Privacy policy

This policy explains what EasyTrip PK collects when you use our mobile app or this website, why we collect it, who can see it, and how to get rid of it. It is written to be read, not to be survived.

Who we are

EasyTrip PK is a carpooling platform operating across Pakistan. We are the data controller for the information described here. Contact us ateasytrip605@gmail.com.

What we collect

Information you give us

• Your mobile number, used to sign you in with a one-time code. It is the primary identifier for your account.
• Your profile — name, gender, home city, an optional emergency contact, and a profile photograph (optional for riders, required for drivers).
• Driver verification documents, if you apply to drive: photographs of the front and back of your CNIC and your CNIC number, photographs of the front and back of your driving licence, a profile photograph, and photographs of your vehicle (front and number plate required; rear and interior optional) along with its model, colour, registration number and, optionally, make and year. We do not record your licence number. Riders are not asked for a CNIC; accounts created with earlier versions of the app may have provided one at signup. SeeFace photos and identity verification below.
• Trip information — the routes you publish or search, pickup and drop-off points, departure times, seats, prices, luggage and any notes you write.
• Messages and ratings you send through the app, and the reviews you leave after a trip.
• Wallet records, if you drive: commission charges, top-up requests and the screenshot of the money transfer you submit with each top-up.

Information collected automatically

• Location. With your permission, the app uses your device location to suggest nearby pickup points and to show nearby whole-car requests to drivers. During a trip that is in progress, the driver's device streams its position to the riders on that trip. This live position is streamed only — it is held in memory to show the moving car and is discarded when the trip ends. It is never written to our database.
• A push notification token for your device, so we can tell you when a booking is accepted, a trip starts, or a message arrives. It is deleted when you log out or delete your account.
• Basic technical data needed to operate the service — the app version and the timestamps of your requests.

Face photos and identity verification

Two kinds of image we handle show your face.

• Your profile photograph. Riders may add one when setting up their profile, or later from the Profile screen. Drivers must provide one when they apply to drive.
• The facial portrait printed on your CNIC and driving licence. These documents carry your photograph, so the CNIC and licence images you submit when applying to drive contain an image of your face along with the other details printed on the card.

Why we collect them

• Profile photograph, so that the people you travel with can recognise you at the pickup point, and so that riders can see who will be driving before they book.
• CNIC and licence images, so that a member of our team can confirm that a driver is who they say they are and holds a driving licence. The reviewer compares the profile photograph with the portraits on the CNIC and licence by eye. These images are also used to investigate a safety or fraud report about a driver, and to stop one identity being used to open several accounts.

We do not use facial recognition. We do not run face detection or face-matching software on any image, and we do not create, store or share a facial template, faceprint or any other biometric identifier. Face photos are not used for advertising, profiling or training any model, and are never sold.

When you photograph your CNIC or licence in the app, your phone reads theprinted text on the card. This checks that the photo is the right document and fills in your CNIC number for you to confirm. This text recognition runs entirely on your device. It does not analyse your face, and the image is not sent anywhere for it.

When they are uploaded

• Each photo is uploaded to our server as soon as you take or choose it on a profile or verification screen, before you press Submit.
• If you leave the screen without submitting, the photos you uploaded are not attached to your account, and we delete them automatically within about a day.
• Before an image is stored, we remove its embedded metadata, including any GPS location, camera details and timestamps.
• Nothing is uploaded unless you take or choose a photo yourself. The app does not access your camera or photo library in the background.

Who can see them

• Your profile photograph is shown to other EasyTrip PK users you interact with: riders who view or book your ride, drivers whose rides you request or who bid on your whole-car request, the person you are chatting with about a trip, and people reading reviews you have written.
• Your CNIC and licence images are never shown to other users. They are stored privately and can be opened only by you and by the EasyTrip PK administrators who review driver applications.

How long we keep them

• Profile photograph: until you replace it, which deletes the old one, or delete your account.
• CNIC and licence images: until you delete your account, whether or not your application was approved. We keep them so a driver can be re-checked if a concern is raised. You can ask us to delete them earlier ateasytrip605@gmail.com. Your account will then no longer be able to drive.
• When you delete your account, every image you uploaded is erased from our server straight away. Copies may remain in our rolling server backups for up to 7 days, until those backups are replaced (see below).

Where your photos are stored and who can access them

All photos you upload are stored with our hosting provider, together with the rest of your account data. This covers profile photographs, CNIC and licence images, vehicle photographs and top-up screenshots. We do not use any other photo storage service, image host or content delivery network.

