FillIn
For restaurants Catering Events For workers
Log in Get Started

Legal

Privacy Policy

Last updated: September 8, 2026

This Privacy Policy explains what personal information FillIn collects, how it's used, who it's shared with, and the choices you have — for both Businesses and Pros using the platform.

  1. Overview
  2. Information We Collect
  3. Location Data
  4. How We Use Information
  5. Information Sharing
  6. Data Retention
  7. Your Rights
  8. Security
  9. Children's Privacy
  10. Changes to This Policy
  11. Contact

1. Overview

FillIn is a platform owned by Winixx Inc., a New York State corporation. "FillIn" is a d/b/a ("doing business as") of Winixx Inc. — not a separate legal entity. FillIn is a relying party on Winixx ID: your identity, login credentials, and (for Businesses) wallet and payment data are managed by Winixx ID, not stored directly by FillIn. This policy covers what FillIn itself collects and processes as part of running the marketplace — shift matching, clock-in verification, and Pro payouts — and is written for U.S. users.

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes, under any circumstances.

2. Information We Collect

2.1 Account & Identity Information

The minimum age to use FillIn is 18. When you sign in through Winixx ID, we receive basic profile information (name, email, and a Winixx ID account reference) needed to create your FillIn account. Pros may also be asked to complete identity verification — handled directly by Stripe Identity — which can include a government-issued ID (such as a driver's license). FillIn does not store the raw ID document; verification status and outcome are stored on your profile.

In addition to identity verification, we collect a Pro's Social Security Number. This is used to verify work eligibility and, as required by law, to issue an IRS Form 1099 if a Pro earns $600 or more in a fiscal year.

2.2 Biometric Information (Identity Verification)

As part of identity verification, Stripe Identity may use facial-matching technology to confirm that a submitted government-issued ID belongs to the person presenting it. This biometric processing is performed by Stripe as part of its identity verification service and is governed by Stripe's own privacy practices, in addition to this policy. Depending on your state of residence, additional notice or consent requirements may apply to biometric data under state law.

2.3 Location Data

See Section 3 below — location data gets its own section given how central it is to how the app works.

2.4 Shift & Work Information

Shift offers, acceptances, clock-in/clock-out timestamps, and payout records are stored to run the marketplace and calculate pay accurately.

2.5 Payment Information

Businesses fund and are charged through their Winixx ID Organisation wallet — FillIn does not directly process or store Business payment card details. Pro payouts are processed via Stripe Connect; bank account details are held by Stripe, not FillIn.

2.6 Device & Notification Data

We store a device push-notification token so we can notify you of new shift offers and updates. This is tied to your account and used only for that purpose.

3. Location Data

FillIn collects a Pro's device location in two ways:

  • Continuous, foreground-only tracking while the app is open — used to match you with nearby, reachable shift offers. Location is not collected while the app is closed or backgrounded.
  • A geofence check at clock-in and clock-out — used together with your one-time code to confirm you're actually on-site for a shift.

Location data is used only for shift matching and clock-in verification. You can disable location access at any time in your device settings, though this will prevent you from being matched to nearby shifts or from clocking in.

4. How We Use Information

  • To match Pros with relevant, nearby shift offers
  • To verify identity and confirm on-site presence at clock-in
  • To calculate pay accurately from real worked time
  • To process payouts and wallet charges
  • To communicate shift offers, updates, and account notices
  • To maintain platform safety, including enforcing the cancellation and no-show policy described in our Terms

5. Information Sharing

We share personal information only where it's necessary to run the marketplace:

  • Between Businesses and Pros: a Business sees a Pro's first name and photo when a shift is claimed — not phone number or email. A Pro sees the Business's location and shift details needed to work the shift.
  • Service providers: Winixx ID (identity and wallet), Stripe (payouts and identity verification), Firebase (push notifications), and HERE Maps (address lookup, proxied server-side so your address is never exposed directly to a third-party API from your device).
  • Legal requirements: where required by law, subpoena, or to protect the safety of our users.

We do not use third-party analytics or ad-tracking tools on our website or in the app, and we never sell personal data or share it with third parties for their own marketing purposes.

6. Data Retention

Deleting your FillIn account removes your FillIn profile and shift history. If you're a Pro, this includes your earnings history within FillIn. We retain certain records — such as payout, transaction, and tax-related information — for as long as required by law, even after your FillIn account is deleted.

Deleting your FillIn account does not delete your Winixx ID account. Your Winixx ID account is separate, and it's what gives you access to the broader Winixx ecosystem without needing to sign up again for other Winixx products or services. If you'd also like to delete your Winixx ID account, you can do so by logging into your Winixx ID account and following the instructions there — a 30-day grace period follows, during which the account can be recovered by logging back in; after 30 days, the deletion is permanent.

For Businesses: deleting your FillIn account removes your Business's FillIn profile, shift history, and team member records. Wallet spending history is managed separately by Winixx ID and remains accessible through your Winixx ID Organisation account even after your FillIn account has been deleted.

For full detail on account deletion, see the Account Deletion section of our Terms.

7. Your Rights

Depending on your state of residence, you may have rights under U.S. state privacy laws (such as the California Consumer Privacy Act) to:

  • Know what personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information
  • Opt out of the sale or sharing of personal information — though as noted above, we don't sell or share your data for marketing purposes in the first place

To exercise any of these rights, contact us using the details in Section 10.

8. Security

We use industry-standard safeguards to protect personal information, including encryption of sensitive data in transit and at rest. No system is perfectly secure, and we can't guarantee absolute security, but we work to protect your information and to respond quickly if something goes wrong.

9. Children's Privacy

FillIn is not directed at, and is not intended for use by, anyone under 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the app or by email before they take effect.

11. Contact

Questions about this Privacy Policy, or requests related to your data, can be directed to our support team via the Help Center or through Contact.

FillIn

FillIn connects restaurants and catering teams with reliable staff for last-minute shifts — verified clock-in, same-day pay.

Company
  • About
  • Contact
  • Part of Winixx
Product
  • For restaurants
  • Catering
  • Events
  • For workers
Support
  • Help Center
  • Contact Support
  • FAQs
Get the app
Download on the App Store Get it on Google Play
© 2026 FillIn — part of the Winixx family.
Terms of Service Privacy Policy Accessibility