Privacy Policy

Your privacy matters to us. This policy explains how FindUs collects, uses, and protects your information across our platform.

Last updated: 3 March 2026

FindUs is a technology platform operating through two mobile applications: the FindUs User Application and the FindUs Partners Application. This Privacy Policy explains how FindUs collects, uses, stores, shares, and protects personal information when you use our platform and services.

1. Information We Collect

1.1 Personal Information

We may collect personal information such as your full name, phone number, email address, profile details, service preferences, and other account-related information provided by users and service providers.

1.2 Google Sign-In Information

FindUs allows users and service providers to sign in using Google authentication. When you choose to sign in with Google, we may receive your name, email address, and profile picture from your Google account.

This information is used only for account creation, authentication, and profile display. FindUs does not receive or store your Google account password and does not access any Google account data beyond what you explicitly authorise.

1.3 Government-Issued Identification and Verification (Partners)

For service providers using the FindUs Partners Application, we collect government-issued identification details including CNIC number, CNIC images, and information extracted from the CNIC such as full name, address, and date of birth, strictly for identity verification, fraud prevention, compliance, and platform safety.

CNIC information and extracted personal details are accessible only by authorised systems and are never publicly displayed or shared with users.

Service providers may also be required to record a short verification video used solely for identity confirmation and platform safety. Verification videos are not shared with users or made public.

1.3.1 Facial Recognition and Biometric Verification (Partners)

For identity verification, the FindUs Partners Application uses facial recognition technology to verify that the person in the verification video matches their submitted identification document, prevent fraud, and confirm partner identity during registration.

Facial recognition data is processed on-device using Google ML Kit and is not stored permanently. Only verification results (pass/fail) are retained for compliance. Raw biometric data is deleted immediately after processing.

1.4 Location Information

Location data is collected to show nearby service providers, assign service requests, enable navigation, and improve service accuracy. The app collects precise location (GPS-level accuracy) via the device's fine location sensor.

BACKGROUND LOCATION — FindUs Partners Application:

The FindUs Partners Application collects location data in the background — including when the app is minimised, the screen is locked, or the app has been removed from the recent apps list — whenever a partner has marked themselves as "available" for service requests. This allows us to:

  • Assign nearby service requests to available partners in real-time
  • Enable accurate real-time navigation during active service delivery
  • Update partner availability status and location on the platform
  • Provide users with accurate estimated arrival times

Background location is implemented using a native Android foreground service. A persistent notification is displayed in the device status bar at all times while background location is active. This notification cannot be dismissed while the service is running and serves as a continuous visible indicator that location data is being collected.

Background location is collected only when a partner has explicitly tapped "Go Online". Partners can stop background location at any time by tapping "Go Offline", which immediately stops the service and dismisses the notification.

For the FindUs User Application, location is collected only when the app is in use to find nearby service providers and enable service requests.

1.4.1 Android Foreground Service Disclosure

The FindUs Partners Application uses an Android Foreground Service of type FOREGROUND_SERVICE_TYPE_LOCATION to deliver continuous background location tracking in compliance with Android's background execution policies and Google Play's foreground service requirements.

The foreground service:

  • Runs in a separate Android process so that location updates continue even if the main app is terminated by the user or operating system — the same architecture used by Uber, InDrive, and other ride-hailing applications
  • Displays a mandatory persistent notification showing "FindUs Partner Online" and the time of the last location update while active
  • Is started only when the partner explicitly taps "Go Online" and stops immediately when they tap "Go Offline"
  • Sends precise location updates approximately every 15 seconds or after the partner moves 30 metres, whichever occurs first
  • Uses a WAKE_LOCK to prevent the processor from sleeping while location updates are being transmitted, ensuring reliable delivery when the screen is off
  • Automatically stops and sets the partner to offline if network connectivity is lost for an extended period or the authentication session expires

Partners can verify whether the foreground service is active at any time by checking for the persistent "FindUs Partner Online" notification in their device status bar.

