Ashhkaro

Privacy Policy

Last updated: August 23, 2026

This Privacy Policy explains how Ashhkaro("we", "us", or "our") collects, uses, and protects your information when you use the Ashhkaro mobile application, our installable web app, and our website at https://ashhkaro.com(together, the "Platform"). Ashhkaro is a marketplace that lets customers discover local businesses near them, book appointments for services such as salons, workshops and clinics, browse property listings for sale, rent and short stays, scan in-store QR codes to redeem discounts, subscribe to savings plans and referral rewards, and lets sellers list and manage their businesses, shops, properties and events. By using the Platform, you agree to this Policy.

1. Information We Collect

We collect the following information so the Platform can work:

  • Account information: your full name, email address, phone number, and the country, province and city you select, along with your password when you create an account with email.
  • Google Sign-In: if you choose to sign in with Google, Google shares your name, email address and profile picture with us to create or sign you into your account. We never receive your Google password.
  • Optional profile details:if you register through our "Are You A Woman?" entry, we record that your business is woman-led so the Womenpreneurship badge can be shown on your profile and listings. This is a self-declaration you choose to make, and you can ask us to remove it at any time.
  • Business (shop) information: for sellers, your business name, category, description, address, country, province, city and area, the business location you set by placing a marker on a map, whether you sell worldwide or in one country, services offered, prices, availability, products, and any catalog PDF you upload. This business location is the point you choose on the map, not a reading from your device.
  • Property listings: for property sellers, agencies and investors, the details you publish about a listing — title, description, purpose (sale, rent or booking), type, price, area, bedrooms and bathrooms, amenities, address, city and map coordinates, photos, and any video you upload or link to.
  • Identity and business verification documents: if you apply for a verified badge or list under certain categories, we collect the documents you submit for review — images of the front and back of your CNIC (national identity card), your NTN (tax number) and its supporting document, and, for housing society listings, an ownership licence together with the society name and area. These documents are reviewed manually by our authorised staff, are never shown to other users, and are used only to verify that you and your business are genuine.
  • Payout and withdrawal details: if you accept online payments as a seller, or you are a referral partner or franchise partner who withdraws earnings, we store the bank details you provide — bank name, account title, account number and/or IBAN — so we can pay you. We also keep a record of your earnings, commissions and withdrawal requests.
  • Location information:if you grant permission, the Platform uses your device's approximate or precise location to show the businesses and properties nearest to you first. This is optional — you can decline and browse by country and city instead, in which case we fall back to the location on your profile. We use your location to sort and filter listings and do not continuously track or store your location history.
  • Images, videos and files you upload: photos and videos you choose from your device, or capture with your camera, and documents such as a catalog PDF, used as your business logo, shop photos, product images, property photos and tours, advertising banners, or evidence attached to a report.
  • QR scans:when you scan a seller's discount QR code with your camera, we record the discount or voucher redeemed. The camera is used only while you are actively scanning; we do not record or store the camera feed.
  • Booking information: the appointments you make or receive, including the selected service, date and time, price, and any notes you add.
  • Property tour requests: when you ask to view a property, we collect your name, phone number, email address, whether you want a video or in-person tour, and your preferred date and time, and we pass these to the seller or agency that owns the listing.
  • Event registrations:when you register for a seller's event, we collect your name, phone number and email address and share them with that seller so they can contact you.
  • Advertising requests: if you apply to advertise on our property banners, we collect the banner image you upload, the run length you request, and the account that requested it.
  • Activity information: reviews and ratings you leave, items you add to your wishlist, referral codes you use or are given, vouchers and memberships you use, services you register early interest in, and reports or feedback you send us (including any photos or videos you attach).
  • Listing statistics: for sellers, we count how many times a listing was shown, opened and saved. These are aggregate counts shown to the seller; they do not identify the customers behind them.
  • Payment information: records of subscriptions, memberships, business and property listings, advertising and other purchases, including the amount, the currency you were charged in, and a payment reference. Payments are processed by our payment provider (PayFast) — we do not collect or store your card or online banking credentials on our servers. Bank details you give us for receiving payouts are described above and are separate from this.
  • Notifications: if you allow push notifications, we store a device notification token so we can send you booking updates, tour and event alerts, verification and listing decisions, reminders, and important account announcements. You can turn notifications off at any time in your device or browser settings.
  • Device and usage information: basic technical data such as device type, operating system version, app version, and basic diagnostic information, along with how you interact with the Platform, used to keep it secure and reliable.

