1. Introduction
App Identifier
App Name: Barqat
Platform: Android
Purpose: FMCG (Fast-Moving Consumer Goods) order management and delivery platform
Intended Users
Barqat is designed for and intended to be used by:
- Retailers - Small shop owners and retail establishments
- Riders - Delivery personnel and logistics partners
- Storekeepers - Shop managers and warehouse operators
- Distributors (Admins) - FMCG distributors and administrative users
π Not for Children
This app is NOT intended for children under 13 years old. If you are under 13, you should not use this app. Parents and guardians should monitor their children's device usage.
Welcome to Barqat ("we," "us," "our," or "Company"). We are committed to protecting your privacy and ensuring you have a positive experience on our Android mobile application (the "App").
This Privacy Policy explains how we collect, use, disclose, and otherwise handle your information, including personal data and personally identifiable information (collectively, "Personal Information") through our App.
π Important Notice
Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our App. This policy is specifically for the Barqat Android application.
Note for Pilot Testing: During our initial pilot phase, we use basic registration (Phone & Password). SMS OTP verification is currently disabled and will be implemented as an enhanced security feature after the pilot testing phase concludes.
2. Information We Collect
We collect information necessary to provide our FMCG order management service. Here's exactly what data we collect and why:
2.1 Information You Provide to Us
π Registration and Account Information
- Phone Number - For user identification and account access. (Note: Currently uses basic authentication; OTP verification is planned post-pilot phase)
- Name - To identify your account and for communication
- Email Address - For account recovery and important notifications
- Physical Address - For delivery and location-based services
- Business Information - Store name, business type, registration details
- Profile Picture - For account verification and in-app identification
π¦ Order and Transaction Information
- Orders - Items ordered, quantities, prices, delivery addresses
- Communication - Messages, chat history, support inquiries
- Feedback - Reviews, ratings, complaints, suggestions
- Payment Details - Transaction records (not full card details)
πΈ Camera & Media Files
- Purpose - Uploading product images, business documents, and profile photos
- Data - Photos and media you choose to upload through the app
- Permission - We request camera and photo library permissions only when needed
2.2 Information Collected Automatically
π Location Data
- Current Status (MVP): Location data is NOT currently collected by the app
- Future Plans: We plan to collect GPS location in future updates for:
- Real-time order delivery tracking
- Rider/delivery personnel location services
- Service optimization and delivery route planning
- When Implemented: This will only happen with your explicit permission
- Your Control: You will be able to disable location sharing anytime in device settings
- Notification: We will notify you before activating location collection features
π± Device Information
- Device type, model, operating system version
- Unique device identifiers (Android ID, IDFA)
- Device IP address
π Usage and Analytics Data
- Firebase Analytics - Pages accessed, features used, time spent in app, user interactions
- Crash Reports - App crashes and error logs via Firebase Crashlytics
- Performance Data - App performance metrics and technical diagnostics
- Search Queries - Your searches and product filters within the app
2.3 Third-Party Information
- Firebase Analytics - User engagement metrics and behavior patterns
- Firebase Crashlytics - App stability and error data
- Google Play Services - Device identifiers and app installation data
- Payment Processors - Transaction confirmations
- Delivery Partners - Delivery status and location updates
2.4 Cookies and Tracking Technologies
The Barqat Android app uses the following for enhanced functionality:
- Local Storage - To remember your preferences and login status
- Analytics - Google Firebase Analytics to track app usage patterns
- Crash Reporting - Firebase Crashlytics to identify and fix problems
3. How We Use Your Information
We use the information we collect for the following specific purposes:
β
Service Delivery
- Create and manage your account
- Process and fulfill orders
- Track deliveries in real-time
- Provide customer support
- Send order confirmations
π Location Services (Future)
- Currently NOT collecting location data
- Will track rider/delivery locations in future
- Will optimize delivery routes
- Will provide location-based features
- You will have full control when enabled
π Analytics & Improvements
- Analyze how you use the app
- Identify popular products
- Improve app performance
- Fix technical issues
- Crash reporting via Crashlytics
π¬ Communication
- Send order updates via SMS
- Send delivery notifications
- Respond to your inquiries
- Send important alerts
πΈ Media Processing
- Store uploaded images securely
- Display product photos
- Show profile pictures
- Enable document uploads
π‘οΈ Legal & Safety
- Comply with legal obligations
- Prevent fraud and abuse
- Protect user safety
- Enforce Terms of Service
Do Not Track
Barqat respects privacy preferences. You can disable analytics and location tracking through app settings and device permissions.
