Privacy Policy

Who we are

Kam Karwao is an Islamabad home-services marketplace: customers post jobs; nearby Professionals bid; you choose who to hire. The Android package is com.protovoid.kamkarwao and the iOS app is com.protovoid.kamkarwao.app. The operator behind the product is Protovoid. This site is kamkarwao.com.

What this policy covers

It covers data from the Kam Karwao iOS and Android apps and from this marketing site (waitlist, contact form, and anonymous visit counts). Protovoid Admin is an internal operations console for our team — not a consumer product — and is out of scope for this public policy except that our operators can see account, job, identity, and wallet records needed to run the marketplace.

Account and profile

To create an account you verify a Pakistan mobile number with a one-time code (Firebase phone authentication) and set a password. We store the phone number, password hash (not the password itself), display name, optional email, role (Customer or Professional), profile photo if you add one, and language or appearance preferences on the device.

We use this data to sign you in, keep your session, show your profile to the other party on a job, and support the account. We do not use Sign in with Apple or social logins.

Location

The apps request location while you use them (when-in-use / foreground), not as an “always-on” tracking product. Location is used to pin a job, show nearby Professionals or jobs (about 5 km), save addresses you choose, and — while a hired job is active — to share a Professional’s approximate position with the Customer who hired them so they can coordinate arrival.

Maps in the app load tiles from tiles.kamkarwao.com. Location is not a public live feed of where you are, and we do not sell location data.

Identity checks (Professionals)

Professionals must complete an identity check before taking jobs. That typically includes a CNIC number and photos of the CNIC (front and back), and related verification photos. Those images are stored so our operators can review them. Other customers do not receive your CNIC digits or signed identity-image links on a public profile.

Customers are not put through that CNIC flow. We may still keep identity records after an account is closed if needed for fraud, disputes, or legal reasons (see retention below).

Jobs, bids, photos, and reviews

When you post or bid on a job we store the description, category, pin, price or bid, status, timing, and any photos or files you attach. After a job we may store ratings and written reviews. The other party on that job can see what they need to complete the work (for example the pin, description, and chat).

Chat and voice

On an active job, Customer and Professional can send in-app messages (text and attachments). That is user-generated content. We store messages so both sides can read the thread and so Support can look into a dispute if you ask us to.

In-job voice calls use Agora’s real-time audio (VoIP). Agora processes the live call. We do not operate a separate “call recording library,” and this policy does not claim that we keep a copy of every call. Microphone access is used for those calls.

Payments and wallet

Job payment between Customer and Professional is arranged according to the preference on the job (for example Cash or EasyPaisa-style). Kam Karwao is not an in-app card checkout for the job fee and does not take that cash in the app.

Professionals have an in-app wallet. Top-ups are requested in the app and approved by our operators (a platform float / bid gate) — not a self-serve card processor. Customers may have a wallet balance that operators can adjust; customer self top-up is not a default product. We store wallet balances and ledger entries. We do not ask you to type full card numbers into Kam Karwao for these flows.

Device, crash reports, and bot checks

• Push: if you allow notifications, we store a device token so we can send alerts (for example wallet updates). Open-job alerts may show in the app without relying on a system tray message.
• Sentry: release builds may send crash and error reports so we can fix bugs. Sentry is configured not to send default personal identifiers (sendDefaultPii is off). We do not attach your GPS, auth tokens, or account as Sentry “user” identity.
• Cloudflare Turnstile: a bot check may run on sign-up, sign-in, password reset, and on this website’s forms. Turnstile tokens are used to verify you are not automated traffic; they are not a marketing profile.
• On-device preferences such as language and light/dark mode stay on the device unless we also store a matching account field.

This website

If you join the waitlist or send a contact message we receive what you submit: email, optional name, Customer or Professional role, reason, and message. We use a spam check (Turnstile), a honeypot, and basic rate limits. We use waitlist emails to tell you when the app is available. We use contact messages to reply. We do not sell your email.

We set a first-party cookie named kk_vid so we can count unique visitors and page views on this marketing site. It stores a random ID only — not your name, email, or phone — for about one year. We do not sell or share that ID as an advertising identifier. Visit counts skip /qa/ download pages. Bots are ignored.

How we use data

• Run the marketplace: accounts, jobs, bids, chat, maps, and identity review.
• Safety, fraud, and abuse prevention.
• Customer Support and operator tools.
• Wallet and ledger records.
• Improve reliability (crash reports, rate limits).
• Tell waitlist subscribers when downloads open.

Who we share with

We share data only as needed to operate Kam Karwao:

• The other party on a job (profile name, photo, job details, chat, and — when hired — approximate Professional location).
• Firebase (Google) for phone one-time codes.
• Agora for live voice calls.
• Sentry for crash diagnostics (without default PII).
• Cloudflare for this website, bot checks, and visit counts.
• Object storage for photos and attachments (Supabase Storage).
• Email delivery for waitlist and contact (Resend), when you submit a form.
• Our operators (Protovoid Admin) for verification, support, and wallet adjustments.

We do not sell personal data. We may disclose information if required by Pakistani law or to protect people from harm.

Retention and deleting your account

When you delete your account in Settings (or we process a verified request from the delete-account page), we close it immediately: you are signed out, the account is marked deleted, it cannot be used to sign in, and sessions are revoked. That is a soft-delete — not an instant wipe of every row we ever stored.

We keep some records after closure because jobs, chat, identity checks, and wallet ledgers are tied to other people and to fraud or dispute handling. We may retain, for as long as needed for those purposes and for legal obligations:

• Job, bid, review, and message history the other party still needs.
• Wallet and ledger entries.
• Professional identity (CNIC) submissions.
• The closed account record, including the phone number (the same number usually cannot open a new account until we later release it).

We may later permanently erase or further anonymize records when they are no longer needed. The kk_vid website cookie is separate from your app account; deleting the account does not by itself clear that cookie on your browser.

Step-by-step deletion (in-app and via this site) is explained on the Delete account page.

Your choices

• Location, camera, microphone, photos, and notifications can be refused or turned off in system Settings. Some features will not work without them.
• You can edit profile details in the app.
• You can delete your account in Settings → Security, or follow the Delete account page.
• You can contact us to ask what we hold or to request help. We will need to verify the account. We do not offer a self-serve “download all my data” export today.

Children

Kam Karwao is a hiring marketplace for home services. It is not directed at children under 13. You must be old enough to form a binding contract in Pakistan (typically 18) to hold an account. If you believe a child has created an account, contact us and we will close it.

Security

We use signed-in APIs, hashed passwords, and session revocation when an account is closed or access is revoked. No method is perfect. Do not share your OTP or password.

Changes

We will post updates on this page with a new “Last updated” date. Continued use of the apps or this site after an update means you should read the new version. Material changes may also be noted in the app when practical.