Jello Work — Privacy Policy

Last updated 12 October 2026

This Privacy Policy explains how OrionMatrix Ventures LLP (“Jello”, “we”, “us”) collects, uses, shares and protects personal data about the professionals who work with us, through the Jello Work mobile application and the systems behind it.

It is a separate document from the policy for customers, because the data is different and so are the reasons we hold it. We are the Data Fiduciary for everything described below.

1. What the Jello Work app collects

Your mobile number — it is how you sign in. We send a one-time code to it.
Your name, so the office and the customer know who is coming.
Your location, when you mark in — a single reading at the moment you press the button, to confirm you are at your shell. The app does not follow you. It takes no background location, keeps no trail, and reads your position at no other time.
A photograph of your face, when you mark in — see section 2, which is about this alone.
Photographs of the customer’s home — the before and after pictures you take of the work. These are about the job, not about you.
A notification token for your handset, so a job can reach you.
What you do in the app — marking in, accepting a job, each step of a visit, asking to finish early. This is the record of your work.

2. The mark-in photograph

When you start a shift the app asks you to photograph yourself at your shell. We do this because a shell has no attendance machine — your phone is the attendance machine — and because a day’s pay should rest on something better than a tap on a screen.

Three things are true about that photograph, and we would rather you heard them from us:

Your manager can see it. It is shown to them beside the identity photograph already on your file, so a person can confirm it is you. Customers never see it.
No software examines your face. We do not run face recognition, we do not measure your features, and we do not build a template from your picture. A human being looks at two photographs.
It is deleted after 30 days. Not archived — deleted, along with the record of where it was stored. This happens automatically; nobody has to remember to do it.

The app tells you this on the screen before you take the photograph, in English or Hindi. If the photograph fails to upload — no signal, usually — your shift still starts and your manager simply sees that no photograph was stored.

3. What the office holds about you, separately from the app

Before you can be activated we need documents, and these are not collected through the Jello Work app. A member of the office uploads them to our internal console:

Aadhaar — we store only the last four digits and an image of the document. Never the full number.
PAN — again only the last four digits, and an image.
Police verification, which is the one that protects the customer.
An identity photograph, which is the picture your mark-in selfie is compared against.

These are employment records. They are kept for as long as you work with us and for the period afterwards that tax and labour law require. They are visible only to the founders, through a console that requires a company sign-in.

4. Why we use it

To sign you in and keep your session secure.
To record your attendance, and to pay you correctly.
To send you jobs, and to tell you when something about one changes.
To give the customer your first name and rating so they know who is arriving.
To let you and the customer reach each other by phone while a visit is live — see section 6.
To answer a question about a shift, a visit or a payment, including one you raise yourself.
To meet our obligations as an employer.

We do not use any of it for advertising, we do not sell it, and nothing in the Jello Work app tracks you across other companies’ apps or websites. There is no advertising, analytics or attribution software from any other company inside it.

5. How long we keep it

Mark-in photographs — 30 days, then deleted automatically.
Attendance records — the fact that you marked in, when, and where, for as long as employment and tax law require.
Job photographs of a customer’s home — kept with the booking, as the customer’s record of the work.
Employment documents — for your employment and the statutory period after it.
Notification tokens — until the handset stops using them.

6. What other people see

The customer sees your first name and your rating once a visit is close to starting. While the visit is live they can also see your phone number and call you, and you can see their first name and phone number and call them. These are real numbers and the calls are not routed through us. Both sides lose that access once the visit is finished.

The customer never sees your mark-in photograph, your documents, your address or your attendance history.

Your manager and the founders see your attendance, your mark-in photographs for 30 days, your jobs, your ratings and your documents.

Nobody else. We share your data outside the company only with processors acting on our instructions — cloud hosting, object storage, and the services that deliver notifications — and with authorities where the law requires it.

7. Where it is stored

Our application servers and database are operated for us by our cloud hosting provider and are currently located in the United States. Photographs are held in private object storage; every link to one is signed and stops working within minutes, so a copied link is not a way in.

This means your personal data is transferred outside India. The Digital Personal Data Protection Act, 2023 permits such transfers except to territories restricted by the Central Government, and the United States is not currently restricted.

8. Your rights

Under the Digital Personal Data Protection Act, 2023 you may:

Ask what personal data we hold about you and how we have used it.
Ask us to correct anything that is wrong.
Ask us to erase data we no longer need.
Nominate someone to exercise these rights for you if you die or become unable to.
Raise a grievance with us, and escalate to the Data Protection Board of India if we do not resolve it.

Deleting your own account is not something the Jello Work app does, and we would rather say so than hide it. Your attendance and pay records are employment records, and an employee cannot delete them from a handset any more than they could take a page out of a register. Write to us at [email protected] and we will tell you what we hold, correct what is wrong, and erase what we are not required to keep.

9. Security

Data is encrypted in transit. Your sign-in token is held in the device keychain or keystore, never in ordinary app storage. Photographs sit in a private bucket that is not readable without a signed link. Access inside the company is limited to the founders and requires a company sign-in. No system is perfectly secure, but we will tell you and the Data Protection Board as required if a breach affects your data.

10. Changes to this Policy

We will post any updated version on this page with a new “last updated” date. If we ever change what happens to your photograph — how long it is kept, or whether software examines it — we will tell you in the app before it takes effect, not afterwards.

11. Contact and grievances

Grievance Officer: Vansh Arora, Designated Partner
Email: [email protected]
OrionMatrix Ventures LLP, 499, Ground Floor, Ashoka Enclave 3 (AE 3), Kanishka Residency, Amarnagar, Sector 35, Faridabad, Haryana 121003, India
We acknowledge a grievance within 24 hours and respond within 15 days.