2. How We Use Your Information

  • Create and manage your account and keep you signed in;
  • Enable bookings, tour requests and event registrations between customers and sellers;
  • Show business and property listings, services, prices and locations;
  • Use your location, when permitted, to show the businesses and properties nearest to you first, and to show listings available in your country;
  • Review the identity, tax and ownership documents you submit so we can verify sellers and reduce fraudulent listings;
  • Let you scan QR codes to redeem in-store discounts, vouchers and referral rewards;
  • Send push notifications and emails for booking updates, tour and event confirmations, purchase receipts, verification results, and account alerts;
  • Process payments, subscriptions, memberships, listings and advertising, and issue receipts;
  • Calculate and pay seller earnings, referral commissions and franchise shares, and process withdrawal requests;
  • Give sellers aggregate statistics about how their listings perform;
  • Investigate reports, keep the platform safe, and reduce fraud and abuse;
  • Provide customer support and respond to your requests and feedback;
  • Improve, maintain, and secure the Platform.

3. Information That Is Public or Shared With Others

Some information is meant to be seen by other people. Please only publish what you are comfortable making public:

  • Published listings are public. Your business or property listing — including its name, description, photos, videos, catalog, prices, map location and any verification or Womenpreneurship badge — can be seen by anyone using the Platform, and shop and property pages can be shared as links that open on our website.
  • Reviews and ratings you leave are shown publicly with your name.
  • Sellers receive your contact details when you book an appointment, request a property tour, or register for an event — your name, phone number and email address, so they can reach you about that request.
  • Verification documents are never public. CNIC, NTN and ownership documents are visible only to our authorised review staff.

4. Third-Party Services

We rely on trusted third-party providers to operate the Platform. They process your information only as needed to provide their services:

  • Supabase— hosting, authentication, database, and secure file storage for the Platform's data, including uploaded images, videos and documents.
  • PayFast — processing of payments. Your payment details are handled directly by PayFast under its own privacy policy.
  • Google Firebase Cloud Messaging — delivery of push notifications to your device.
  • Google Maps and Google Places — displaying maps and business or property locations, and helping sellers search for and place an address on the map.
  • Google Sign-In — optional sign-in with your Google account.
  • Resend — delivery of transactional emails such as booking confirmations, reschedule notices and purchase receipts.
  • Vercel — hosting of our website and web app.
  • Google Play and Apple App Store — distribution of the app and in-app update checks.

These providers process data according to their own privacy policies. Some of them, and our own infrastructure, store data on servers outside Pakistan; by using the Platform you consent to that transfer. We do not sell your personal information. We may disclose information if required to do so by law or to protect our rights and the safety of our users.

5. App Permissions

The app asks for the following permissions, each only when needed:

  • Photos and media: so you can select images and videos from your device to upload a business logo, shop photos, product images, property photos and tours, or evidence for a report. The app only accesses the files you choose to upload.
  • Files and documents: so you can attach a catalog PDF to your shop. Only the file you pick is read.
  • Camera:so you can scan a seller's discount QR code and take photos for your listing. The camera is used only while you are actively scanning or taking a photo.
  • Location: so the app can show the businesses and properties nearest to you first. This is optional — if you decline, you can browse by country and city instead. The app does not track your location in the background.
  • Notifications: so we can send you booking updates, tour and event alerts, verification results, and account alerts. You can disable notifications at any time in your device settings.

Devices without a camera or GPS can still install and use the app; these permissions are optional and requested only when you use a feature that needs them.

6. Ashhkaro AI

The "Ashhkaro AI" assistant currently in the app is an early preview with scripted replies. What you type into it is not sent to any AI provider and is not stored on our servers. If we later connect it to a real assistant, we will update this Policy first and tell you what is sent and to whom.

7. Data Storage and Security

Your information, including any images, videos and documents you upload, is stored with our backend provider and protected by access controls, with verification documents and payout details restricted to authorised staff. We use commercially reasonable safeguards to protect your data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Data Retention

We keep your information for as long as your account is active or as needed to provide the Platform, comply with legal obligations, resolve disputes, and enforce our agreements. Verification documents are kept while the related listing or badge is active and for as long as we are required to keep proof of the check. Payment, payout and commission records are kept for the period required by tax and accounting law. When your account is deleted, we remove your associated personal information as described below.

9. Account Deletion

You can request deletion of your account at any time by contacting us at info@ashhkaro.com, or by following the steps on our account deletion page. Upon verification of your request, we will delete your account and associated personal information, unless we are required by law to retain certain records (for example, transaction, payout or tax records). If your account has paid purchases or an active business or property listing, we may need to close those out before deletion.

10. Children's Privacy

The Platform is not intended for children under the age of 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, please contact us so we can remove it.

11. Your Rights

You may request access to, correction of, or deletion of your personal information, and you may withdraw consent where processing is based on consent — including asking us to remove the Womenpreneurship declaration from your profile or to delete verification documents once a review is complete. To exercise these rights, contact us using the details below.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the "Last updated" date above.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at info@ashhkaro.com.