Privacy Policy

"krib" Application and Website

Last updated: 16 November 2025

This Privacy Policy ("Policy") is issued by Mindhomes Technologies Co., Ltd. (the "Company") as the service provider of the "krib" platform, in the form of both website and mobile application (collectively referred to as the "Services"). This Policy explains how we collect, use, and disclose your personal data in accordance with the Personal Data Protection Act B.E. 2562 (2019) of Thailand ("PDPA") and other applicable laws.

Please read this Policy carefully before using our Services. By registering, accessing, or using the Services, you are deemed to have read and understood this Policy. If you do not agree with any part of this Policy, you should refrain from using our Services.

1. Data Controller

Mindhomes Technologies Co., Ltd.
Address: 101/366 Moo 4, Sai Ma Subdistrict, Mueang Nonthaburi District, Nonthaburi 11000, Thailand
Email for personal data matters: [email protected]
The Company is the "Data Controller" under the PDPA for personal data related to the use of the krib Services, and determines the purposes and means of processing such personal data.

2. Scope of this Policy

This Policy covers the collection, use, and disclosure of personal data arising from your use of the krib Services, including but not limited to:

  • Registering a user account (Owner / Helper)
  • Using the application or website
  • Creating job orders, accepting jobs, making payments, and making warranty or claim requests
  • Communicating with our customer support or technical teams
  • Using our review system, rating system, and labour quality analytics

This Policy does not apply to third-party websites or services that are linked from our Services. Please review the privacy policies of those third parties directly.

3. Personal Data We Collect

We may collect your personal data that you provide directly to us, data we receive indirectly, as well as data obtained through cookies or similar technologies. Such data can be grouped as follows:

3.1 Identification and Contact Information

  • First and last name, nickname
  • Phone number, email address
  • Profile photo
  • Copy of national ID card or other identification documents (where necessary, e.g. for verifying Helpers)
  • Address for tax invoice issuance or for on-site service appointments (if you provide it)

3.2 Account and Profile Information

  • Username and password (stored in encrypted form)
  • Type of account (Owner / Helper)
  • Skills, trade or profession, and work experience (for Helpers)
  • Skill level, certifications, and training records (if any)
  • Reviews, ratings, and rating history

3.3 Transactional and Service Usage Information

  • Job details you create or accept, such as job type, location, date and time, and job price
  • History of bookings, job acceptance, cancellations, and warranty/claim requests
  • Payment information such as amount, payment date, and payment channel
  • Payment reference numbers and tokens from payment service providers

Note: Your credit/debit card information will be processed and stored by the payment service provider (e.g. Omise Payment Gateway or other providers). The Company does not have visibility of your full card number.

3.4 Technical and Usage Data

  • Device ID, device model, operating system, application version
  • IP address, log data relating to your access to the Services, date and time of access, and session duration
  • Approximate location data used for finding Helpers near your area (where you grant permission)
  • Data from cookies and other tracking technologies on our website

3.5 Data Received from Third Parties

  • Data from payment service providers (e.g. payment status, approval/decline result)
  • Data from analytics providers such as Google Analytics / Firebase (technical data and usage statistics)
  • Data from government authorities or professional certification bodies (where permitted by law or where you have given your consent)

4. Purposes and Legal Bases for Processing Personal Data

We process your personal data under the legal bases provided by the PDPA, which include:

  • Your consent
  • Performance of a contract to which you are a party
  • Compliance with legal obligations
  • Legitimate interests of the Company or a third party

We use your personal data for the following main purposes:

4.1 To Provide Services and Manage Your Account (Contract)

  • Register, open, and verify your krib user account
  • Enable you to search, select, book, and manage jobs with the other party (Owner / Helper)
  • Display your profile, reviews, and skill level according to your display settings and consents
  • Manage orders, bookings, payments, and the issuance of receipts and tax invoices (if applicable)

4.2 For Payment Processing and Fraud Prevention (Contract / Legal Obligation / Legitimate Interest)

  • Transmit necessary data to payment service providers (such as Omise Payment Gateway)
  • Verify and confirm transaction status to reduce the risk of fraud or abnormal transactions
  • Record transaction data for internal auditing and to comply with tax and other applicable laws

4.3 To Improve Work Quality and Labour Rating Systems (Legitimate Interest / Consent)

  • Analyse reviews, ratings, and work history to improve our ranking and labour quality scoring systems
  • Display suitable ratings, reviews, and statistics to help Owners and Helpers make better decisions
  • Use anonymised or aggregated statistical data to improve our algorithms and develop new services

4.4 For Communication and Customer Support (Contract / Legitimate Interest)

  • Contact you, send notifications, or messages regarding job status, payments, warranty/claims, and account security
  • Respond to inquiries, handle complaints, and resolve technical issues
  • Send important announcements regarding changes to our Terms of Service or other policies

