Privacy Policy

This Privacy Policy explains what Karwan collects, why, and your choices. Karwan is a trust-first travel marketplace for Pakistan, operated by Muhammad Talha (sole proprietor), based in Peshawar, Pakistan. Contact: talha.flutter.devv@gmail.com.

Information you provide

Account details (name, email, phone), your profile and avatar, your CNIC number for identity verification, tour and booking details, messages you send in chat, reviews, photos you upload (portfolio, review photos), and support requests.

Information collected automatically

Approximate or precise location when you enable it (map centring, “tours near you”, live-trip tracking and SOS), device and app information, a Firebase Cloud Messaging token for notifications, and usage and crash diagnostics (Firebase Analytics and Crashlytics).

CNIC handling

Your CNIC is read on your device — the photo is processed locally and is not uploaded for text recognition. Your CNIC number is stored so our team can verify your identity, and is never shown publicly.

How we use your data

To provide bookings, payments, chat, reviews, verification and safety features; to send you notifications; to prevent fraud and abuse; and to improve the app.

Payments

Card payments are processed by Safepay. Karwan does not store your full card details. We store booking amounts and a payment reference to confirm and settle bookings.

AI features

Review and chat translation, and chat smart-reply suggestions, are processed by Google’s Gemini API through our secure server — only the text you choose to translate, or recent chat text for suggestions, is sent. CNIC recognition stays on your device.

Who we share data with

We share data only with the service providers that run the app: Supabase (database, storage, notifications), Google Firebase (messaging, analytics, crash reporting), Safepay (payments) and Google (AI features). We do not sell your personal data. We may disclose data if required by law.

Your contact details

Other users cannot see your email or phone from your public profile — contact happens through in-app chat. An organizer you book with receives the contact details needed to run your trip.

Your choices

You can edit your profile, control notification preferences, revoke location permission in device settings, and delete your account (Settings → Danger zone), which anonymises your profile and disables login while retaining records we are required to keep.

Data retention

We keep data while your account is active and as needed for legal, tax and dispute purposes.

Children

Karwan is not directed to children under 18.

Changes

We may update this policy; the latest update date is shown here and in-app.

Contact

Questions about your data? Email talha.flutter.devv@gmail.com.