4. How We Share Your Information
We do NOT sell your personal information to third parties. We only share data as described below.
4.1 Service Providers (Required for Operations)
We share information with trusted partners who help us operate the app:
| Service Provider |
Purpose |
Data Shared |
| Firebase (Google) |
Analytics, Crashlytics, Authentication, Data Storage |
Analytics data, crash logs, user IDs, device info |
| Payment Processors |
Process payments and transactions |
Payment information (tokenized/encrypted) |
| Delivery Partners |
Fulfill orders and track deliveries |
Location data, order details, addresses |
| Cloudflare R2 |
Store images and media files |
Photos, documents, profile pictures |
| SMS Provider |
Send order and delivery notifications |
Phone number, message content |
4.2 Legal Requirements
We may share information when required by law or to protect rights:
- Law enforcement requests with proper legal authority
- Court orders or legal process
- Government agencies in compliance with law
- To protect our legal rights or prevent fraud
- To ensure safety and prevent abuse
4.3 Business Transfers
If Barqat is acquired, merged, or sold, your information may be transferred as part of that transaction. We will notify you via email or app notification.
4.4 Anonymized and Aggregate Data
We may share anonymized data that cannot identify you:
- Aggregate usage statistics for research
- Industry benchmarks and trends
- Public anonymized insights
β οΈ Your Information Is Protected
We have data processing agreements with all service providers. They must follow our privacy standards and cannot use your data for their own purposes beyond what's necessary to provide services to us.
5. Firebase Services & Third-Party Disclosure
π Third-Party Services
The Barqat app uses Google Firebase services to provide core functionality including analytics, performance monitoring, crash reporting, authentication, and data storage. Google processes your data according to their privacy policies.
5.1 Firebase Analytics
What it does: Tracks how you use the app, what features you access, and how often.
- Collects user behavior and engagement metrics
- Collects device identifiers and usage data
- Helps us understand app usage patterns and improve features
- Google Privacy Policy β
5.2 Firebase Crashlytics
What it does: Automatically reports app crashes and errors.
- Sends crash reports when the app breaks
- Collects technical error logs for diagnostics
- Does not include personally identifiable information in logs
- Helps us fix bugs and improve app stability
5.3 Firebase Cloud Messaging (FCM)
What it does: Delivers push notifications to your device.
- Sends order updates, delivery notifications, and alerts
- Stores device tokens securely for messaging
- Messages are encrypted in transit
- You can disable notifications anytime in app settings
5.4 Firebase Authentication
What it does: Manages your login and account security.
- Secures account access through standard authentication (OTP verification currently disabled for pilot phase)
- Securely stores authentication credentials
- Implements security best practices
- Prevents unauthorized account access
5.5 Other Technologies
- Cloudflare R2 - Secure cloud storage for your uploaded photos and documents
- Google Play Services - Device identification and app management
5.6 Your Control Over Third-Party Services
You can control what data these services collect:
- Disable location tracking in device settings
- Disable push notifications in app settings
- Disable analytics collection in app settings
- Grant or revoke app permissions anytime
6. Data Security
Protecting your data is our top priority. We implement multiple layers of security to keep your information safe from unauthorized access, modification, or loss.
6.1 Encryption & Technical Security
- π Data in Transit - All data traveling between your device and our servers is encrypted using HTTPS/TLS protocols
- π Data at Rest - Sensitive data stored on servers is encrypted using industry-standard encryption
- π Password Protection - Your login credentials are hashed and never stored in plain text
- π‘οΈ Firewalls - Network firewalls prevent unauthorized access to our systems
6.2 Access Controls
- Role-based access control - employees only access data needed for their job
- Multi-factor authentication for admin accounts
- Activity logging to detect unauthorized access
- Regular access reviews and audits
6.3 Mobile App Security
- Your credentials are stored securely in your device's secure enclave
- Biometric authentication (fingerprint/face) support for extra security
- Automatic logout after inactivity
- App is regularly tested for security vulnerabilities
6.4 Security Practices
- Regular security audits and penetration testing
- Data breach response plan in place
- Employee training on data protection and privacy
- Compliance with industry security standards
β οΈ Security Disclaimer
No system is 100% secure. While we implement industry-leading protections, we cannot guarantee absolute security. You are responsible for protecting your login credentials. If you suspect unauthorized access to your account, change your password immediately and contact us at [email protected].
