ManavParallel jobs detected via receipt analysis, not worker tracking.
Previously framed as continuous geo-tracking of every worker. The privacy-clean version: each receipt carries its own geo + timestamp context (with consent, disclosed in the schema). The employer runs rules against their own receipts, "two receipts from this employee, 4,000km apart, in 60 seconds." Workers loyal to one employer are invisible to the system.
- Geo + timestamp ride inside the receipt with explicit user consent.
- The employer holds the receipts. Manav never sees them. Manav never runs the analysis.
- Cross-employer overlap detection uses private set intersection, research-grade today, scoped to 2027.
The bad framing, geo-surveillance
"We track every worker's IP, location, and device continuously to flag anomalies like the same identity clocking in from two cities in the same hour." Requires worker telemetry. Creates a profile employers can subpoena. Violates GDPR + employment surveillance laws.
The privacy-preserving framing, receipt context
When the worker signs an action, an IP-derived coarse geohash (precision 4 or less) and timestamp ride inside the signed receipt, with consent disclosed in the schema. The employer holds the receipts and runs anomaly rules on its own data. Workers loyal to one employer are never observed.
Example receipts (same employee, intra-employer)
{
"receiptId": "rcp_a1",
"signedAt": "2026-05-19T14:02:11Z",
"actor": "pk_acme_4f81...",
"geohash": "9q5c" // San Francisco area, ±20km
}
{
"receiptId": "rcp_a2",
"signedAt": "2026-05-19T14:09:33Z",
"actor": "pk_acme_4f81...", // same actor
"geohash": "dr5r" // New York area, ±20km
}
The employer's rule engine fires. The employer investigates the actor. Manav was never involved in the analysis. The actor's identity is the per-context pseudonym, not a name, the employer correlates it via their own user records.
For cross-employer dual-employment detection (one human, two employers, same hour), the architecture proposes private set intersection, a research-grade primitive scoped for 2027. The intra-employer version above ships today.
Want to ship this in your own app?
Three lines of JavaScript. Demo key mnav_test_demo works on localhost.