Privacy Policy

HALPII ("we", "our", or "the Platform") is a platform that connects people who offer skills and services with those who need them, available as a mobile application and web portal (portal.halpii.com). This Privacy Policy explains how we collect, use, store, and protect your personal information.

By using HALPII, you accept the practices described in this policy.

1. Information We Collect

1.1 Information you provide directly

Registration data:

• Mobile phone number (required for verification)
• Email address (optional, used to receive receipts and verification codes)
• First and last name
• Country and city

Professional profile data:

• Profile photo
• Personal description/bio
• Professional title
• Skills you offer
• Languages you speak
• Links to professional networks (LinkedIn, GitHub, personal website)
• Work modality (remote/in-person)
• Availability for work

Content you create:

• Chat messages with other users
• Portfolio of completed work (images, descriptions, links)
• Reviews and ratings you leave for other users
• Job postings you create
• Applications to other users' postings

Billing data (optional):

• Preferred receipt type (boleta or factura)
• Document number: DNI (8 digits) for boleta or RUC (11 digits) for factura
• Business name (only for factura with RUC)
• Tax address (only for factura with RUC)

These data are used exclusively for the issuance of electronic receipts (boletas and facturas) to SUNAT. You can configure, modify, or delete them at any time from Settings > Billing information.

Payment data (processed by third parties):

• When paying for any paid feature (see Section 3.2 of the Terms), your card data is processed directly by the payment processor corresponding to your country: MercadoPago if you are in Peru, or dLocal in all other countries
• HALPII receives only: payment confirmation, amount, currency, and transaction reference
• HALPII does not store credit or debit card numbers

Verification documents:

• If you request identity verification, you will upload an official identity document
• This document is stored securely and used exclusively to confirm your identity

1.2 Information we collect automatically

Usage data:

• Searches you perform on the platform
• Profiles you visit
• Search preferences and frequently consulted skills
• Interactions with postings (views, applications)
• App usage events (login, searches, profile views, message sending, job requests, reviews) collected by Firebase Analytics for service improvement purposes

Connection data:

• Online/offline status
• Date and time of last connection
• Average chat response time (calculated automatically by the system and publicly visible on your profile)
• Typing indicators in chat

Contact history:

• Record of first contact between users (who contacted whom and when)
• HALPII does not access, read, or upload your device's address book or phone contacts. "Contact history" refers solely to interactions between users within HALPII.

File data:

• Files you upload (photos, documents)
• File size and type
• Storage space used

Account data:

• Identity verification status
• Active storage packages

Verification logs:

• Account verification attempts (SMS, email, or WhatsApp)
• These logs are kept to prevent abuse of the verification system

Technical data:

• App error reports (crashes) collected by Firebase Crashlytics
• Push notification token (Firebase Cloud Messaging)
• Usage analytics data collected by Firebase Analytics (usage events associated with your user ID and country; never passwords or payment details)
• These data are used exclusively to improve app stability and experience and to send you notifications

1.3 Location information

If you authorize it, we collect:

• Your approximate location (country, city)
• Your precise location (latitude/longitude) for proximity-based searches

You can disable precise location at any time from your device settings. Precise location is not visible to other users; it is only used to calculate distances in searches.

1.4 Preferences and personalization

To improve your search results, we store:

• Skills you frequently search for
• Profiles you have recently visited
• Search history

This information is saved locally on your device and periodically synced with our servers to maintain continuity between sessions. You can clear your preferences from the app settings.

1.5 Device permissions

For certain features, the app may request access to: the camera (take photos for your profile, portfolio, stories, or messages), the gallery/photos (attach existing images), the microphone (record audio notes in chat), and location (proximity-based searches). Each permission is requested at the moment you use the feature, and you can grant or revoke it from your device settings. HALPII only uses these accesses for the corresponding feature.

Contacts (optional). If you choose to use the "New chat" feature to find your contacts who already use HALPII and invite the rest, the app asks for access to your contacts. If you accept, the names and phone numbers of your contacts are sent to HALPII's servers solely to match them against the numbers of registered accounts and show you who is already on HALPII. The list is not stored in our database or in our logs, is not shared with third parties, and is not used for advertising. You may decline and keep using the app as normal, and revoke the permission from your device settings.

Face ID / Touch ID (iOS). If you enable biometric unlock, the verification happens on your device using Apple's technology; HALPII never receives or stores biometric data, only the result (success or failure).