6.5 Data Breach Notification
If we discover a security breach affecting your personal information:
- We will investigate immediately
- We will notify you via email and app notification
- We will explain what happened and what you should do
- We will work to prevent future incidents
7. Data Retention
7.1 Active Account Data
We retain data for:
- Current Orders: Until order completion and dispute resolution (30 days)
- Account Information: While account is active
- Payment Information: While account is active (not stored long-term)
- Communication: Until deletion request or account closure
7.2 Inactive Account Data
After account closure or 2 years of inactivity:
- Account data deleted or anonymized
- Order history retained for legal/tax purposes (7 years)
- Personal information removed
7.3 Analytics and Crash Logs
- Firebase Analytics: Auto-deleted after 90 days (Firebase default)
- Crashlytics: Auto-deleted after 90 days
- Can be manually deleted from Firebase Console
7.4 Backup Retention
Backup copies may be retained for disaster recovery up to 30 days.
8. Your Privacy Rights & Data Control
You have rights regarding your personal data. We are committed to helping you exercise these rights in a transparent and timely manner.
8.1 Right to Access Your Data
You have the right to:
- Request a copy of all personal data we have about you
- Download your data in a machine-readable format (CSV, JSON, etc.)
- Know exactly what information we're storing
- View your account information in the app anytime
8.2 Right to Correct Your Data
You have the right to:
- Update or correct inaccurate information
- Complete incomplete information about you
- Edit your profile, contact info, and preferences in the app
- Request correction of information via email
8.3 Right to Delete Your Data
You have the right to request:
- Deletion of your account and associated personal data
- Removal of your profile and account information
- Note: Some data like order history may be retained for legal/financial/tax compliance purposes (7 years)
- Once deleted, we will stop collecting new data from you
8.4 Right to Object & Opt-Out
You can opt-out of:
- π§ Marketing Emails - Click the unsubscribe link in any email
- π± SMS Messages - Reply STOP to any text message
- π Location Tracking - When location features are enabled in the future, you can disable them in device settings
- π Push Notifications - Disable in app settings
- π Analytics - Disable in app settings (if available)
8.5 How to Exercise Your Rights
To request access, correction, deletion, or other privacy rights:
- Email: [email protected]
- Subject Line: "Privacy Request [Type of Request]"
- Include: Your full name, email, phone number, and account details
- Specify: Which right you're exercising (access, correction, deletion, etc.)
- Timeline: We will respond within 30 days
8.6 Right to Data Portability
We will provide your data in a structured, commonly-used, machine-readable format so you can transfer it to another service if you choose.
9. Regional Privacy Rights
πͺπΊ 9.1 European Union (GDPR)
If you're in the EU, you have additional rights under GDPR:
- Right to object to processing
- Right to restrict processing
- Rights related to automated decision-making
- Right to lodge a complaint with supervisory authority
- Contact our Data Protection Officer for GDPR-specific requests
πΊπΈ 9.2 California (CCPA)
If you're in California, you have rights to:
- Know what personal information is collected
- Know whether personal information is sold/shared
- Delete personal information (with exceptions)
- Opt-out of sale of personal information
- Non-discrimination for exercising your rights
9.3 Other Jurisdictions
If your jurisdiction provides specific privacy rights, we will honor them. Contact us to learn more about rights applicable to you.
10. Children's Privacy
10.1 Age Restrictions - Not for Children Under 13
The Barqat Android app is NOT intended for children under 13 years old.
This app is designed exclusively for business users including retailers, riders, storekeepers, and distributors. The app includes order processing, financial transactions, and location tracking that are inappropriate and unsafe for children.
