Privacy Policy
Last updated: 17 October 2026
1. Who we are
HireACar (hireacar.pk and the HireACar apps) is run by HireACar, Lahore, Pakistan. It is a marketplace where renters book cars from local owners. This policy explains what personal data we collect, why, who processes it for us, how long we keep it and how you can have it deleted. Questions: info@hireacar.pk.
2. What we collect
| Data | When | Why |
|---|---|---|
| Name, email, profile photo | Sign-up, or from Google / Apple sign-in | Your account; shown to the other party of a booking |
| Phone number | Sign-up, checked with a text-message code | Account security and booking contact |
| CNIC number and CNIC photo | Sign-up | Identity checks for trust and safety |
| Driving licence photo | Before a self-drive booking | Checking you can drive the car |
| Car registration card photo (optional) | When you list a car | Checking the car is yours and matches the listing |
| Car details and photos (hosts) | When you list a car | Your listing |
| Bookings, payments and messages | When you use the service | Running bookings, support and disputes |
| Approximate location | Only if you allow it | Showing cars near you |
| Device and usage data | When you use the site or app | Keeping the service working and improving it |
3. How we use it
- Identity checks: an AI service reads the number on your CNIC photo so you don't have to type it, and checks that uploaded photos show the right document or car. A person at HireACar reviews identity documents. We don't use biometric or face matching.
- Bookings: sending requests to hosts, confirmations, reminders and receipts.
- Safety and fraud prevention: spotting fake accounts, misuse and unpaid bookings.
- Improving the service: counting visits and searches. Stored locations are rounded to about 1 km, and we don't keep passwords or one-time links in analytics.
4. Who processes it for us
We don't sell personal data. These providers process it on our behalf, each for one job:
| Provider | What for | Where |
|---|---|---|
| Microsoft Azure | Hosting our servers and database | United States |
| Google Firebase | Sign-in and text-message codes | Global |
| Google Gemini (AI) | Reading CNIC numbers; checking that photos show the right document or car | Global |
| Google Analytics and Google Maps | Visit statistics; maps and place search | Global |
| Microsoft 365 | Sending emails | Global |
| Expo, Apple and Google | Push notifications; app-store sign-in | Global |
Other users see what a booking needs: your name, photo and rating, and, once a booking is confirmed, the contact details on it. We share data with authorities only when the law requires it.
5. How we protect it
- All traffic uses HTTPS.
- CNIC, licence and car registration-card photos are stored privately: only you and authorised HireACar staff can open them, through links that expire after a few minutes.
- CNIC numbers are encrypted in our database, with the key kept separately.
- Staff access to identity documents and payments is recorded.
6. How long we keep it
- Account and identity data: while your account is open.
- After your account is deleted: identity documents and profile data are deleted; booking and payment records are kept only as long as tax and other laws require.
- Analytics data: kept in rounded, summarised form.
7. Your choices and rights
- See or correct your data: in your profile, or by emailing us.
- Delete your account: request it in the app (Profile → Delete Account) or at hireacar.pk/delete-account. A person at HireACar checks the request, then deletes the account and tells you by email.
- Location: you can turn location access off in your phone's settings at any time.
8. Children
HireACar is for people aged 18 and over. We don't knowingly collect data from children; if we learn we have, we delete it.
9. Changes
When this policy changes, we update the date above and, for important changes, tell you in the app or by email.