2. How We Use Your Information

We use your information to:

2.1 Provide our services

• Create and manage your account
• Verify your identity via a code sent by SMS, email, or WhatsApp, depending on availability (through Twilio Verify, Firebase Authentication, and Resend)
• Show your profile to other users searching for your skills
• Facilitate communication between users (real-time chat)
• Process job postings and applications
• Process payments for the available paid features (see Section 3.2 of the Terms)
• Generate electronic receipts (boletas and facturas) using your configured tax data
• Send electronic receipts to your registered email address
• Send notifications about messages, applications, and expirations

2.2 Improve your experience

• Personalize search results based on your preferences and history
• Sort professionals by relevance (combination of rating, recent activity, and match with your searches)
• Show you relevant professionals near you (if you authorize location)

2.3 Security and compliance

• Prevent fraud and suspicious activity
• Detect multiple accounts or platform abuse
• Resolve disputes between users
• Comply with legal obligations
• Respond to requests from competent authorities

2.4 Communications

• Send you push notifications about new messages, applications, and updates
• Inform you about changes to the service
• Alert you about the expiration of storage packages

3. Data Storage and Retention

3.1 Where we store your data

Your data is stored on secure servers. We may use cloud infrastructure providers (such as Microsoft Azure) to host our services. These providers comply with industry security standards.

3.2 File storage

Storage of the content you upload is at no cost. Each file has a maximum allowed size (indicated in the app). Files are stored on secure servers and are only accessible by authorized users (you and the recipient in the case of chat files).

3.3 Message retention

Important: When you delete a message or conversation, it is NOT immediately permanently deleted.

• Deleted messages are archived for 90 days for the following purposes:
  • Security auditing
  • Dispute or complaint resolution
  • Compliance with legal requirements
  • Investigation of abusive behavior
• After 90 days, archived messages are permanently deleted from the archive.

3.4 Financial data retention

Transaction records and electronic receipts are retained in accordance with applicable tax obligations:

• Electronic receipts (boletas and facturas): Retained for the minimum period required by applicable Peruvian tax legislation
• Payment records: History of payments for the available paid features (see Section 3.2 of the Terms), with amount, currency, and transaction reference

These data are retained for accounting, tax, and auditing purposes, even after your account is deleted, in compliance with applicable regulations.

Note: HALPII does not store or have access to banking data, card numbers, or personal financial information; card processing is performed directly by the payment processor (MercadoPago or dLocal).

3.5 Active account retention

Your account and data remain as long as you actively use the service. Accounts inactive for more than 24 months may be deactivated with prior notice.

3.6 Account deletion

When you request to delete your account:

Retention period (30 days):

• Your account is immediately deactivated
• Your profile and personal data (name, photo, phone number, skills) are no longer visible
• A 30-day period begins before the permanent deletion of your record

Permanent deletion (after 30 days):

• Your user record is deleted from our servers
• Your phone number becomes available for a new registration

Data that persists (dissociated from your identity):

• Reviews you left for other users remain but are displayed as "Deleted user"
• Messages in conversations with other users remain but are displayed as "Deleted user"
• These data no longer contain your name, photo, phone number, or any other identifiable information

This partial retention of dissociated data is necessary because it forms part of other users' experience and history (their received reviews, their conversations).

4. Sharing Information

4.1 Public information

The following data is visible to other HALPII users:

• Name and profile photo
• Description and professional title
• Skills and languages
• Work portfolio
• Average rating and received reviews
• Availability status
• Country and city (not exact location)
• Verified badge, if applicable
• Average chat response time
• Active job postings

Activity visible to the content owner:

As on other professional platforms (for example, LinkedIn), part of your activity is visible to the user who owns the content you interact with:

• Profile visits: when you visit another user's profile, they can see your visit (name, photo, headline, country/city and date). This list is available to business accounts in their analytics panel.
• Saves (favorites): if you save a profile, its owner can see that you saved it.
• Stories: when you view a user's story, its author can see that you viewed it.
• Impressions: your appearances in search results are reported to the profile owner only in aggregated and anonymous form (counts and country/city), never with your name.

4.2 Private information

The following data is NOT visible to other users:

• Full phone number (except in the cases described in sections 4.2.1 and 4.2.2)
• Exact location (latitude/longitude)
• Search history and preferences
• Payment data
• Billing data (DNI, RUC, business name, tax address)
• Issued electronic receipts
• Verification documents

4.2.1 Public contact (optional paid feature)

While a professional has an active "Public contact" pass or "Boost my profile" (or a plan including public contact purchased previously and still in force), they expressly consent to their phone number and WhatsApp link being displayed publicly on their profile and listings, visible to anyone, even without registering, while the feature is active.

