Privacy Policy | DailyPicks.Pk

Short version: We collect your name, phone, address, and order history only to deliver your orders and settle payments. We never sell your data. You can delete your account anytime by contacting us.

1. Who we are

DailyPicks.Pk ("we", "us") is a hyperlocal grocery and medicine delivery platform operating in Pakistan. This policy describes how we handle personal data collected through our website and mobile applications.

2. What we collect

Account details — name, phone number, email (optional), password (hashed), profile photo.
Delivery data — addresses, GPS coordinates you save, landmarks.
Order data — items ordered, payment method, timestamps, order notes.
Device data — device model, browser, IP address, push-notification subscription tokens.
For shop owners / drivers / distributors — CNIC, NTN/STRN (tax compliance), vehicle and license data, bank / mobile wallet numbers.

3. How we use it

Routing orders from customers to shops and drivers.
Sending order notifications via SMS, WhatsApp, and push.
Processing payments via JazzCash, EasyPaisa, bank transfer, or wallet.
Detecting fraud, abuse, and disputes.
FBR (Federal Board of Revenue) tax reporting where required.
Improving product search, recommendations, and app performance.

4. Who we share with

Partner shops — only the name, phone, address, and order items needed to fulfill your order.
Drivers — pickup + delivery address, phone to call you on arrival.
Payment providers — JazzCash, EasyPaisa, bank for transaction processing.
Cloud hosts — Vercel (app), TiDB Cloud (database), Cloudinary (images).
Law enforcement only on valid legal request.

We do not sell or rent your personal data to marketers.

5. Retention

We keep your data while your account is active. After deletion we keep minimal records (invoices, settlement entries, audit logs) only as long as tax and consumer-protection law require, typically up to 6 years.

6. Your rights

Access — request a copy of your data.
Correct — fix wrong details from your profile.
Delete — request full account deletion (we keep the minimum required by law).
Withdraw consent — turn off push / WhatsApp / SMS notifications anytime from settings.
Export — download your order history.

7. Security

All traffic is served over HTTPS. Passwords are stored as bcrypt hashes. Database sits behind access controls and encrypted at rest. We do not store full card numbers — payments go directly to JazzCash / EasyPaisa.

8. Children

DailyPicks.Pk is not intended for children under 13. We don't knowingly collect data from them.

9. Changes

If this policy changes materially we'll post a banner in the app and update the "Last updated" date above.

10. Contact

DailyPicks.Pk · support@dailypicks.pk