Privacy Policy
Last updated: Not yet published — DRAFT (date to be set at launch)
This Privacy Policy describes what personal data Fix24 collects, why we collect it, who we share it with, how long we keep it, and the rights you have. It is written to align with India’s Digital Personal Data Protection Act, 2023.
1. Who we are
Fix24 is a hyper-local services marketplace that helps people in India find and hire nearby, identity-verified service workers (for example electricians, plumbers, cleaners and other tradespeople), and helps those workers grow their business. This Privacy Policy explains how we handle personal data when you use the Fix24 mobile apps, the worker portal, and this website (together, the “Platform”).
For the purposes of the Digital Personal Data Protection Act, 2023 (the “DPDP Act”), the data fiduciary responsible for your personal data is [Fix24 operating entity — legal name to be confirmed], with its registered office at [Registered office address — to be completed]. Where we decide why and how your personal data is processed, we act as the data fiduciary; where our third-party providers process data on our instructions, they act as our data processors.
2. Scope of this policy
This policy applies to two groups of people: (a) users, who use the Platform to discover and hire workers; and (b) workers, who create a verified profile, receive job requests and pay for a subscription. Some sections apply only to workers (for example Aadhaar-based verification) and are marked accordingly.
This website does not require you to sign in and does not itself collect account data. Account creation, hiring, chat, tracking and payments happen in the Fix24 apps and worker portal, which are covered by this same policy.
3. Personal data we collect
We aim to collect only what we need to run the Platform. The categories below describe what we may collect, depending on whether you are a user or a worker and which features you use.
Account and identity data
- Your mobile number (used as your login username) and a password, managed through our authentication provider. Your number is stored in a standard international format together with a salted, one-way hash used to detect duplicate or fraudulent accounts.
- Your name and, optionally, a profile photo.
- An optional recovery email address, if you choose to add one for password resets.
- Your role on the Platform (user, worker or administrator) and account status.
Worker verification data (workers only)
To display a verification badge, we verify a worker’s identity using Aadhaar-based Offline KYC. We deliberately store only the minimum needed. Full details are in our Aadhaar / KYC Consent Notice.
- What we store: a masked Aadhaar number (only the last few digits visible), a salted one-way hash of the number (to prevent the same identity registering twice), the pass/fail result of name and date-of-birth matching, a reference identifier from the verification provider, and the date of verification.
- What we never store: your full Aadhaar number in readable form, the Aadhaar XML or QR data, your OTP, biometrics, or any Aadhaar photograph or e-KYC image.
Location data
- User location: to show workers near you and to power live tracking of a confirmed job, with your permission.
- Worker presence (workers only, consent-gated): while you are on duty and have agreed, we capture an approximate current location so users can see how far away you are. This is stored as a single latest point that is overwritten each time — we do not keep a location history or movement trail.
- Live job tracking: once a worker starts travelling to a confirmed job, the worker app shares live location so the user can follow progress on a map. This is limited to that job, is shown only to that user, and is deleted when the worker arrives or the job ends. We retain only summary timestamps (such as start and arrival times), not a breadcrumb trail.
Job and transaction records
- Job details you create or accept: service type, description, address or location, scheduling, status and the agreed price.
- Payment records for audit only: Fix24 does not collect or process the money paid for a job. The job price is settled directly between the user and the worker off the Platform. We record the amount for our own audit trail and dispute handling, but we do not take, hold or route these funds.
- Worker subscription and billing records: your subscription plan, status, invoices and payment status. Subscription payments are processed by our payment gateway (see “Payments”).
Communications
- In-app chat messages between users and workers, including price proposals. Messages are stored on our servers so that history is reliable and available for safety and dispute review. Phone numbers stay private and are not shown in chat.
- Reports, blocks and dispute submissions you make, and support requests you send us.
Reviews and ratings
- Ratings and written reviews you submit after a completed job, which may be shown publicly on a worker’s profile once published.
Device and technical data
- Device and push-notification tokens, app version, device type and operating system, used to deliver notifications and keep the app working.
- Log and diagnostic data such as IP address, timestamps and error reports, used for security, fraud prevention and reliability.
Website data
- This marketing website uses only the minimum cookies needed to function. See “Cookies and similar technologies”.
4. How and why we use your data
We use personal data for the purposes below. Under the DPDP Act we rely on your consent, or on the legitimate uses permitted by the Act (such as a purpose for which you have voluntarily provided data), and on compliance with legal obligations.
- To create and manage your account and verify workers’ identities.
- To match users with nearby workers, show approximate distance, and enable live tracking of a confirmed job.
- To enable in-app chat, price agreement, scheduling and completion of jobs.
- To process worker subscription payments and manage entitlements, invoices and renewals.
- To maintain safety and trust: verification badges, report and block, fraud detection on reviews and accounts, and dispute resolution.
- To send you service messages and notifications (for example job alerts, status updates and billing notices).
- To keep an audit trail, meet legal and regulatory obligations, and enforce our Terms.
- To improve reliability, fix problems and secure the Platform.
