDaddy’s own privacy policy covers them. This policy itself is published at legal.trykerja.com, hosted by GitHub Pages, which receives visitors’ IP addresses.
Changes. We update this page whenever the app starts collecting something new, for example when profiles, photos or messages arrive. The date at the top shows the last change, and we announce important changes in the app.
Contact. hello@trykerja.com