10.2 No Intentional Collection from Children
We do NOT:
- Intentionally collect data from children under 13
- Target children in our marketing or app design
- Allow registration for users under 13
- Use child-directed marketing tactics
10.3 What Happens If We Discover a Child User
If we discover a user under 13 is using the Barqat app:
- We will immediately disable their account
- We will delete all associated personal data
- We will notify parents/guardians at their email address
- We will not reinstall the app for this user
10.4 Parental Rights & Safeguards
Parents and guardians can:
- Monitor their child's device for app installation
- Use device parental controls to restrict app access
- Request account deletion and data removal
- Contact us about any child privacy concerns
10.5 Report Child Users
If you're a parent/guardian of a child using this app, or if you see a child using it:
- Contact us immediately at [email protected]
- Include the child's name, age, and account information
- We will take immediate action to remove the account
11. Advertisements & In-App Ads
11.1 Current Ad Policy
The Barqat app currently does not display any advertisements to users.
11.2 Future Ad Plans
We may introduce advertisements in the future to support and improve our free service. If we do:
- We will update this Privacy Policy before implementing ads
- We will notify you via in-app notification and email
- Ads will be from Google AdMob or similar reputable ad networks
- You will have the option to opt-out of personalized ads
- We will not sell your personal data to advertisers
11.3 Third-Party Ad Networks
If we use ad networks in the future, they may collect:
- Device identifiers (for analytics, not personal identification)
- IP address and general location
- App usage data
Their privacy policies will apply to their data collection. You can opt-out of personalized ads in Google settings.
12. Third-Party Links & Services
The Barqat app may contain links to third-party websites and services. We are NOT responsible for:
- Their privacy practices or policies
- Their content accuracy or quality
- Their security practices
- Any data they collect from you
Always review third-party privacy policies before providing your information to them. We are not liable for any third-party data handling.
13. International Data Transfer
13.1 Where Your Data Is Processed
Your data may be transferred, stored, and processed in:
- Pakistan (primary jurisdiction)
- United States (Google Firebase servers)
- European Union (Cloudflare R2 storage)
- Other countries where our service providers operate
13.2 Legal Basis for International Transfers
We transfer data based on:
- Your consent when you use the app
- Data Processing Agreements with service providers
- Standard Contractual Clauses (SCCs) for GDPR compliance
- Applicable data protection laws
13.3 Your Rights Regarding Transfers
You have the right to:
- Know which countries process your data
- Request information about data transfer safeguards
- Object to specific transfers (with limitations)
- Request data remain in Pakistan only
14. Changes to This Privacy Policy
14.1 How We Update This Policy
We review and update this Privacy Policy regularly to reflect:
- Changes in our data handling practices
- New features we add to the app
- Changes in privacy laws and regulations
- User feedback and suggestions
14.2 When Updates Take Effect
- Minor Changes: Effective immediately upon posting
- Material Changes: We'll notify you 30 days before implementation
- Legal Compliance: May be effective immediately to comply with laws
14.3 How We Notify You
We'll notify you of material changes via:
- In-app notification banner
- Email to your registered email address
- Prominent notification when you open the app
14.4 Your Agreement to Changes
If you continue using the app after we post changes, you're agreeing to the updated Privacy Policy. If you don't agree with changes, please stop using the app.
14.5 Version History
You can always view the current version at the bottom of this policy. Previous versions are available upon request.
15. Compliance Standards & Certifications
15.1 Global Privacy Standards
The Barqat Android app complies with the following privacy regulations and standards:
- β Google Play Store Privacy Policy Requirements - We meet all Google Play privacy and security requirements
- β GDPR (EU) - General Data Protection Regulation compliance
- β CCPA (California) - California Consumer Privacy Act compliance
- β CalOPPA (California) - Online Privacy Protection Act compliance
- β Apple App Store Privacy Requirements - Alignment with Apple privacy standards
- β Pakistani Data Protection Laws - Compliance with local regulations
15.2 Security Standards
- HTTPS/TLS encryption for all data in transit
- Industry-standard encryption at rest
- Regular security audits and testing
- Data Protection Agreements with all third-party services
15.3 Google Play Specific Compliance
We specifically comply with Google Play's requirements including:
- Clear disclosure of data collection and use
- Explicit permission requests for sensitive data (location, camera, contacts)
- No collection from children under 13
- Transparent third-party service disclosure
- Clear user rights and data control options
- Secure data handling practices
16. Appendix: Third-Party Privacy Policies & Resources
For complete information about how third-party services we use handle your data, please visit their privacy policies:
Essential Services
App Store Policies
Device Security
Privacy Resources