CurbTask Privacy Policy

Effective November 2, 2026. CurbTask is operated by HIKEPILOT LLC. For privacy questions, access or correction requests, or account deletion, email support@curbtask.com.

Information we collect

We process your account name, email, optional username and authentication records; service addresses, task descriptions, quotes, assignments and messages; photos you choose to upload; notification preferences; and payment, earnings and support records. Worker onboarding can include an application, profile photo, identity document, service area and qualifications. We also keep operational records needed to run and secure the service.

When you send a request, authorized CurbTask staff may also see the first wording you typed before you edited it.

Workers who set work areas choose a ZIP code and a distance. We use them only to decide which jobs to offer, and we do not collect a worker’s exact location. The work-areas and My day maps load their street images from OpenFreeMap, which receives your device’s IP address and the part of the map being shown, as any website you visit would. When a worker taps Navigate, the job address opens in the map app they choose, which receives that address.

If you choose Continue with Google or Continue with Apple, Google or Apple tells us your name, your email address (with Apple this can be a private relay address that forwards to you) and an account ID for your Google or Apple account, so you can sign in without a CurbTask password. We never receive your Google or Apple password, your contacts or other account data. For Apple we also keep a sign-in token, only so we can revoke CurbTask’s access when your account is deleted.

Our hosting provider processes network and request information, including IP addresses, approximate location inferred from an IP address, request times, device or browser information, and diagnostic logs. This supports service delivery, performance monitoring and security. This is separate from the service address you enter; the app does not request device GPS location.

How information is used and shared

We use information to provide accounts, assess and arrange tasks, match workers, communicate about work, process payments, handle support and protect against abuse. Customers, assigned workers and authorized managers receive information needed for their roles. An address or task detail may be visible to eligible workers when work is offered.

Messages. Messages between a customer and a worker about a task are stored by CurbTask. Authorized CurbTask staff can read them, including messages sent before this notice was updated, to help with your service, resolve problems and disputes, and keep everyone safe. Staff cannot send messages in your chat with a customer or worker. If we need to reach you, we do it in a separate CurbTask support conversation. We record each time staff open a chat. Support conversations with CurbTask are read by our support team.

Our hosting, database, email and payment providers process information to deliver those services. Stripe collects card and bank details through its hosted flows; CurbTask keeps payment identifiers and status rather than full card or bank account numbers. When AI task assessment is enabled, submitted task descriptions and selected task photos are sent to OpenAI to assist with scope and pricing. Worker identity documents are not part of that task-assessment input.

If you turn on alerts in the Android app, Google Firebase Cloud Messaging receives a device identifier for the app and a short, general alert text (such as “New request to review”) so it can deliver them. The identifier is deleted when you sign out.

If enabled in your email preferences, we may also send service suggestions and seasonal offers. You can turn off these optional emails in account settings or use their unsubscribe link. Essential account and service messages are handled separately.

We may disclose records when required by law or needed to address fraud, safety concerns or disputes. Providers may process information in countries other than yours.

SMS / text messages

If you turn on text messages in Settings › Text messages, we collect your mobile number, the time you agreed and, if you stop, the time you stopped. We use them only to send the booking and account texts you asked for (for example a booking confirmation or a card that needs attention), and to honor STOP and HELP. We do not send marketing texts.

Mobile numbers and text-message consent are not shared with third parties or affiliates for their marketing or promotional purposes. Our messaging provider, Twilio, processes your number and the text itself only to deliver it for us. Msg & data rates may apply.

To stop, reply STOP to any text, or untick the box in Settings › Text messages. Reply HELP for help. We keep a record that you stopped so we never text you again until you turn texts back on.

Security and device storage

Passwords are hashed and access is restricted by account role. Browser sessions use cookies. The native app uses secure device storage for session credentials. Drafts and queued photo uploads use separate local storage to support interrupted work. No storage or transmission system can guarantee absolute security.

Your controls

You can change optional email preferences in account settings and manage saved payment methods through the payment settings flow. You control camera, photo and notification permissions through your device. Contact us to request access to or correction of your information, or to raise a privacy concern. We may verify that a request comes from the account owner.

Account deletion and retention

In Settings, select “Delete account” and type DELETE. If you cannot sign in, email support@curbtask.com from your account email. You can also request deletion of specific personal data without closing the account. Do not send your password or identity documents in your initial email.

If nothing is open on the account, it is deleted immediately and you are signed out. If there are open tasks or jobs, a payment still being settled, earnings still to be paid out or a dispute, we keep the request, settle those first and complete deletion within 30 days. Deleting does not cancel a booking by itself. We explain any additional steps or retained records to you.

When deletion is completed, we remove account credentials (including any Google or Apple sign-in link, and we revoke CurbTask’s Apple access) and profile details, worker identity uploads, account messages and personal service details from our active application records. We retain limited transaction and earnings records, service dates/statuses, provider references, opaque record identifiers and the deletion-review record where needed for accounting, reconciliation, fraud prevention, disputes or legal obligations. Retained records are reviewed for continued need; they are not used to restore an active account.

Retention depends on the purpose and any unresolved obligation, rather than one period for every record. We document the reason and next review date for records retained after deletion. After an erasure we anonymise and delete the payment provider’s customer record and detach saved cards once no payment or dispute is open, and we keep only an email address that reported our mail as spam, so it is never mailed again. Other provider-held records, support correspondence, logs and backups are reviewed separately; some financial providers must keep their own records. Backup copies are restricted and are not used for normal account access. A restoration must reapply completed deletions before service resumes.

Deletion on our servers cannot instantly remove copies from an offline device or another participant’s own records. Sign out and remove locally saved drafts and queued uploads; clearing the app’s storage or uninstalling it removes local app data subject to your device’s backup settings.

Changes and contact

We update this notice when our practices change and show the effective date above. Send privacy questions to support@curbtask.com.