1.4.2 Battery Optimisation Exemption

To ensure reliable background location delivery, the FindUs Partners Application requests that Android exempt it from battery optimisation (the "Allow app to always run in background" permission). This request is presented as a native system dialog the first time a partner goes online.

Granting this exemption is optional. Without it, Android may suspend the foreground service on certain devices, causing gaps in location updates. Partners may revoke this exemption at any time through Device Settings → Apps → FindUs Partners → Battery.

On devices manufactured by Xiaomi, Oppo, Vivo, or Realme, the app additionally guides partners to grant autostart permission through the manufacturer-specific settings screen, as these devices apply additional process restrictions beyond standard Android battery management.

1.4.3 Receive Boot Completed Permission

The FindUs Partners Application declares the RECEIVE_BOOT_COMPLETED permission to register a Boot Receiver component which:

  • Allows the app to appear in manufacturer-specific autostart settings screens (Xiaomi MIUI, Oppo ColorOS, Vivo OriginOS, Realme UI) so partners can grant autostart permission manually
  • Enables the app to detect when the device has rebooted so the partner's previous online state can be restored when they next open the app

The Boot Receiver does not automatically start the location service on device boot without user interaction. The partner must open the app before any location collection resumes.

1.5 Media and Camera Data

Users and partners may upload photos and videos including profile images, verification media, and service-related recordings. The app requests access to the device camera, media images, and media videos to enable these features.

The app may save images and media files directly to the device's photo gallery using the WRITE_EXTERNAL_STORAGE permission (on Android 9 and below) or scoped media storage (Android 10 and above). This is used when partners or users save service-related images or receipts to their device.

In the FindUs User Application, users may record videos to explain or demonstrate a service-related problem. These videos may be shared with nearby service providers for the purpose of receiving accurate service offers and are not publicly accessible.

All uploaded media is used solely for service fulfilment, verification, communication, dispute handling, and platform safety.

1.6 Device and Usage Information

We automatically collect technical information such as device type, device manufacturer, operating system version, app version, app usage behaviour, connectivity status, and performance logs to maintain stability, security, and service quality. Device manufacturer information is used locally to provide appropriate battery optimisation guidance on Xiaomi, Oppo, Vivo, and Realme devices.

1.7 In-App Communication and Language Preferences

FindUs provides in-app chat and calling functionality that allows users and service providers to communicate regarding service requests. Messages and related metadata may be stored to enable communication, provide customer support, resolve disputes, and maintain platform safety.

Users and service providers involved in a service request may view and contact each other using their provided phone numbers. Phone numbers are shared only between parties directly involved in a service.

Language preferences such as English or Urdu selection may be stored to personalise the app experience and are not shared with third parties.

1.8 Payments, Wallet, and Commission Information (Partners)

FindUs provides a wallet-based system for service providers. Partners may be required to top up their account balance to receive new service requests.

Top-ups may be completed through supported third-party payment services including JazzCash and other certified mobile wallet providers and payment gateways available in Pakistan. FindUs does not store users' full payment credentials, JazzCash account numbers, PINs, or any sensitive financial information. Payment processing is handled securely by the respective payment service providers in accordance with their own privacy policies and applicable financial regulations.

FindUs deducts a service commission from a partner's wallet balance for completed jobs. Wallet balances, top-up history, and commission deductions may be recorded and stored for transaction tracking, support, dispute resolution, and legal compliance.

1.9 Bluetooth Connectivity

The FindUs Partners Application may request Bluetooth access for connectivity features and enhanced location accuracy. Bluetooth is used to improve location services and is not used to collect data from other devices.

1.10 Audio and Call Features

Both applications may modify audio settings and access the microphone to enable in-app voice calls, optimise call quality during service coordination, manage notification sounds, and support real-time communication during service delivery.

We use Agora RTC Engine for real-time voice and video communication. Call data is transmitted securely and is not recorded or stored by FindUs unless required for dispute resolution.

1.11 Third-Party Services and SDKs

FindUs integrates the following third-party services and libraries, each operating under its own privacy policy. As the developer, FindUs is responsible for ensuring all third-party code complies with Google Play Developer Programme policies.

