Privacy policy

What we collect

From everyone with an account:

• Your mobile number, which is how you sign in. We send a one-time code to it.
• Your name, and your email address if you give one.
• Which of an event's announcements you have read. Only Crew Up account managers post them.
• A notification token for your phone, so we can send you alerts.

If you work as crew

• Your profile: date of birth, gender, city, address, languages, height, an alternate number, past experience, achievements and education.
• Your profile photos.
• To check who you are, the name, date of birth, gender and last four digits from your Aadhaar's Secure QR code, which you scan or upload in the app, checked against UIDAI's digital signature. The QR is read on your phone: we never keep the full Aadhaar number or a picture of the card.
• Your shifts: what you applied for, whether you were picked, your attendance, the ratings and reviews organizers give you, your certificates and what you were paid.

If you hire crew

• Your organisation's name and contact details, the events you create, their photos and dates, and the crew you pick, rate and pay.

How we use it

• To sign you in and keep your account secure.
• To show crew the shifts near them, and to show organizers who applied.
• To check a crew member's identity before they work an event.
• To record attendance, ratings and payments, and to issue certificates.
• To send you alerts about your shifts, events, payments and account.
• To fix problems with the app and keep it working.

What we don't do

We don't sell your data, we don't show ads, and we don't track you across other apps or websites.

Who sees it

When you apply for a shift, the event's Crew Up account manager sees your profile, photos, ratings and attendance. The organizer sees only the crew on their event: your name, photo, the role you worked and whether your Aadhaar is verified, never your contact details, address, ratings or what you are paid. The Aadhaar check is automatic: nobody looks at your Aadhaar details by hand. Your account manager sees whether you're verified, a note if the check couldn't fully confirm your card, and, if your card looks like another crew member's, that account's name.

We use these companies to run Crew Up. They handle your data only to do that job for us:

• Fast2SMS: texting your sign-in codes, so it gets your mobile number.
• Google Firebase: signing you in, and push notifications.
• Supabase: our database.
• Railway: our servers.
• Cloudflare R2: storing photos.
• Resend: sending email.
• Sentry: error reports when the app or our servers break.

Where it's kept, and for how long

Some of these companies may store or process data outside India. We keep your data while your account is open. When you delete your account, your profile, photos and Aadhaar details are deleted straight away, except a record that you agreed to the Aadhaar check (its date and the last four digits) and that you agreed to this policy. Records of shifts worked and payments made stay, no longer linked to your name or number, for as long as the law requires.

If we ban a crew account, for example after repeated no-shows or misconduct, we keep the account and its data while the ban lasts. Signing in only shows that the account is banned, and your number can't be used to make a new account. You can still delete the account, in the app or by asking us.

If we delete a crew account and block its number, or a banned account is deleted, we keep a scrambled copy of the number that can't be turned back into it, and its last four digits. If you had verified your Aadhaar, we also keep a scrambled copy of the name, date of birth, gender and last four digits from it, so that an account verifying with the same card is checked by a person first. We keep these only for that, until we unblock the number, and they aren't linked to your records.

Your rights

You can ask us for a copy of your data, to correct it, or to delete it. You can withdraw your consent at any time by deleting your account. You can also name someone to act for you if you can't. Email us and we'll reply within 30 days.

Deleting your account

You can delete your account in the app at any time, or ask us to by email.

Age

Crew Up is for people 18 and over. If you think someone younger has an account, tell us and we will delete it.

Keeping it safe

Data is encrypted on its way to and from our servers. Photos are stored privately and shared only through links that expire. Only the people who need your data for their job can see it.

Changes to this policy

If we change this policy we'll update the date at the top, and tell you in the app if the change is significant.

Contact and grievances

Questions or complaints go to our grievance officer, [TBD: grievance officer's name], at the email below, or by post to [TBD: registered company name], [TBD: registered office address]. If you're not happy with our answer, you can complain to the Data Protection Board of India.