Last updated: September 2026

Privacy Policy

Who we are

2ndJ is operated by FORMA SOFT LTD (company number 17385313), 128 City Road, London, EC1V 2NX, United Kingdom. We are the controller of the personal data described here. For anything about your privacy, write to hello@2ndj.com.

In the 2ndJ app, students on the KTH campus in Stockholm switch themselves “available”, receive short paid tasks nearby (for example, talking to someone on campus about a sponsor’s product and reporting back), accept one, and hand in a photo or video as proof. It is currently a pilot, limited to about 2 km around KTH.

What we collect

Account data

From Google Sign-In: your name, email address and profile picture URL.

Why
To create your account and identify you as a worker.
Legal basis
Contract.

Work profile

The professions and skills you choose, your work radius, the date you finished onboarding, and when you were last seen in the app.

Why
To match you with tasks.
Legal basis
Contract.

Task proof

The photos and videos you take to prove a task was done, plus the location and time at which the proof was taken.

Why
To show that the task was done.
Legal basis
Contract.

Location

  • We collect your location only while you have switched yourself “available”, a window of at most 12 hours. Never otherwise.
  • We store only your latest position (latitude, longitude, accuracy and time), and each new report overwrites the last. We do not keep a location history.
  • Switching yourself off, or the 12-hour window ending, erases the stored position.
  • On iOS, if you grant “Always”, your position keeps updating in the background during that window, and the system shows its location indicator. On Android, your location is only sent while the app is open, and once as it is closed.
  • The map shows your own position on your device. That position is not stored.

Why: to offer tasks to people nearby. Legal basis: contract, plus the permission you give your phone’s operating system, which you can revoke at any time in your phone’s settings.

What we don’t collect

We do not sell your data, show ads, use advertising IDs, use third-party analytics or tracking SDKs, or read your contacts or files. The camera is used only when you take a proof. Your earnings are shown in the app; payouts are handled outside the app.

Who else processes your data

  • Supabase: database, authentication and photo storage, hosted in the European Union (West EU, Ireland).
  • Google: Sign-In authentication.
  • OpenFreeMap / OpenStreetMap: map tiles. Your device requests the tiles; no account data is sent.
  • Vercel: hosts this website and the admin dashboard.
  • Apple and Google: app distribution (TestFlight, Google Play).

Transfers outside the UK and EEA are covered by adequacy decisions or Standard Contractual Clauses.

How long we keep it

  • Location: only the latest point, deleted when you go unavailable, or after 12 hours at most.
  • Account, task history and proofs: kept while your account exists, and removed within 30 days of a request to delete it, except records the law requires us to keep, for example records relating to a payment that we must retain for tax and accounting purposes, which are kept for up to six years.

Deleting your account

Email hello@2ndj.com from the address on your 2ndJ account and ask us to delete it. Sending it from that address is how we know the request is yours.

We delete your account within 30 days of your request, and tell you by email when it is done. That removes your account data, work profile, task history and proofs. Your stored position is already gone whenever you are not available.

The only thing we keep is what the law requires us to keep, for example records relating to a payment that we must retain for tax and accounting purposes. Those are kept for up to six years and then deleted.

The same instructions are at 2ndj.com/delete-account.

Your rights

You have the right to access, correct and erase your data, to restrict or object to how we use it, to take it with you (portability), and to withdraw consent, for example by revoking the location permission. To use any of these rights, email hello@2ndj.com.

You can also complain to the UK Information Commissioner’s Office (ico.org.uk), or to the data protection authority where you live. In Sweden, that is IMY (imy.se).

Children

2ndJ is for adults (18 and over), because it offers paid work. We do not knowingly create accounts for anyone under 18.

Security

Data is encrypted in transit. Access to the database is restricted per user by row-level security. Proofs are visible only to our admins and to the requester of the task.

Changes

When we change this policy we update the “Last updated” date at the top, and we tell you in the app about any material change.

Contact

FORMA SOFT LTD, 128 City Road, London, EC1V 2NX, United Kingdom. Email hello@2ndj.com.