  • Google Maps Platform: For mapping, geocoding, address lookup, and location-based services. Coordinate and address data is transmitted to Google servers for processing.
  • Google Geocoding API: For converting GPS coordinates to human-readable addresses and vice versa when displaying service locations. Coordinate data is transmitted to Google servers.
  • Google Sign-In: For authentication services.
  • Google ML Kit — Text Recognition: For on-device extraction of text from CNIC and identification documents (Partners only). Processing occurs entirely on-device; no data is sent to Google servers.
  • Google ML Kit — Face Detection: For on-device facial verification during partner registration (Partners only). Processing occurs entirely on-device; no data is sent to Google servers.
  • Google ML Kit — Entity Extraction: For on-device extraction and interpretation of structured information from text content within the app. Processing occurs entirely on-device.
  • Google Play Services — Fused Location Provider: Used by the Partners foreground service for battery-efficient, high-accuracy native location updates while online.
  • Firebase Cloud Messaging: For push notifications and real-time service request alerts. Device tokens are transmitted to Google Firebase servers.
  • Firebase Cloud Functions: For server-side processing of certain platform operations including notifications and data validation. Data processed by Cloud Functions is handled by Google Firebase infrastructure.
  • Agora RTC Engine: For real-time voice and video calls between users and partners during service requests. Audio and video streams are transmitted through Agora's servers.
  • Supabase: For backend database storage, real-time data synchronisation, and authentication services. User data is stored on Supabase-managed servers.
  • Location Plugin (flutter location): A secondary location library used for on-demand location lookups within the app. Uses the device's fine location sensor. Location data is processed locally and transmitted to FindUs servers only as part of service request matching and navigation features.
  • JazzCash: A mobile wallet and payment service operated by Jazz (Mobilink Microfinance Bank Limited) and used by partners to top up their FindUs wallet balance. When a partner initiates a top-up via JazzCash, payment details are handled directly by JazzCash and are subject to JazzCash's Privacy Policy. FindUs does not store JazzCash account numbers, PINs, or any sensitive payment credentials.
  • Other Payment Processors: Additional certified third-party payment providers may be available for wallet top-ups, including other mobile wallet services and payment gateways operating in Pakistan. The specific providers available will be displayed within the app at the time of top-up.
  • WebView (webview_flutter): Used to display certain in-app web content such as terms, help pages, or payment provider interfaces. When a WebView is open, the content is loaded from the respective third-party website and is subject to that website's own privacy policy.

We recommend reviewing the privacy policies of these third-party services to understand how they handle your data.

2. How We Use Information

We use collected information to operate the FindUs platform, verify service providers, connect users with partners, manage bookings, improve app performance, provide customer support, prevent fraud, and comply with legal obligations. Specifically:

  • Account creation, authentication, and profile management
  • Identity verification and fraud prevention (Partners)
  • Matching users with nearby available service providers
  • Enabling real-time communication and navigation
  • Processing service requests and managing bookings
  • Facilitating payments and wallet transactions
  • Sending notifications about service updates and platform changes
  • Providing customer support and resolving disputes
  • Improving app features and user experience
  • Ensuring platform safety and security
  • Complying with legal and regulatory obligations

3. Data Sharing and Disclosure

FindUs does not sell personal data. Sensitive information including CNIC details, verification videos, and biometric verification results is not shared with users or third parties except where required by law or regulatory authorities.

We may share limited information in the following circumstances:

  • Between Users and Partners: Name, phone number, location, and service request details are shared to facilitate service delivery
  • With Third-Party Services: As described in Section 1.11, certain data is shared with service providers who assist in platform operations
  • For Legal Compliance: We may disclose information when required by law, court order, or government request
  • For Safety and Security: Information may be shared to prevent fraud, protect user safety, or enforce our terms of service

4. Data Security

We apply reasonable technical and organisational safeguards including encryption, restricted access controls, and secure storage practices to protect personal information from unauthorised access, alteration, disclosure, or destruction.

