Privacy policy

Effective 5 September 2026

What we collect

• Identity: name, phone number, and the verification you complete through DigiLocker to create your Verified Profile. We keep the verification result and the document reference we need to prove it, not more.
• Work: the shifts you apply for, accept, check in to and complete, and the ratings that follow.
• Payments: the UPI or bank details you give us so we can pay you, and the record of every settlement.
• Device and usage: the basics needed to keep the app working and secure — device type, app version, crash reports, and the times you use it. Location is read only while you check in to a shift, to confirm you are at the venue.
• Finding people from your contacts: we only see the contacts you pick in your phone's contact picker. We never read your phone book. Only phone numbers leave your phone, never names. Our server hashes each number with a secret key, checks the hash against the hashes of HustleIt accounts, and then discards the numbers. Nothing about a number that isn't a HustleIt account is stored. Your own phone number is stored for your account (it is how you sign in), and alongside it a keyed hash so that people who already have your number can find you.

What we use it for

To verify you, match you with shifts, record attendance, pay you, invoice businesses, resolve disputes, and meet the legal duties that apply to a platform handling work and money in India.

Who sees it

• The business whose shift you accept sees your name, verification status and work history on HustleIt. It does not see your documents or payment details.
• Payment and verification partners see what they need to do their job and nothing else.
• If a number you pick belongs to a HustleIt account that allows it, you see that person's public profile — name, username, role — and can send a connection request. They see nothing until you do.
• Authorities, when the law requires it.

We do not sell personal data.

How long we keep it

While your account is open, and after deletion only what we are required to retain — financial and compliance records for the statutory period (see Delete account). Everything else is removed from active systems within 30 days of deletion.

Turning off “Let people find me by my phone number” in Settings stops matching against your number. It does not delete the hash; that goes with your account when you delete it.

Your rights

You can see and correct your details in the app, download your data by asking us, and delete your account from Settings. Questions go to contact@dreamsmith.co.in; grievances go to the Grievance Officer named on the Contact page.