Legal
Privacy Policy
Last updated: 5 July 2026
This is a general template and should be reviewed by a qualified lawyer before production use.
Your trust is the product we sell. This policy explains, in plain English, what data Zariya collects from customers and workers, exactly what it is used for, and the rights you have over it.
1. Who we are
Zariya ("we", "us", "the platform") operates a marketplace in Pakistan that connects customers with independent, verified skilled workers — electricians, plumbers and AC technicians — through our website and mobile app. This policy explains what personal data we collect, why we collect it, how we protect it, and the choices you have.
This policy applies to both the website and the Zariya mobile app, and to both customer and worker accounts.
2. Data we collect
We collect only what is needed to run the service:
- Customers: your name and email address (when you sign in with Google), your phone number (if you register by phone in the app), the service address you enter when booking, and your approximate location when you choose to share it so a worker can reach you.
- Workers (app only): name, phone number, trade, city, availability and working hours, profile photo, and — for verification only — CNIC images and a live selfie. Verification documents are collected from workers only; customers are never asked for CNIC documents.
- Bookings: the service and tasks selected, price, address, schedule, status history, ratings and review comments, and any cancellation reason you provide.
- Communications: messages and call records made through the app in connection with a booking, and support conversations on WhatsApp or email.
- Technical data: device and app information needed to deliver push notifications and keep the service secure.
3. How we use your data
Your data is used to:
- Match customers with available verified workers and deliver the booked service (for example, sharing the booking address and customer first name with the worker you selected).
- Verify worker identity before they can accept jobs, and display trust signals such as the verified badge and average rating.
- Send booking updates and notifications (for example, when a worker accepts or is on the way).
- Provide customer and worker support, and investigate disputes raised on a booking.
- Produce anonymized, aggregated analytics — such as demand by city or average prices by trade — in which no individual customer or worker can be identified. Only anonymized aggregate data is ever used for research or partnership purposes.
- Keep the platform safe, prevent fraud and abuse, and comply with legal obligations in Pakistan.
4. Where your data is stored and how it is secured
Zariya’s data is stored with Supabase, our cloud database and authentication provider. Data is encrypted in transit, and access is controlled through row-level security rules so that, for example, a customer can only read their own bookings and profile.
Worker verification documents (CNIC images and selfies) are stored in access-controlled storage and are used solely for verification and fraud prevention. They are never displayed on the website or shown to customers.
No system is perfectly secure. If we become aware of a breach affecting your personal data, we will notify affected users and take corrective action as quickly as reasonably possible.
5. Third-party services
We rely on a small number of third-party services to operate:
- Google sign-in (customers): when you sign in with Google, we receive your name, email address and profile picture from Google. Google’s own privacy policy applies to your Google account.
- Firebase Cloud Messaging (notifications): used to deliver push notifications to the mobile app. A device push token is stored for this purpose.
- WhatsApp (support): if you contact support on WhatsApp, your conversation is handled under WhatsApp’s terms as well as ours.
- We do not sell your personal data to anyone, and we do not share it with advertisers.
6. Your rights and choices
You can access and update most of your profile information directly in the app or on the website while signed in.
You may request a copy of the personal data we hold about you, correction of inaccurate data, or deletion of your account and associated personal data by contacting support (see Contact below). We will act on verified requests within a reasonable time, except where we must retain certain records — for example, completed booking transactions needed for dispute resolution, fraud prevention or legal compliance.
7. Data retention
We keep personal data only as long as needed for the purposes above. Booking records are retained while your account is active and for a reasonable period afterwards for dispute resolution and legal compliance. Worker verification documents are retained while the worker account is active. When data is no longer needed, it is deleted or anonymized.
8. Children
Zariya is not directed at children. You must be at least 18 years old to create an account or make a booking. If we learn that an account belongs to someone under 18, we will close it and delete the associated personal data.
9. Changes to this policy
We may update this policy as the service evolves. The "Last updated" date at the top shows the current version. For significant changes we will notify users through the app or website. Continued use of Zariya after changes take effect means you accept the updated policy.
10. Contact
For any privacy question, data request, or complaint, contact us on WhatsApp at +92 370 6325098 or by email at support@zariya.app. We reply in Urdu and English.