We do not use Aadhaar or KYC data for advertising, and we do not sell your personal data.
5. Aadhaar and KYC data minimisation (workers only)
Verification is carried out through an authorised KYC provider using Aadhaar Offline KYC. Consistent with the Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016 and the DPDP Act, we practise strict data minimisation: we store only a masked number, a salted hash, name/date-of-birth match results, the provider reference and the verification date.
We never store your full Aadhaar number, Aadhaar XML/QR, OTP, biometrics or photograph. For the full consent terms, what is collected, and how to withdraw consent, see our Aadhaar / KYC Consent Notice.
6. How we handle location data
Location is used for discovery and live tracking, not to build a history of where you are.
- Worker presence sharing is off until a worker explicitly agrees, only runs while the worker is on duty, can be turned off at any time, and shows users only an approximate, area-level distance and a fuzzed map position — never a worker’s exact coordinates before a job is confirmed.
- Live job tracking is limited to a single confirmed job, begins only when the worker chooses to start travelling, is visible only to that job’s user (and, if the user chooses to share a read-only tracking link, to the person they share it with), and ends when the worker arrives or the job closes.
- We do not retain a location history. Presence is a single latest point overwritten in place, and live-tracking positions are deleted when the job ends; only summary timestamps are kept.
7. Phone number privacy
To protect both sides, phone numbers are kept private. Communication before and during a job happens through in-app chat, and phone numbers are not displayed. Any future option to reveal a number after a job is confirmed would be controlled by settings and applied consistently.
8. Payments
Fix24 does not process payments between users and workers. The price of a job is paid directly between the two parties, off the Platform; we record the amount only for audit and dispute purposes.
The only payments Fix24 charges are worker subscription fees, which are processed by our payment gateway, Razorpay. Card and other payment-instrument details are handled by Razorpay under its own terms and privacy policy; Fix24 does not receive or store full card numbers. See our Refund & Cancellation Policy for billing terms.
10. Where your data is processed
We aim to store and process personal data on infrastructure serving India. Some of our providers may process data on servers located outside India. Where that happens, we take steps intended to keep your data protected and only transfer to jurisdictions permitted under applicable law.
11. How long we keep data
We keep personal data only as long as needed for the purpose it was collected, or as required by law. When you delete your account we soft-delete your profile and disable your login, but we may retain certain records where we are legally required to, or where they are needed for audit, fraud prevention or dispute resolution.
| Data | Typical retention |
|---|---|
| Account and profile | While your account is active; soft-deleted and login disabled on account deletion. |
| KYC verification result (masked number, hash, match flags, provider reference) | While the worker is verified; removed or anonymised in line with the KYC Consent Notice when verification is withdrawn or the account is closed, subject to legal audit needs. |
| Live location (presence and job tracking) | Not retained as history — overwritten in place or deleted when the job ends; only summary timestamps are kept. |
| Chat messages | Retained to provide reliable history and support safety and dispute review; worker-visible history may be limited by subscription entitlement. |
| Job and audit records (including recorded job amounts) | Retained for our audit trail and to meet legal and accounting obligations, even after account deletion. |
| Subscription and invoice records | Retained as required by tax and accounting law. |
12. How we protect your data
We use technical and organisational measures designed to protect personal data, including encryption in transit (TLS), encryption of sensitive credentials at rest, access controls and least-privilege access for staff, input validation and rate limiting on our services, and audit logging of sensitive actions. KYC provider credentials are encrypted and decrypted only in memory when needed.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please keep your password confidential and contact us if you suspect any unauthorised use of your account.
13. Your rights
Subject to the DPDP Act and other applicable law, you have the following rights in relation to your personal data:
- Access: to obtain a summary of the personal data we process about you and how we use it.
- Correction and updating: to correct inaccurate or incomplete data, much of which you can update directly in the app.
- Erasure: to request deletion of your personal data, including self-service account deletion, subject to records we must retain by law or for audit.
- Withdraw consent: to withdraw any consent you have given (for example presence sharing or KYC), recognising that some features may then be unavailable.
- Grievance redressal: to raise a complaint with our Grievance Officer (below).
- Nominate: to nominate another individual to exercise your rights in the event of your death or incapacity, as provided under the DPDP Act.
To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on a request.
14. Children’s data
The Platform is intended for adults (18 years and older). We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us so we can take appropriate action.
16. Changes to this policy
We may update this policy from time to time. When we make material changes we will update the “Last updated” date and, where appropriate, notify you through the Platform. Your continued use of the Platform after an update means you accept the revised policy.
17. Grievance Officer and contact
If you have questions about this policy or want to exercise your rights, contact our Grievance Officer, [Grievance Officer — name to be appointed], at grievance@fix24app.com. For general privacy queries you can also write to privacy@fix24app.com.
Postal address: [Fix24 operating entity — legal name to be confirmed], [Registered office address — to be completed]. We aim to acknowledge grievances promptly and resolve them within the timelines required by law.
If you are not satisfied with our response, you may have the right to complain to the Data Protection Board of India in accordance with the DPDP Act.