KhaadoPrivacy Policy
This policy explains how [COMPANY LEGAL NAME] ("Khaado", "we", "us") handles personal information when you use the Khaado mobile app and related services in Pakistan. Khaado is a marketplace where shops sell surplus food as discounted surprise boxes that you reserve in the app and collect in person.
1. Information we collect
| Information | Why we use it |
|---|---|
| Mobile phone number | To create your account and sign you in with a one-time code sent by SMS, and to send you texts about your orders, such as a cancellation. |
| Name (optional) | If you add one, it is shown on your account and to the shop when you collect. |
| Location | Only while you use the app and only if you allow it. We use it to show shops near you and their distance. If you turn on nearby alerts, we keep a coarse record of the area you last browsed from so we can tell you about boxes near it. We do not track location in the background. If you decline, the app shows a default city centre. |
| Reservations and order history | Which boxes you reserved, from which shop, the price, payment method (prepaid or cash at pickup), pickup status, cancellations and whether a box was collected or missed. We use this to run your orders, settle payments with shops, handle refunds and keep the service fair (for example, repeated no-shows may limit reservations). |
| Payment records | If you prepay, payment is processed by our payment provider. We receive the payment status, amount and the provider's reference. We do not receive or store your full card, bank or wallet credentials. |
| Push notification token and preferences | If you allow notifications, we store a device token and your settings (order updates, nearby drops, quiet hours) to send you the alerts you chose. Promotional "nearby" alerts are off unless you turn them on. |
| Shops you follow, favourites and ratings | To remember the shops you follow, notify you when they list boxes (if enabled), and let you rate a collected box from 1 to 5. |
| Technical and security data | Sign-in session records and server logs needed to keep your account secure and the service working. |
We do not use advertising trackers, and we do not sell your personal information.
2. Who we share it with
- Shops you reserve from: what they need to hand over your order, such as your reservation, your pickup code check and, if you set one, your name.
- Payment provider: [PAYMENT GATEWAY NAME] processes online payments (for example Raast, JazzCash, Easypaisa or card) and refunds.
- SMS provider: [SMS PROVIDER NAME], a Pakistani SMS aggregator, receives your phone number and message text to deliver sign-in codes and order messages.
- Push notifications: notifications are sent through Expo's push service, Apple Push Notification service and Google Firebase Cloud Messaging.
- Maps: the map and place search use Google Maps and Google Places. Search text and map requests are sent to Google under Google's Privacy Policy.
- Hosting: our servers and database are hosted by [HOSTING PROVIDER].
- Authorities: where required by Pakistani law or to protect the rights and safety of users, shops or Khaado.
3. How long we keep it
We keep your account information while your account is open. Order and payment records are kept for as long as needed for shop settlements, refunds, accounting and legal obligations, which is [RETENTION PERIOD]. One-time sign-in codes expire within minutes.
4. Deleting your account
You can delete your account at any time from Account in the app. When you do, your name and mobile number are removed, notifications stop, and you are signed out on all devices. Past order records stay, with nothing that identifies you, because shops' settlement history depends on them. If you have an order still in progress, deletion may need to wait until it is finished or refunded. If you no longer have the app, you can ask us to delete it by email. See Delete your account for both options.
5. Your choices
- Allow or deny location and notifications at any time in your phone's settings.
- Turn nearby alerts and order updates on or off, and set quiet hours, in the app.
- Ask us for a copy of your information or to correct it by emailing [CONTACT EMAIL].
6. Security
Sign-in tokens are stored in your phone's secure storage, connections to our servers are encrypted, and pickup codes are checked by the server so they cannot be forged. No system is perfectly secure, but we work to protect your information.
7. Children
Khaado is not intended for children under [MINIMUM AGE], and we do not knowingly collect their information.
8. Changes
If we change this policy we will update the effective date above and, for significant changes, tell you in the app.
9. Contact us
[COMPANY LEGAL NAME]
[REGISTERED ADDRESS], Pakistan
Email: [CONTACT EMAIL]