• Storage provider: Hetzner Online GmbH, a German hosting company. Images are stored in Hetzner's data centre in Germany (European Union).
• Backup provider: also Hetzner Online GmbH. Backups, including the stored photos, are kept in Germany (European Union) on a rolling basis, so the oldest is deleted after about 7 days. We do not keep backups with any other provider.
• In transit: photos travel between the app and the server over an encrypted (HTTPS) connection.
• On your phone: while you crop or check a photo, the app works on a temporary copy in its own storage. It does not save copies to your photo gallery.

The people and organisations who can access the stored images are:

• EasyTrip PK administrators are authorised members of our team. They can view CNIC and licence images to review driver applications and handle safety reports, and top-up screenshots to approve wallet top-ups.
• Our technical staff can access stored files only to maintain the service, restore it from a backup, or delete data on request.
• Hetzner stores the data and its backups on our behalf. Hetzner does not use the data for its own purposes and is not given access to view it.
• Other EasyTrip PK users can see profile photographs and vehicle photographs, as described in Who can see them above. They can never see CNIC images, licence images or top-up screenshots.
• Law enforcement may receive images only where we are legally required to provide them.

Images are not shared with Google, Firebase, Agora, our SMS provider or any other third party.

Why we use it

• To sign you in and keep your account secure.
• To match riders with rides and show each side who they will be travelling with.
• To let you contact the other party without either of you revealing a phone number.
• To show a live trip in progress to the people on it.
• To verify drivers, which is what keeps the platform usable at all.
• To calculate driver commission and process wallet top-ups.
• To notify you about things that happen on your trips.
• To investigate reports of unsafe or fraudulent behaviour.

What other users can see

Carpooling only works if both sides can judge each other. When you interact with someone on the platform, they can see:

• Your first name and profile photograph, if you added one.
• Your rating, number of completed trips, and the reviews left for you.
• For drivers: your vehicle's make, model, colour, number plate and its photographs.
• For riders with a confirmed booking: the pickup point you chose and, once the trip starts, the driver's live position.

Your phone number is never shown to another user. Calls and messages run inside the app.

Who else we share it with

We do not sell your data. We share it only with:

• Google Maps Platform — place searches, geocoding and driving directions. Search terms and coordinates are sent to Google to return results.
• Firebase Cloud Messaging (Google) — delivery of push notifications to your device.
• Agora — the connection used for in-app voice calls.
• Our SMS provider — your mobile number, to deliver your sign-in code.
• Hetzner Online GmbH, our hosting provider, which stores our data, including every uploaded photo, and its backups in Germany (European Union). SeeWhere your photos are stored.
• Law enforcement, where we are legally required to, or where it is necessary to investigate a serious safety incident.

How long we keep it

• Account and profile data — until you delete your account.
• Trip, booking and message records — retained after a trip so both sides keep an accurate history and so disputes can be investigated.
• Verification documents: kept until you delete your account, so a driver can be re-checked if a concern is raised. SeeFace photos and identity verification.
• Live location during a trip — not retained at all; it is discarded when the trip ends.

Deleting your account

You can delete your account at any time from Settings → Delete accountin the app. When you do:

• Your account is deactivated. Your gender, city, emergency contact and CNIC number are erased.
• Every image you uploaded is deleted from our server: your profile photograph, CNIC and licence images, vehicle photographs and top-up screenshots. Copies in our rolling server backups are removed within about 7 days.
• We keep your name and mobile number on the closed account. This lets us answer support questions, handle disputes and investigate safety reports about past trips. They are not shown to other users.
• Upcoming rides and bookings are cancelled, and any seats you had taken are returned to the ride.
• Your saved routes and push notification tokens are deleted.
• Your mobile number is released immediately, so you can sign up again with it.
• Past trip, booking and rating records are kept. This is deliberate: the other people on those trips keep an accurate history, and their ratings stay valid.

If you cannot access the app, email easytrip605@gmail.comfrom a number-verified request and we will do it for you.

Your choices

• Location can be denied or revoked in your phone's settings. Pickup search and live tracking will stop working, but the rest of the app still functions.
• Microphone access is only requested when you place or answer an in-app call.
• Notifications can be turned off in your phone's system settings.
• Your profile — name, photograph, city, emergency contact and vehicle details — can be corrected at any time in the app.

Children

EasyTrip PK is not intended for anyone under 18. We do not knowingly create accounts for minors, and we will delete any we find.

Security

Traffic between the app and our servers is encrypted in transit. Access to verification documents is restricted to the staff who review them. No system is perfect — if you believe your account has been compromised, contact us immediately.

Changes to this policy

If we change how we handle your data in a material way, we will update the date at the top of this page and notify you in the app before the change takes effect.

Contact

Questions, corrections or complaints:easytrip605@gmail.com.