• It is voluntary and reversible: when it expires or is deactivated, the phone number and WhatsApp become private again.
• The user is responsible for the contact information they choose to expose. HALPII does not control how third parties use data published voluntarily.

4.2.2 Client's phone number shared with the professionals handling their request

When a client creates a request (through the platform's forms, the app, or by talking with HALPII AI), HALPII sends it to a small group of professionals in their trade and area (usually between 3 and 8). That notice includes the description, the district, the declared budget, and any attached photos, but not the phone number. Professionals pay HALPII to accept the request, and only those who accept it (at most three) can talk to the client through HALPII chat. If the request was created via WhatsApp, the professional who accepts also receives the client's name and number in order to reply through that channel; if it was created from the app or the portal, the number is not handed over and contact takes place within HALPII. If a professional takes an open alert, they receive the requester's name and phone number in order to handle it.

• Basis for the processing: the client themselves provides this data voluntarily when creating the request, and sharing it is necessary to carry out exactly what they asked for: that professionals contact them to provide the service.
• The client's number is not published and is not visible to other users or to the public; it is received only by the selected professionals or by those who respond to the request.
• Expansion: if no professional responds, the request may be expanded (sent to more professionals or published as an open alert); even then, the phone number is shared only with the professionals who handle or take it, never publicly.
• The professional may use that data only to handle the request; using it for other purposes (spam, unsolicited advertising) is prohibited by the Terms and may lead to the suspension of their account.
• The stated budget and the answers given in the request form are also shared with those professionals, linked to the conversation.

4.3 We do NOT sell your information

HALPII does not sell or rent your personal data to third parties.

We do use cookies and advertising-measurement technologies —Google Analytics and the Meta Pixel (Facebook)— that share limited browsing and event data (for example, when you complete your registration) with Google and Meta, in order to measure our advertising performance and show you relevant ads (remarketing). This data is used for measurement and advertising purposes, not for sale. You can limit this use from your Google ad settings (adssettings.google.com) and Meta/Facebook ad settings, or from your browser preferences.

4.4 Third-party services

We share information with the following service providers, exclusively to operate the platform:

These providers are contractually obligated to protect your data and only use it for the stated purpose.

International transfers: some of these providers (for example, Google, Anthropic, Apple, Twilio, Meta, TikTok, Resend, and Microsoft) process data on servers located outside Peru, mainly in the United States. These transfers are carried out solely to operate the service, with providers that apply security measures in line with industry standards.

4.5 Other cases of sharing information

We only share additional information in the following cases:

• Legal obligations: When required by law or to respond to valid legal processes
• Protection of rights: To protect the rights, safety, or property of HALPII, our users, or others
• Corporate transactions: In the event of a merger, acquisition, or asset sale, your data may be transferred to the new owner (you will be notified)

5. Data Security

We implement security measures to protect your information:

• Encrypted connections (HTTPS/TLS)
• Authentication tokens (JWT) with expiration
• Restricted access to personal data
• Payment data tokenization (MercadoPago) or secure server-side processing (dLocal)
• Monitoring of suspicious activity
• Login attempt limits (rate limiting)
• HTTP security headers
• Verification files stored securely

However, no system is 100% secure. We recommend:

• Not sharing your SMS verification code with anyone
• Reporting suspicious activity immediately
• Logging out on shared devices

5.1 Security breach notification

In the event of a security breach affecting your personal data:

• We will notify you through the app and/or via available contact methods
• Notification will be made within a reasonable time from when we become aware of the incident
• We will inform you about the nature of the breach, the potentially affected data, and the measures we are taking
• We will notify the National Personal Data Protection Authority as required by law

6. Your Rights

In accordance with Law No. 29733 (Personal Data Protection Law of Peru), you have the right to:

6.1 Access

Request information about the personal data we hold about you.

6.2 Rectification

Correct inaccurate or incomplete data from your profile or by contacting support.

6.3 Deletion

Request the deletion of your account and associated data (subject to the 30-day retention period and the persistence of dissociated data described in section 3.6).

6.3.1 Downloading your data (portability)

You can download a copy of your personal data directly from the Privacy section of the app, without needing to write to support.

