Privacy Policy

This Privacy Policy describes how Hamara Umrah ("we", "us", or "our") collects, uses, and shares your personal information when you use our mobile application (the "App"). We are committed to protecting your privacy and ensuring that your personal data is handled securely and in compliance with the Google Play Developer Distribution Agreement and applicable data protection laws.

1. Information We Collect

To provide a seamless Umrah booking experience, we collect information that you provide directly to us and information collected automatically.

1.1 Personal Information You Provide

• Account Data: Name, email address, phone number, and profile picture.
• Identity Documents: To comply with travel regulations and facilitate bookings, we collect copies of passports, visas, CNIC/national ID, and other identification documents, along with traveller details such as full name, date of birth and passport expiry date.
• Communications: Messages, images and files you send through the in-app chat between clients and Providers, and any information you submit in disputes, reviews, reports or support requests.
• Financial Data: Payments for bookings are made by manual bank transfer. We collect the bank transfer receipt or screenshot you upload, the transaction reference/ID you enter, the payment amount, the destination bank account you selected, and the approval status of the payment. We do not collect or process credit/debit card numbers, and card payments are not offered in the App. For Providers (agencies), we also collect payout bank account details required to send earnings.

1.2 Information Collected Automatically

• Device Information: We collect information about your mobile device, including model, operating system version, and unique device identifiers.
• Usage & Diagnostics Data: We use Firebase Crashlytics to collect crash reports, error logs and performance data (including device state at the time of a crash) to help us troubleshoot issues and improve the App.
• Push Notification Tokens: We collect Firebase Cloud Messaging (FCM) tokens to send you essential updates about your bookings and account.

2. Use of Your Information

We use the information we collect to:

• Process and manage your Umrah package bookings.
• Verify your identity and account security.
• Facilitate communication between you and Umrah Service Providers.
• Send transaction receipts and real-time notifications.
• Comply with legal and regulatory requirements for international travel.
• Improve our App's features and user experience.

3. Data Sharing and Disclosure

We do not sell your personal data. We share your information only in the following circumstances:

• With Service Providers: We share necessary details (e.g., identity documents) with the licensed Travel Agencies (Providers) you choose to book with.
• With Third-Party Vendors: We use Google Firebase (by Google LLC) for our infrastructure — authentication, database (Cloud Firestore), file storage, push notifications (Firebase Cloud Messaging) and crash reporting (Firebase Crashlytics). Firebase processes this data on our behalf under Google's privacy terms. We do not use a third-party card payment processor; bank transfer payments are verified manually by our team.
• For Legal Reasons: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

4. Device Permissions

The App uses the following device permissions, only when you choose an action that needs them:

• Camera: Used only if you choose to take a photo of a receipt or document instead of selecting an existing file. You can decline and still use the App.
• Photos / Files: Used to let you select images and PDF documents (ID documents, travel documents, payment receipts) to upload.
• Notifications: Used to send you updates about your booking status and chat messages from Providers.

We do not access your location, contacts, SMS, call logs, or microphone.

5. Data Security

We implement robust technical and organizational measures to protect your personal data against unauthorized access, loss, or alteration. This includes the use of industry-standard encryption for data in transit.

6. Data Retention and Deletion

6.1 Retention

We retain your personal information for as long as your account is active or as needed to provide you with services, comply with legal obligations, and resolve disputes.

6.2 Data Deletion Rights

You have the right to request the deletion of your account and all associated personal data at any time.

• In-App Deletion: Open the App, go to Profile → Settings → Delete Account, and confirm. Deletion runs immediately on our servers and usually completes within minutes.
• Web Request (no app required): You can request account and data deletion at https://hamaraumrah.com/delete-account.html without installing or opening the App.
• Email Request: You may also email us at support@hamaraumrah.com with the subject "Data Deletion Request".

How Deletion Works

Account deletion is performed server-side by a trusted Cloud Function. Your request triggers an automated cleanup process that:

1. Deletes your user profile, notifications, saved traveller profiles, reviews you wrote, dispute records, chat rooms and messages, block records, review requests, admin/moderation notifications about you, and (if you are a Provider) your packages, verification records, payout settings and service requests.
2. Anonymizes your support tickets (your identity and message text are removed).
3. Deletes your uploaded files: profile images, passport/CNIC images, travel documents, payment receipt images, chat attachments, dispute evidence, and verification documents.
4. Anonymizes retained financial records (bookings, payments, invoices, withdrawal requests, featured package payments) — all personal information fields are removed while monetary amounts, transaction statuses, and dates are kept for tax, accounting, and audit purposes.
5. Deletes your Firebase Authentication account.

Completion Time: The deletion process completes automatically and typically finishes within minutes. A status record is created so the system can confirm completion.

Data That Is Deleted

• Your user profile and account credentials
• All uploaded documents (passport, CNIC, travel documents)
• All uploaded payment receipt images and payment proof screenshots
• Chat messages and attachments
• Reviews you wrote
• Dispute records and evidence files
• Notifications
• Saved traveller profiles
• Block relationships
• Provider packages, verification documents and payout settings
• Service request records

Data That Is Retained

• Financial transaction records — bookings, payments, invoices, withdrawal and featured-package payments (amounts, statuses, dates, transaction IDs). Personal information fields are stripped/anonymized; the monetary record is kept for tax, accounting and audit compliance.
• Abuse and safety reports you submitted or that were submitted about you — retained (without your account) so we can investigate platform safety issues, as permitted by Google Play policy.

7. Children's Privacy

The App involves financial transactions and travel bookings and is intended only for adults aged 18 and over. It is not directed to children, and we do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.

8. International Transfers

Your data may be stored and processed in countries other than your own. By using the App, you consent to the transfer of information to countries that may have different data protection rules than your country.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by posting the new policy in the App and updating the "Last Updated" date at the top.

10. Contact Us

For any questions regarding this Privacy Policy or your data, please contact us at: