Privacy Policy

Last Updated: June 2, 2026 | Effective: Immediately

1. Introduction

Ghar Se ("Company," "We," "Us," "Our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use our mobile application and related services (collectively, the "App"). This policy complies with applicable provisions of the Pakistan Prevention of Electronic Crimes Act 2016 (PECA) and international best practices including GDPR principles.

By using the App, you consent to the data practices described in this policy. If you do not agree, please do not use the App.

2. Information We Collect

We collect the following categories of information to provide, maintain, and improve our Services:

2.1 Information You Provide Directly

• Account Information: Full name, email address, phone number, date of birth, profile photo, and password (stored as SHA-256 salted hash — we never store plain-text passwords)
• Identity Verification (KYC): Government-issued ID details (type, number, expiry), address, and supporting documents. This data is collected only if you voluntarily choose to complete KYC verification
• Profile Information: Preferred language, pickup/drop locations, saved addresses, payment preferences
• Communication: Messages sent to drivers, shopkeepers, or support team through in-app chat or email
• Referral Information: Referral codes used during registration
• Data Deletion Requests: Reason for deletion request submitted through the App

2.2 Information Collected Automatically

• Location Data: Real-time GPS location is collected when the App is running in the foreground (and background when you have an active ride). We use this to connect you with nearby drivers, calculate fares, provide live tracking, and enable SOS emergency services
• Device Information: Device model, operating system version, unique device identifiers, IP address, mobile network information, app version, and device language settings
• Usage Data: Ride history, delivery orders, browsing behavior within the App, features used, time spent, interaction with notifications, and screens viewed
• Transaction Data: Payment amounts, timestamps, transaction IDs, and wallet activity
• Cookies & Local Storage: We use local storage (AsyncStorage) and session tokens to maintain your login state and app preferences

2.3 Information from Third Parties

• Payment Processors: Transaction confirmation, payment method type (but we do not store full payment card details)
• Analytics Services: Aggregated usage statistics to improve app performance
• Map Services: Google Maps API for navigation and location services

3. Legal Basis for Processing (GDPR Compliance)

We process your personal data on the following legal bases:

• Contractual Necessity: To provide the ride booking, delivery, and related services you request
• Legitimate Interests: To improve our services, ensure platform security, prevent fraud, and analyze usage patterns
• Legal Obligation: To comply with applicable laws, court orders, or regulatory requirements
• Consent: For KYC verification, location sharing, and marketing communications (where required by law)

4. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To connect you with drivers and shopkeepers, process bookings, calculate fares, facilitate payments, and enable ride tracking
• Safety & Security: To verify identities (KYC), enable SOS emergency alerts with GPS location, detect and prevent fraud, and enforce our Terms & Conditions
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical support
• Product Improvement: To analyze usage patterns, identify bugs, test new features, and improve the App user experience
• Communications: To send ride confirmations, status updates, promotional offers (with opt-out option), and important policy changes
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or government requests

5. Data Sharing & Disclosure

We share your personal data only in the following circumstances:

5.1 Sharing with Service Providers

• Drivers: Your first name, pickup/drop locations, and rating — shared only when a ride is active
• Shopkeepers: Your name, delivery address, phone number, and order details — shared only when you place a delivery order
• Map Providers: Google Maps receives your location data for navigation purposes (governed by Google's privacy policy)
• Firebase (Google): All data is stored on Firebase Realtime Database. Firebase's processing is governed by Google's Privacy Policy and our Data Processing Agreement with Google

5.2 Sharing for Legal Reasons

We may disclose your information if required by law, court order, or government agency (including under PECA 2016), or if we believe in good faith that such disclosure is necessary to: (a) comply with legal obligations; (b) protect our rights, property, or safety; (c) prevent fraud or imminent harm; (d) respond to emergency situations involving risk of death or serious injury.

5.3 Sharing with Consent

We may share your information with third parties when you have given explicit consent.

5.4 No Sale of Data

We do NOT sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Data Retention

We retain your personal data for the following periods:

• Active Account: Data is retained for as long as your account is active and you use our Services
• Inactive Account: If your account is inactive for 24 consecutive months, we may delete your personal data
• Upon Deletion Request: All personal data is permanently deleted within 30 days of your verified deletion request
• Legal Holds: Certain transaction records may be retained for up to 5 years to comply with tax and legal obligations
• Aggregated Data: Anonymized, non-personally identifiable data may be retained indefinitely for analytical purposes

7. Data Security Measures

We implement industry-standard security measures to protect your data:

• Encryption in Transit: All data transmitted between the App and our servers uses HTTPS/TLS 1.2+ encryption
• Password Security: Passwords are hashed using SHA-256 with unique per-user salt. We never store or have access to plain-text passwords
• Database Security: Firebase Realtime Database is protected by security rules, authentication mechanisms, and Firebase Security Rules that restrict unauthorized access
• Session Management: Secure random session tokens are generated for authenticated sessions and stored in encrypted AsyncStorage on your device
• Access Controls: Only authorized personnel have access to production data, subject to confidentiality agreements
• Regular Audits: We periodically review our security practices and update them to address emerging threats

8. Your Rights & Choices

You have the following rights regarding your personal data:

• Right to Access: You can view your profile information, ride history, and transaction data within the App at any time
• Right to Rectification: You can update your name, phone number, and profile information through the App settings
• Right to Deletion ("Right to be Forgotten"): You can request complete deletion of all your personal data through the Data Deletion page in the App. We will permanently delete all data within 30 days
• Right to Restrict Processing: You can stop using the App at any time. Active ride processing will continue until completion
• Right to Data Portability: Upon request, we will provide your personal data in a structured, commonly used format
• Right to Object: You can opt out of promotional communications at any time by contacting support
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal
• Right to Lodge Complaint: You have the right to file a complaint with the relevant data protection authority in Pakistan

9. Location Data - Specific Provisions

Your privacy regarding location data is important to us:

• Location is collected only when the App is in use (foreground) or during an active ride (background)
• You must grant location permission on your device to use the App. You can revoke this permission at any time through your device settings, but the App may not function properly without it
• Location data is shared with Drivers only during active rides and with emergency services when SOS is triggered
• Location history is retained as part of your ride records and is deleted when you request data deletion

10. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal data without parental consent, we will take steps to delete such information promptly. If you believe a minor has provided us with personal data, please contact us.

11. International Data Transfers

Your data is stored on Firebase servers which may be located in various countries globally. By using the App, you consent to the transfer of your data to servers located outside Pakistan. Firebase (Google Cloud) maintains compliance with international data protection standards. Where required, we have Data Processing Agreements in place with our service providers to ensure adequate protection of your data.

12. Cookies & Tracking Technologies

The App uses local storage (AsyncStorage) and session tokens for essential functionality including: maintaining login sessions, storing app preferences, and remembering your referral code. These are stored locally on your device. We do not use third-party tracking cookies for advertising purposes within the App. The website version may use cookies as described in our Cookie Consent notice.

13. Third-Party Links & Services

The App may contain links to third-party websites or services (e.g., Google Maps). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be notified to you through the App (push notification, in-app banner, or email). Your continued use of the App after the effective date constitutes your acceptance of the updated policy. We encourage you to review this policy periodically. The "Last Updated" date at the top of this page indicates when this policy was last revised.

15. Grievance Redressal

If you have any complaints, concerns, or questions about this Privacy Policy or our data practices, please contact our Grievance Officer:

Grievance Officer / Data Protection Officer
Ghar Se
Email: dpo@gharseapp.com
We acknowledge all complaints within 48 hours and strive to resolve them within 30 days.

16. Contact Us

Ghar Se
Islamabad, Pakistan
Email: privacy@gharseapp.com
Phone: +92-XXX-XXXXXXX

YOUR PRIVACY MATTERS: We are committed to protecting your personal data. If you have any questions about how we handle your information, please contact our Data Protection Officer at dpo@gharseapp.com.