1. Who We Are
Qaimo Sawari is a peer-to-peer carpooling platform operated by Qaimo, Pakistan. We connect daily commuters with car and bike owners on shared routes across Pakistan. We are not a commercial ride-hailing service.
For privacy-related queries, contact us at: privacy@qaimo.pk
2. Information We Collect
2.1 Information You Provide
- Account details: Full name, email address, phone number (verified via SMS one-time code during registration), gender (male or female — used for safety-based ride-matching preferences)
- Identity documents: CNIC or passport scan (required for identity verification)
- Vehicle documents: Registration, driving licence (required for car/bike owners)
- Vehicle details: Make, model, and plate number (for car/bike owners)
- Profile photo: Optional but encouraged for trust
- Route information: Pickup and drop-off locations, working days, departure times
- Payment records: Billing history tied to ride attendance
2.2 Information Collected Automatically
- Location data: Real-time GPS coordinates during active rides (owners broadcast location to matched passengers only)
- Device data: Device type, operating system, Firebase Cloud Messaging (FCM) token for push notifications
- Usage data: App interactions, ride request history, chat messages
- Session data: Login sessions via secure cookies (no JWT tokens stored on device)
2.3 Information from Third Parties
- Google Maps: Used for address autocomplete and route display. Subject to Google's Privacy Policy.
- Firebase Authentication (Google): Used for SMS one-time code (OTP) verification of phone numbers during registration. Subject to Google's Privacy Policy.
- Firebase Cloud Messaging (Google): Used for push notifications. Subject to Google's Privacy Policy.
3. How We Use Your Information
| Purpose | Legal Basis |
|---|
| Matching passengers with owners on shared routes | Contractual necessity |
| Verifying your identity and vehicle documents | Legal obligation + safety |
| Processing attendance-based billing | Contractual necessity |
| Sending ride updates and notifications | Legitimate interest |
| Improving route-matching algorithms | Legitimate interest |
| Responding to support queries | Legitimate interest |
| Detecting fraud and policy violations | Legitimate interest + legal obligation |
We do not sell your data to advertisers. We do not use your data for profiling unrelated to carpooling.
4. Location Data
Location data is the most sensitive data we handle. Our practices:
- Owners: Real-time location is broadcast to matched passengers only during active ride legs
- Passengers: Location is used to verify boarding and drop-off; it is not broadcast to other users
- Storage: GPS breadcrumbs recorded during active rides are retained for ride audit and dispute resolution. Pickup and drop-off addresses are stored in your profile for route matching
- Purpose limitation: Location is used exclusively for ride coordination — never for advertising
5. Document Verification
Identity and vehicle documents are uploaded to our secure storage (hosted on our own servers). They are:
- Reviewed only by verified Qaimo admin staff
- Stored encrypted at rest
- Not shared with third parties
- Retained for the duration of your account, and deleted upon account deletion
6. Data Sharing
We share data only in these limited circumstances:
- Between matched ride parties: Name, profile photo, and pickup/drop-off location are shared between a matched owner and passenger to enable the ride. Gender information is used in the matching process when either party has applied a safety-based gender preference
- With service providers: Firebase (push notifications), Google Maps (location display). These processors are bound by data processing agreements
- Legal obligations: If required by Pakistani law, court order, or regulatory authority
- Safety emergencies: If we have reason to believe disclosure is necessary to prevent harm
7. Data Retention
| Data type | Retention period |
|---|
| Account data | Duration of account; retained for up to 90 days after a deletion request is processed |
| Identity/vehicle documents | Duration of account; retained for up to 90 days after a deletion request is processed |
| Ride history and billing records | 2 years (for dispute resolution) |
| GPS location history (ride breadcrumbs) | Retained for the lifetime of your account; deleted within 90 days of account deletion |
| Chat messages | 90 days after ride completion |
| Push notification tokens | Deleted automatically when invalid or expired |
8. Your Rights
You have the right to:
- Access your personal data held by us
- Correct inaccurate data
- Delete your account and associated data
- Export your data in a portable format
- Withdraw consent for non-essential data processing
To exercise any of these rights, email privacy@qaimo.pk with your registered email address.
9. Children's Privacy
Qaimo Sawari is not intended for users under the age of 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact us immediately.
10. Security
We implement industry-standard security measures:
- HTTPS (TLS) for all data in transit
- Encrypted document storage
- Session-based authentication with CSRF protection
- Bcrypt password hashing
- Admin access restricted and audited
No system is 100% secure. If you discover a security vulnerability, please report it responsibly to security@qaimo.pk.
11. Changes to This Policy
We may update this policy. Significant changes will be notified via in-app notification and/or email. Continued use after notification constitutes acceptance.
12. Contact
Qaimo
Pakistan
Email: privacy@qaimo.pk
Website: qaimo.pk