Fix24
DRAFT — for legal review before launchThis document is a working draft prepared for internal and legal review. It is not legal advice and is not the final or binding version of this policy. All wording, and every placeholder name, date, address and email address shown here, must be reviewed and approved by a qualified lawyer before Fix24 goes live. Please do not rely on it until then.

Aadhaar / KYC Consent Notice

Last updated: Not yet published — DRAFT (date to be set at launch)

This notice explains the Aadhaar Offline KYC verification that workers complete on Fix24: what is collected, the limited data Fix24 stores, what we never store, the role of our verification provider, and how you consent and withdraw.

1. Purpose of this notice

This notice explains the Aadhaar-based verification that workers complete to join Fix24: what happens during verification, exactly what we store and what we never store, the role of our verification provider, and how you give and withdraw your consent. It should be read together with our Privacy Policy.

This notice applies to workers who choose to get verified. Users of the app do not undergo Aadhaar verification.

2. Why we verify identity

Verifying a worker’s identity builds trust and safety on the Platform. Verified workers can display a verification badge to users. Verification confirms identity only; it is not a check of skills, licences or insurance.

3. What Aadhaar Offline KYC is

Verification uses Aadhaar Offline KYC (OKYC) through an authorised verification provider. In this flow you enter your Aadhaar number and authorise verification with a one-time password (OTP) sent by UIDAI to the mobile number registered with your Aadhaar. The provider confirms your identity and returns a limited, verified result to Fix24. This is an offline / OTP verification and is not used to access any government benefit or subsidy.

4. What is collected during verification

During verification, and only for the moment needed to complete it, the following is handled:

  • The Aadhaar number you enter, used transiently to initiate verification with the provider.
  • The OTP you enter to authorise the check.
  • The verification result returned by the provider (such as a name match and date-of-birth match, and a masked Aadhaar number).

5. What Fix24 stores

After verification, Fix24 stores only the minimum needed to record that you are verified and to prevent duplicate registrations:

Stored itemWhy
Masked Aadhaar number (only the last few digits visible)To show that verification was completed, without keeping the full number.
A salted, one-way hash of the Aadhaar numberTo prevent the same identity registering more than one worker account. The hash cannot be reversed to recover the number.
Name-match and date-of-birth-match resultsTo record that your details matched the verification.
Provider reference / transaction identifierTo reference the verification with the provider if needed.
Verification dateTo show a “verified since” date and manage re-verification.

6. What Fix24 never stores

We deliberately do not keep your Aadhaar identity data. Fix24 never stores:

  • Your full Aadhaar number in readable form.
  • The Aadhaar XML, QR code or e-KYC data package.
  • Your OTP.
  • Your biometrics (fingerprints, iris or face data).
  • Any Aadhaar photograph or e-KYC image.

This approach follows the principle of data minimisation under the Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016 and the Digital Personal Data Protection Act, 2023.

8. Role of the verification provider

Verification is carried out by an authorised KYC provider that acts as our processor and interacts with UIDAI’s Aadhaar systems as permitted under law. The provider receives the details you enter in order to perform the check and returns a limited result to Fix24. The provider handles Aadhaar data under its own obligations and the applicable UIDAI framework. The active provider can be changed by Fix24, and any change is logged internally.

9. How verification data is protected

Verification is performed over encrypted connections. The credentials Fix24 uses to connect to the provider are stored encrypted and are decrypted only in memory for the moment a request is made. Access to the limited stored verification result is restricted to authorised staff and systems, and sensitive administrative actions are audit-logged.

10. How long verification data is kept

The limited verification result is kept while you remain a verified worker, so your badge and “verified since” date can be shown. If you withdraw consent or your account is closed, we remove or anonymise the stored verification result, subject to any records we are required to keep by law or for audit and fraud-prevention purposes.

11. Withdrawing your consent

You may withdraw your KYC consent at any time by contacting us at grievance@fix24app.com or through the worker portal where available. Because verification is required to be a verified, searchable worker, withdrawing consent means you can no longer maintain verified status and your ability to receive jobs as a verified worker will be affected. Withdrawal does not affect verification lawfully carried out before you withdrew.

12. This is not a government service

Fix24 is a private platform. This verification is used only to confirm a worker’s identity for the Platform. It is not connected to, and does not grant or affect, any government benefit, subsidy or service, and is not an endorsement by UIDAI or any government authority.

13. Questions and grievances

For questions about this notice or to raise a grievance about Aadhaar/KYC handling, contact our Grievance Officer, [Grievance Officer — name to be appointed], at grievance@fix24app.com, or write to [Fix24 operating entity — legal name to be confirmed], [Registered office address — to be completed].