Privacy Policy
Your data, in plain English.
Thekaydar is built on one idea: trust you can verify. That applies to your data too. This page explains exactly what we collect, why, who sees it, and how to delete it. We never sell your data, and we never touch your money.
1. What we collect
If you're a customer
- Account basics: your name, phone number (required, it powers the visit verification), optional email, and a password if you sign up by phone.
- Bookings and ratings: the services you book, the one-time visit codes, and the reviews you leave.
- Addresses you save for home services.
If you're a seller
- Identity (KYC): your full name, CNIC number, CNIC scans and a selfie. A human admin reviews these to confirm you are a real person before your listing goes live.
- Business details: business name, category, city, services, prices, working hours, service area and photos you upload.
From everyone
- Location at the moment of verification: when a visit code is entered, we check the GPS position of both phones to confirm you are at the agreed place. We use it to validate that visit and to resolve disputes about it.
- Chat messages inside the app. Phone numbers and links are automatically hidden until a booking is accepted, to protect both sides.
- Technical data: device and browser type, app notifications token, and standard server logs that help us keep the service secure.
2. What we deliberately don't collect
- No payment cards, no wallets. Customers pay the business directly, face to face. Payment details never pass through Thekaydar.
- No advertising trackers. We don't run third-party ad networks on our apps.
- No data sales. Not to brokers, not to advertisers, not to anyone. Ever.
3. Your location is confidential
For home-service bookings, your exact address and pin location are shared with one person only: the seller you booked, and only for the duration of that order. It is never shown publicly, never kept on the seller's profile, and never shared with other sellers.
4. How we use your data
- To run the service: match you with businesses, deliver bookings, send notifications.
- To verify visits with the 4-digit code and GPS check, so ratings stay honest.
- To prevent fraud: fake accounts, fake reviews, code brute-forcing and spam.
- To resolve disputes, using the verification evidence from the order.
- To respond when you email us.
5. Who we share data with
Only the service providers that run Thekaydar, and only what each one needs to do its job:
- Hosting and database: Railway (our servers and data).
- Content delivery and file storage: Cloudflare (website delivery; KYC documents and photos live in private storage with access controls).
- Sign-in: Google Firebase (phone and Google authentication).
- Maps: Google Maps (showing locations and distances).
- Email and notifications: Resend (email) and Firebase Cloud Messaging (push).
Beyond that, we disclose data only if required by applicable Pakistani law or a valid legal process, and only the minimum required.
6. How we protect it
- All traffic is encrypted in transit (HTTPS everywhere).
- Passwords are stored hashed, never in plain text.
- KYC documents are kept in private storage, visible only to authorised admins through signed, expiring links.
- Login, code entry and sensitive endpoints are rate-limited and lock out after repeated failed attempts.
- Every sensitive admin action is written to a permanent audit log.
7. How long we keep it
Account data is kept while your account is active. Order and verification records are kept as long as needed for dispute resolution and fraud prevention. Server logs rotate on a short schedule.
8. Your rights and deleting your account
- Access and correction: you can view and edit your profile details in the app at any time.
- Deletion: delete your account yourself in the app (Profile, then Delete account). This removes your personal data, except records we must keep for open disputes, fraud prevention or legal obligations.
- Questions or requests: email [email protected] and a real person will respond.
9. Age requirement
Thekaydar is for adults. You must be at least 18 to create an account.
10. Changes to this policy
If we change this policy in a meaningful way, we will update this page and the effective date above, and notify you in the app when the change matters to you.
11. Contact
Thekaydar, Pakistan
[email protected]
The short version: we collect what the service needs to work, we guard it, we never sell it, your location stays private, and you can delete your account yourself. That's the whole deal.