Privacy Policy

1. Who we are

humsafr is a commute pooling platform operated in Pakistan. References to "humsafr", "we", "us", or "our" in this policy mean the humsafr service and its operating team. You can reach us at contact@humsafr.com with any privacy-related questions.

2. What data we collect

We collect data in three ways: information you give us directly, information generated when you use the service, and information from third-party verification partners.

• Account data: Your phone number, email address, and full name when you sign up.
• Identity verification: For community-verified accounts, your institution email. For driver KYC, your CNIC number, driving licence number, and selfie photograph. For premium trust tiers, identity data is processed by NADRA or an authorised verification partner — humsafr stores only the verification outcome, not your raw NADRA data.
• Location data: Your device location is collected during an active trip to power real-time trip-share and emergency SOS. We do not track your location continuously between trips.
• Trip data: Route origin, destination, trip timing, matched pool members, completion status, and fare settlement records.
• Payment data: Payment method type and last four digits for display purposes. Full payment instrument details are handled directly by Raast, JazzCash, or Easypaisa — humsafr does not store card numbers or full wallet credentials.
• Communication data: In-app messages and masked-call logs between riders and drivers, retained for safety investigation purposes and then deleted after 90 days.
• Device and usage data: Device type, operating system version, app version, and crash logs for technical diagnostics.
• Waitlist data: If you joined via a waitlist form, your email address and any city or role preference submitted.

3. How we use your data

• To create and manage your account and verify your identity at the appropriate trust tier.
• To match you with riders or drivers on compatible corridors.
• To process fare payments and deliver payouts to drivers via Raast.
• To provide live trip-share to trusted contacts during active trips.
• To respond to SOS events and cooperate with emergency services (Rescue 1122) when activated.
• To send service notifications — booking confirmations, payout receipts, safety alerts, and launch updates. We do not send marketing messages without your consent.
• To detect fraud, investigate safety incidents, and enforce platform conduct rules.
• To improve route matching algorithms and app performance using aggregated, anonymised usage data.

4. Who we share your data with

We do not sell your personal data. We share only what is necessary for the service to function.

• Matched pool members: Your first name, institution badge, trust tier indicator, and rating are shared with matched pool members before a trip. Your phone number is never shared — calls go through the masked relay.
• Verification partners: NADRA-authorised KYC providers receive identity data to perform verification checks. They are contractually required to use it only for that purpose.
• Payment processors: Raast, JazzCash, and Easypaisa receive only the data needed to execute a payment or payout.
• Emergency services: If you activate the SOS feature, your live location and trip details are shared with Rescue 1122 and your nominated trusted contacts.
• Legal obligations: We may disclose data when required by a valid court order or Pakistani law.

5. Location data

Location permission is requested when you begin a trip. During an active trip, location is shared with your matched pool and optionally with trusted contacts via the live trip-share feature. You can revoke location permission at any time in your device settings, which will prevent trip-sharing but may affect your ability to use live safety features.

6. Data retention

• Account data: Retained while your account is active. Deleted within 30 days of a verified account closure request.
• Trip records: Retained for 24 months for safety investigation and dispute resolution, then anonymised.
• KYC documents: Retained for the minimum period required by applicable law, then securely deleted.
• Communication logs: Deleted after 90 days unless retained for an open safety investigation.
• Waitlist emails: Retained until you unsubscribe or request deletion.

7. Your rights

You have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate data in your account profile.
• Request deletion of your account and associated personal data.
• Withdraw consent for optional data uses, such as personalisation features.
• Receive a portable export of your trip history and account data.

To exercise any of these rights, email contact@humsafr.com from the address associated with your account. We will respond within 30 days.

8. Security

We use industry-standard encryption in transit (TLS 1.2+) and at rest for sensitive fields including CNIC numbers and payment references. Access to identity data is restricted to authorised team members and verified third-party processors. If a data breach occurs that affects your personal data, we will notify you promptly and report to relevant authorities as required by law.

9. Children

humsafr is not intended for users under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it.

10. Changes to this policy

We may update this policy as the product evolves. If a change materially affects how we handle your data, we will notify you via in-app message or email at least 14 days before the change takes effect. Continued use of the service after that date constitutes acceptance of the revised policy.

11. Contact

For privacy-related questions, data requests, or complaints: contact@humsafr.com. Alternatively, use the contact form.

This policy is governed by and construed in accordance with the laws of the Islamic Republic of Pakistan. Disputes arising from this policy are subject to the jurisdiction of the courts of Lahore, Pakistan.