6.4 Objection

Object to the processing of your data for specific purposes.

6.5 Information about third parties

Know which service providers we share your information with (detailed in section 4.4).

6.6 Withdrawal of consent

Withdraw your consent for data processing at any time, which may result in the inability to continue using the service.

To exercise these rights, contact us at: contacto@halpii.com

We will respond to your request within a maximum of 10 business days.

7. Local Storage on Your Device

7.1 Mobile app

HALPII stores information locally on your device:

• Session token: To keep your session active without having to verify your phone number each time
• Search preferences: Skills searched, visited profiles, history
• Settings: Notification preferences and other settings

This information is deleted if you uninstall the app or log out.

7.2 Web portal (portal.halpii.com)

If you access HALPII from the web portal, information is stored in your browser:

• Session token: To keep your session active in the browser
• Display preferences: Web interface settings

Web portal login:

You can access your account on the web portal in two ways:

• One-time code: you enter your phone number (or your email address) and we send you a verification code by email, WhatsApp or SMS, depending on availability. The code is single-use and expires after a few minutes
• QR code: you scan a QR code displayed on the portal with the HALPII mobile app on your phone, which transfers your session to the browser securely

HALPII has no passwords: we never ask you to create one and we do not store any. If someone asks you for a "HALPII password", it is an attempted fraud. The phone number or email address you enter is used to authenticate you and for the contact purposes already described in this policy (see Sections 2.1 and 4.2.2). Do not share your verification codes with anyone: HALPII will never ask you for them.

This information is deleted if you log out of the portal or clear your browser data.

8. Minors

HALPII is not directed at individuals under 18 years of age. We do not intentionally collect information from minors. If we discover that a minor has provided personal data, we will proceed to delete their account.

If you are a parent/guardian and believe your child has used HALPII, contact us at contacto@halpii.com.

9. Automated Decisions

HALPII uses automated algorithms to:

• Sort search results: Based on rating, recent activity, match with your preferences, and a random component to give visibility to all users
• Calculate average response time: The system automatically measures how long you take to respond to chat messages and calculates an average that is publicly displayed on your profile. This data helps other users assess your availability
• Calculate performance metrics: Job success rate and punctuality, automatically calculated from the history of completed jobs
• Recommend professionals (HALPII AI): If you use the HALPII AI assistant, it may suggest professionals based on your request, the trade, and the area. This is a guidance-only recommendation: you decide whom to contact or hire, and you can always search and choose manually (see Section 15)
• Detect abuse: Identify suspicious behavior patterns

These automated decisions do not have significant legal effects on you. If you believe the search results are inadequate, you can use the available manual filters.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes through:

• Notification in the app
• Update of the "Last updated" date

We recommend reviewing this policy periodically. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or wish to exercise your rights:

Email: contacto@halpii.com

Address: Lima, Peru

Supervisory authority: National Personal Data Protection Authority (ANPDP) of the Ministry of Justice and Human Rights of Peru.

12. Jurisdiction

This Privacy Policy is governed by the laws of the Republic of Peru, including Law No. 29733 (Personal Data Protection Law) and its regulations (Supreme Decree No. 003-2013-JUS). Notwithstanding this, users residing in other countries retain the rights granted to them by the mandatory data protection rules of their country of residence, as detailed in Section 13.

13. Country- or Region-Specific Provisions

HALPII is incorporated in Peru, but we respect the rights that each country's legislation grants to its residents. In the event of a conflict, the mandatory data protection rules of the user's country of residence prevail. To exercise any of these rights, write to contacto@halpii.com; we will verify your identity before responding.

13.1 Users in Peru

The rights described in Section 6 apply, in accordance with Law No. 29733. Supervisory authority: National Personal Data Protection Authority (ANPDP), Ministry of Justice and Human Rights of Peru.

13.2 Users in Brazil (LGPD)

If you reside in Brazil, the processing of your data is also governed by the Lei Geral de Protecao de Dados (Lei n.° 13.709/2018 — "LGPD"). As a data subject you have the right to: confirm the existence of processing and access your data; correct incomplete, inaccurate, or outdated data; anonymize, block, or delete unnecessary data or data processed in non-compliance with LGPD; port your data to another provider; delete data processed with your consent; know which entities we share it with; be informed of the possibility of not giving consent and its consequences; and revoke your consent.

