Privacy Policy

How you sign in

Sign-in is through Google, Apple or Microsoft. JobYou never creates or stores a password — we hold no password of yours that could leak.

From the provider you choose, we receive your name, email address and profile picture, where one exists.

Data about professionals

If you use JobYou as a professional, we process:

• Display name — how venues identify you.
• The roles you work — these determine which shifts reach you.
• Weekly availability — when you can work.
• Where you start from — used to measure distance to a venue. Without it you do not appear in searches at all.
• Shifts: offers, acceptances, declines, check-in, check-out and completion.
• Reliability events and any appeals against them.

About your national ID

Where a national ID (CPF) is provided, we store only a hash — an irreversible representation. The number itself is not kept.

That hash serves one purpose: comparing whether two accounts are the same person, to prevent self-referral in referral programmes. It is never read, displayed or shared.

What venues see about you

A venue searching for professionals sees your name, your roles, the approximate distance to the venue, and a reliability band.

Venues never see your reliability score, the history of events behind it, your email, your national ID or your exact address. That separation is a rule of the product, not a setting.

Data about venues

For venues we process: name, address and coordinates, Google Places identifier, verification status and evidence, staff with access, posted shifts and hiring history.

Automated decisions

The order in which professionals appear to a venue is computed automatically, from role, distance, availability and reliability.

Because that affects the opportunity to earn, you have the right to understand it and to contest it. The app shows your score, every event behind it, each event’s weight and when it expires — and lets you contest any of them, with human review (LGPD art. 20; GDPR art. 22 where it applies).

Who we share with

We share the minimum necessary, with:

• Venues — the data described above, and only for people offered or working a shift with them.
• Payment providers — to make the payout.
• Google (Firebase) — authentication and infrastructure.
• Authorities — where required by law.

What we do not do

We do not sell your data. We do not use your shift history for third-party advertising. We do not share your reliability score with venues.

How long we keep it

Shift and payment records are kept for as long as tax and employment law require.

If you close your account, we delete or anonymise what we are not obliged to keep. Records tied to payments already made remain for the statutory period.

Your rights

You may request access, correction, portability, anonymisation or deletion of your data, and withdraw consent — under LGPD and, where applicable, GDPR.

Requests: dpo@mdc.com.br. We respond within 15 days.

Minors

JobYou is not intended for anyone under 18 and does not knowingly collect their data. If we identify such an account, it is closed and the data deleted.

Contact

Data protection officer: dpo@mdc.com.br