Privacy policy

1. Summary in plain words

We collect only what we need to run EVDost: your name and mobile number, Charger details for Hosts, ID for host verification, and records of Sessions.
We show other users only what's needed for a Session. A Host's exact address is shown only after they confirm a request.
We never sell your information.
Your information is stored with trusted providers whose servers are outside Pakistan.
You can delete your account at any time.

This summary is for convenience. The full policy below is what applies.

2. Who we are

This Privacy Policy explains how [Company legal name] ("EVDost", "we", "us") collects, uses, shares and protects personal information when you use the EVDost website, web app and any EVDost app (the "Platform").

It forms part of our Terms of Service. Words defined in the Terms have the same meaning here. By using the Platform, you agree to the collection and use of your information as described here.

3. Information we collect

Information you give us

Account: your name and mobile number.
Hosts: Charger location and address, access notes, plug type, power, hourly price, available hours, photos of the Charger, your CNIC or other ID for verification, and your Raast ID or payment details so Drivers can pay you.
Drivers: the vehicle you choose for a Session if you choose one, to estimate cost and show suitable Chargers. You don't need to register a vehicle.
Messages and reviews: reviews, reports, and anything you send us through the Contact page or support.

Information collected when you use the Platform

Location: your device's location, only if you allow it in your browser or app, to show nearby Chargers and directions. You can search by area instead.
Session records: requests, confirmations, cancellations, Start and Stop times, duration, price and the users involved.
Notifications: if you allow notifications in the app, a push token for your device so we can tell you about requests and Sessions. You can turn notifications off in your device settings.
Device and usage information: IP address, browser and device type, pages viewed, actions taken, error logs and the date and time of your visits, used for security, fraud prevention and fixing problems.
Agreement records: which version of our Terms and Privacy Policy you accepted, and when.

Information from others

Reviews and reports other users make about you.
Delivery status from our SMS provider for one-time codes.

4. How we use your information

To create and run your account, sign you in, and verify Hosts.
To show Listings, match Drivers with Chargers, pass requests between users and record Sessions.
To keep the Platform and its users safe: prevent fraud, misuse and abuse, investigate reports, and enforce our Terms.
To communicate with you about your account, Sessions, changes to our services or policies, and support requests.
To fix problems, analyse how the Platform is used and improve it.
To comply with the law, respond to lawful requests, and establish, exercise or defend legal claims.

We use your information on the basis of your consent, to perform our agreement with you, to comply with legal obligations, and for our legitimate interests in running a safe and reliable Platform.

We never sell or rent your personal information. We share it only as follows:

Other users, only as needed for a Session. Drivers see a Host's first name, Charger details, photos, price, rating and general area. The exact address and access notes are shown only after the Host confirms a request. Hosts see a Driver's first name, rating and chosen vehicle. Once a Host accepts a request, the Driver and the Host can each see the other's mobile number so they can call or message about that Session. Payment details a Host provides are shown to the Driver after charging finishes so they can pay.
Service providers who host and run the Platform for us, under obligations to protect your information, including our database provider (Supabase), our server provider (DigitalOcean), our SMS provider for sign-in codes, our maps provider, and Expo, which delivers app notifications.
Authorities, when we believe in good faith that disclosure is required by law, court order or a lawful request from a government authority, including under the Prevention of Electronic Crimes Act, 2016, or is necessary to protect the rights, property or safety of EVDost, our users or the public.
Legal and professional advisers, where needed to establish, exercise or defend legal claims.
A buyer or successor, if EVDost is sold, merged or reorganised, subject to this Policy.

6. Where your information is stored

Our providers store and process information on servers outside Pakistan, currently in India (Mumbai and Bangalore). By using the Platform, you consent to your information being transferred to and stored in those locations. We choose providers with strong security, and we will review where data is stored if Pakistani law requires it to be kept in Pakistan.

7. How we protect it

Access rules in our database so users can only see what they are allowed to see.
Encrypted connections (HTTPS) between your device and our servers.
Two-factor sign-in and limited access for anyone who manages the Platform.
ID images stored privately and deleted after verification.

No system is completely secure. We cannot guarantee that information will never be accessed, lost or misused, and to the extent permitted by law we are not liable for unauthorised access that happens despite reasonable security measures. If a breach puts your information at serious risk, we will inform you and the relevant authorities where the law requires.

8. How long we keep it

Account information: while your account is open, and up to 2 years after it closes.
Session records, reports and agreement records: up to 5 years after the Session or acceptance, so we can handle disputes and legal claims.
ID images: deleted once verification is complete. We keep only a record that verification was done and its result.
Contact messages: up to 2 years.

We may keep information longer where the law requires it, or where it is needed for an ongoing dispute, investigation or legal claim.

9. Your choices and rights

You can view and update your details in your account settings.
You can turn off location access in your browser or device settings.
You can delete your account in your account settings. We will delete or anonymise your information, except what we must keep for the reasons in Section 8.
You can ask us for a copy of your information, or to correct or delete it, through the Contact page. We may need to confirm your identity first, and we will respond within 30 days.

10. Cookies and similar technology

We use only the cookies and browser storage needed to keep you signed in, remember your settings and keep the Platform secure. We do not use advertising or cross-site tracking cookies.

11. Children

The Platform is only for people aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.

12. Changes to this policy

We may update this Policy. If we make important changes, we will tell you in the Platform and, where required, ask you to accept the new version. The version number and date at the top show the current version.

13. Contact

[Company legal name], [Registered address]. Email: [Legal email]. You can also reach us through the Contact page.