Legal bases: your consent, performance of the contract, compliance with legal obligations, and our legitimate interest (security and fraud prevention). International transfer: your data may be stored on servers outside Brazil (for example, Microsoft Azure), with adequate security measures. Authority: Autoridade Nacional de Protecao de Dados (ANPD) — gov.br/anpd.

13.3 Users in the United States (California — CCPA/CPRA)

If you reside in the United States, particularly in California, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) apply. You have the right to: know/access the categories and specific pieces of personal information we collect; delete your information; correct inaccurate information; opt out of "selling"/"sharing" — HALPII does NOT sell your personal information, although it does share limited data with Google and Meta via advertising cookies and pixels for measurement and remarketing (see Section 4.3), which you can opt out of from Google and Meta ad settings or from your browser; and to not receive discriminatory treatment for exercising your rights. The categories of data we collect are detailed in Section 1. You may designate an authorized agent. Other states (Virginia, Colorado, Connecticut) grant similar rights through the same channel: contacto@halpii.com.

13.4 Residents of other countries (Latin America and worldwide)

If you reside in any other country where HALPII is available —including Argentina, Bolivia, Chile, Colombia, Costa Rica, Ecuador, Guatemala, Honduras, Mexico, Panama, Paraguay, Uruguay and other countries— you have the rights granted by the data protection law of your country of residence. At a minimum, we recognize the same rights described in Section 6 (access, rectification, deletion, objection and withdrawal of consent). To exercise them, write to contacto@halpii.com.

14. HALPII Shop — Purchase and delivery data

• When buying a product with online payment, we collect and share with the order's seller: your delivery address or reference, your contact phone and — only if you choose to add it — your GPS location. Used exclusively to coordinate and complete the delivery.
• From sellers, we store their MercadoPago connection credentials encrypted (AES-256-GCM). HALPII does not see or store card data: tokenization and processing are performed by MercadoPago.
• Order records (product, amounts, statuses and dates) are kept as transaction history and as evidence for claims.

15. HALPII AI — Artificial Intelligence Assistant

HALPII AI is a conversational assistant that helps clients describe what they need (and thereby create their service request), recommends professionals, and guides professionals in using the platform.

15.1 What data is processed and with whom

• The messages you write in the HALPII AI chat (in the app, the portal, or WhatsApp) are processed through third-party artificial intelligence providers: Google (Gemini) and, as an alternative, Anthropic (Claude), with servers in the United States (international transfer — see Section 4.4), for the sole purpose of understanding your request, helping you complete it, and recommending professionals to you. Their commercial terms prohibit using your data to train their models.
• Along with the text of your messages, we send the photos you attach, your city and country, whether your account is a professional or a client account, and the history of that conversation.
• Conversations with HALPII AI via WhatsApp are stored linked to your number in order to follow up on your request and handle complaints, and are kept for up to 12 months from the last message.
• Your passwords, verification codes, and payment data are not sent to the AI provider. HALPII AI will never ask you for that data through the chat: do not write it in the conversation, it is not needed in order to use the assistant.
• The provider is contractually obligated to protect the data and to use it only to provide the service (see Section 4.4).

15.2 How conversations are used

• The conversation is linked to your request and to your account in order to provide continuity (for example, resuming a half-created request) and to handle queries or complaints.
• If a request is created out of the conversation, the sharing rules in Section 4.2.2 apply: your name and phone number are shared only with the professionals selected to handle it.
• You may exercise over these conversations the same rights described in Section 6 (access, rectification, deletion, objection).

The assistant's answers are for guidance only and may contain errors; its conditions of use are detailed in the Terms and Conditions (Section 24).

16. WhatsApp Messages

HALPII sends messages via WhatsApp through Twilio and the WhatsApp Business Platform (Meta). These messages mean that your phone number and the content of the message pass through both providers' systems, involving international data transfers (see Section 4.4).

16.1 What messages we send

• Verification codes for your account (only when you request them)
• Request notices to professionals: when a client chooses a professional (or HALPII AI recommends one), the professional may receive the request details via WhatsApp, including the client's name and phone number, in order to contact them and handle the request (see Section 4.2.2)
• Confirmations to the client about their requests (for example, "a professional accepted your request")

16.2 How to stop receiving them

• You can stop receiving these messages at any time by writing to contacto@halpii.com from the email address or phone number on your account, or from your account settings in the app; we will stop sending you notices within 2 business days
• Verification codes are sent only when you initiate the verification process

By using HALPII, you confirm that you have read and understood this Privacy Policy.