  • Data encryption in transit and at rest
  • Access controls and authentication requirements
  • Regular security audits and monitoring
  • Secure payment processing through certified third-party providers
  • On-device processing for sensitive biometric data via Google ML Kit
  • Encrypted local storage for sensitive credentials on-device

While we implement strong security measures, no system can guarantee absolute security. We encourage users to maintain the security of their account credentials.

5. Data Retention

Personal information is retained only for as long as necessary to fulfil operational, legal, and verification requirements.

  • Account Information: Retained while account is active, plus 90 days after deletion request
  • CNIC and Verification Videos: Retained for 2 years for compliance and fraud prevention, then securely deleted
  • Biometric Verification Data: Processed on-device and deleted immediately; only verification results retained
  • Location Data: Retained for 90 days for service quality and support
  • Transaction Records: Retained for 7 years for financial compliance and tax purposes
  • Chat Messages: Retained for 1 year or until account deletion, whichever comes first
  • Service Request History: Retained while account is active

After the retention period expires, data is securely deleted or anonymised such that it cannot be linked back to individual users.

6. User and Partner Rights

Users and partners can manage their personal data directly within the FindUs applications and have the following rights:

In-App Data Management:

  • Access: View your personal data in Account Settings
  • Correction: Update or edit your information in your Profile section
  • Account Deletion: Delete your account using the "Delete Account" option in Profile Settings

When You Delete Your Account:

  • Your account will be immediately deactivated
  • Your profile will become invisible to other users and service providers
  • You will not be able to create service requests or accept work
  • Active sessions will be terminated and you will be logged out
  • Any active background location foreground service will be stopped immediately

Account deletion is immediate and cannot be reversed by you.

Data Retention After Account Deletion:

For fraud prevention, legal compliance, and platform security, certain information is retained after account deletion:

Information Retained:

  • Transaction records and payment history (required by law for 7 years)
  • Service request history and completed work records
  • Communications related to disputes or investigations
  • Records required for tax, audit, and regulatory compliance

Retention Timeline:

  • 0–90 days: Full data retained for account recovery and investigation
  • After 90 days: Personally identifiable information is anonymised
  • 7 years: Transaction and financial records retained for legal compliance

Complete Data Deletion Request:

To request complete deletion of all your data (subject to legal requirements), contact us at contact@findus.com.pk with the subject line "Request for Complete Data Deletion". We will respond within 30 days.

Additional Rights:

  • Data Portability: Request a copy of your data by contacting contact@findus.com.pk
  • Objection: Object to certain data processing activities by contacting support
  • Account Recovery: Within 90 days of deletion you may contact support to request restoration
  • Location Control: Stop background location at any time by tapping "Go Offline" in the app, or revoke location permission via Device Settings → Apps → FindUs Partners → Permissions

7. Children's Privacy

FindUs services are not intended for individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information promptly.

Parents or guardians who believe their child has provided personal information to FindUs should contact us immediately at contact@findus.com.pk.

8. Prominent In-App Disclosures

Before requesting access to sensitive permissions such as location, camera, microphone, or identification documents, FindUs displays clear in-app explanations informing you of what data will be collected, why the permission is needed, how the data will be used, and whether it will be shared.

You must grant explicit permission before any sensitive data is accessed. Permissions can be modified or revoked at any time through your device settings.

For background location specifically, the persistent "FindUs Partner Online" notification in the device status bar serves as a continuous real-time indicator that the foreground service is active and location data is being collected. This notification is always visible and cannot be hidden or dismissed while background location is active.

9. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, services, or legal requirements. When we make significant changes, we will notify you through in-app notifications, email to your registered address, and a prominent notice on our website.

Your continued use of FindUs services after such modifications constitutes your acknowledgment and acceptance of the updated Privacy Policy.

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Company: FIND US (PRIVATE) LIMITED

Email: contact@findus.com.pk

Country: Pakistan

Address: Gulshan-e-Iqbal, Karachi East, Sindh, Pakistan

We are committed to protecting your privacy and will respond to all inquiries within a reasonable timeframe.