4.5 For Marketing, News, and Promotions (Consent / Legitimate Interest)

  • Send news, special offers, and promotional campaigns of krib through channels you have consented to
  • You may opt out of marketing communications at any time by clicking "unsubscribe" in our emails or adjusting your preferences in the application (where available)

4.6 To Comply with Laws and Regulatory Requirements (Legal Obligation)

  • Comply with the PDPA and other applicable laws and regulations
  • Provide information to regulators, courts, or government authorities when there is a lawful order or legal basis

5. Cookies and Tracking Technologies

When you visit our website or use our application, we may use cookies and other tracking technologies to:

  • Remember your preferences
  • Analyse usage of the Services
  • Improve user experience

For example, we may use Google Analytics or Firebase Analytics. You can configure your browser or device to reject certain cookies. However, disabling cookies may cause some features of the Services to function improperly or become unavailable.

6. Disclosure and Transfer of Personal Data to Third Parties

We may disclose or transfer your personal data to third parties only to the extent necessary for the purposes set out in this Policy, including:

6.1 IT and Infrastructure Service Providers

Such as cloud service providers, hosting providers, database providers, and analytics service providers that help ensure the krib Services operate efficiently and securely.

6.2 Payment Service Providers

Such as Omise Payment Gateway or other providers that implement industry-standard security measures to process payment transactions on our behalf.

6.3 Business Partners and Other External Service Providers

Such as insurance companies, financial institutions, and financial service providers regulated by the Bank of Thailand or other relevant supervisory authorities, as well as call centre providers and marketing or notification service providers. These third parties will be bound by contracts requiring them to comply with the PDPA and use personal data only as necessary for the agreed purposes.

6.4 Government Authorities, Regulators, or Law Enforcement Agencies

Where we are required to do so by law, court order, or regulatory requirements, or where disclosure is necessary to protect the rights of the Company, other users, or third parties.

6.5 Business Transfers

In the event of a merger, acquisition, transfer of business, or corporate restructuring, personal data may be transferred to the acquiring entity, subject to maintaining an appropriate level of personal data protection.

7. Cross-Border Transfers of Personal Data

We may transfer or store your personal data on servers located outside Thailand, for example with cloud service providers or international payment service providers. In such cases, we will ensure that:

  • The destination country has an adequate level of personal data protection; or
  • Appropriate safeguards are in place as required by the PDPA (e.g. data transfer agreements)

to ensure that cross-border transfers are conducted securely and lawfully.

8. Data Retention Period

We will retain your personal data only for as long as necessary to fulfil the purposes stated in this Policy and for any retention periods required by applicable laws (such as tax and accounting laws). Once personal data is no longer necessary, we will:

  • Delete it; or
  • Anonymise it so that it can no longer be used to identify you; or
  • Retain it only in the form of non-identifiable statistical data.

9. Your Rights as a Data Subject

Under the PDPA, you have the following rights in relation to your personal data:

  • The right to access and obtain a copy of your personal data
  • The right to request data portability (where applicable by law)
  • The right to request correction of your personal data so that it is accurate, up to date, and not misleading
  • The right to request deletion, destruction, or anonymisation of your personal data
  • The right to request temporary restriction of the use of your personal data
  • The right to object to certain types of data processing
  • The right to withdraw your consent (where we rely on consent as a legal basis)
  • The right to lodge a complaint with the Personal Data Protection Committee if you believe that our processing of your personal data is unlawful

If you wish to exercise any of these rights, you can contact us using the contact details in Section 12. We may need to verify your identity before processing your request, and there may be legal limitations or conditions applicable to certain rights.

10. Security Measures

We implement appropriate technical and organisational measures to protect your personal data, including:

  • Encryption of certain types of data
  • Access control measures
  • Authentication mechanisms
  • Regular review and improvement of security measures

However, no system is completely secure. We therefore encourage you to keep your account details and password confidential, and notify us immediately if you detect any suspicious activity or unauthorised use of your account.

11. Personal Data of Minors

Our Services are not intended for persons under 20 years old or minors who have not obtained consent from their parent or legal guardian as required by law. If we become aware that we have collected personal data from a minor without proper consent, we will delete such data without undue delay.

12. Contact Information

If you have any questions, concerns, or complaints regarding this Policy or our handling of your personal data, you can contact us at:

Mindhomes Technologies Co., Ltd.
Address: 101/366 Moo 4, Sai Ma Subdistrict, Mueang Nonthaburi District, Nonthaburi 11000, Thailand
Email: [email protected]
Telephone: +66654197918

13. Changes to This Privacy Policy

We may update this Policy from time to time to reflect:

  • Changes in our Services
  • Changes in applicable laws and regulations
  • Recommendations or requirements from regulatory authorities

If there are material changes, we will notify you through appropriate channels. The effective date will be indicated at the top of this Policy. Your continued use of the Services after the effective date of any changes will be deemed as your acceptance of the updated Policy.