Privacy Policy
Last updated: 5 November 2026
This policy covers the Bhook Laagi mobile app (for customers and riders) and this website. It explains what we collect, why, who can see it, how long we keep it and how you can delete it. Bhook Laagi is a delivery service for food, groceries, Pick & Drop parcels and “Buy for me” errands in Fateh Jang and Attock, Pakistan.
We do not sell your personal information and we do not use it for advertising.
Who we are and how to contact us
The Bhook Laagi app and this website are run by the Bhook Laagi team in Fateh Jang and Attock, Punjab, Pakistan. For any privacy question or request, email hello@bhooklaagi.com or message us on WhatsApp at 0309 9718473. We reply within 7 days.
Customers: what we collect
- Name and phone number, to create your account, sign you in and hand over your order.
- Your 4-digit PIN, stored only as a one-way hash. We cannot read it.
- Email address, only if you choose to add one.
- Delivery addresses, landmarks and delivery notes, so the shop and rider can reach you.
- Precise location, only while you are using the app, to find shops near you, set your delivery point and show your order on the map. The customer app does not use your location in the background.
- Orders and payments: what you ordered, from which shop, amounts and cash on delivery.
- Photos you choose to attach, for example a photo of a shopping list or item on an errand order, taken with your camera or picked from your gallery. Only the photo you pick is uploaded; the app does not read your other photos.
- Voice notes you choose to record on a Pick & Drop or Buy for me request, for example your shopping list or how to find the pickup. The app uses the microphone only while you hold or tap the record button, and asks for permission first. Nothing is recorded in the background. The recording is uploaded only when you attach it; until your request is placed it is kept on your phone so it is not lost if you go offline.
- Buy for me spending details: the spend limit you set, the shop bill the rider sends, and whether you approved it.
- Messages and feedback: order chat with your rider, ratings and comments, support requests and reports.
We do not turn voice notes into text, use them to identify you by your voice, use them to train AI models, or use them for advertising. They are used only to complete your request.
Riders: what we collect
- Name and phone number, for your account and sign-in, and your PIN as a one-way hash.
- Identity and vehicle details: CNIC number, driving licence number, vehicle type and registration number, to check who you are and that you can ride legally.
- Identity photos: photos of the front and back of your CNIC, your driving licence and a selfie. These are seen only by our verification team and are never shown to customers or shops.
- Profile photo: shown to the customer on an order you are delivering, so they know who is coming. It is separate from your selfie.
- Precise location while you are online or on a delivery, including when the screen is off or you are using a navigation app. We use it to offer you nearby orders, show the customer where their order is and keep you safe (for example with SOS). While location is being shared, Android shows a notification that says so. Sharing stops when you go offline or the delivery ends. Before the app reads your location for the first time, it explains this and asks you to agree. We do not collect your location when you are offline.
- Shop receipt photos and bill amounts on Buy for me errands, taken with your camera, so the customer can see what was bought and approve the bill. Only the photo you take is uploaded.
- Work records: orders you delivered, earnings, cash collected and handed over, ratings and SOS alerts.
- Messages and feedback: order chat with customers, support requests and reports.
Shops and website visitors
- Merchant registration: business name, owner name, mobile number, email (optional), business type, city, address and any note you add, so we can review your application and set up your shop.
- Contact: anything you send us by phone, WhatsApp or email.
- Technical data: IP address and browser type, used for security and to stop spam.
Device data
The app stores a push notification token so we can send order updates and chat messages, and basic device and app version information to keep the service working. The app asks for the microphone only to record a voice note and for the camera only to take a photo you choose to attach; you can say no and still use the rest of the app. We do not use advertising identifiers and we do not collect hardware identifiers such as IMEI or SIM serial numbers.
Notifications we send you are also kept in the app’s notification center, so you can read them again. For riders, we record which new-order alert sound is saved on the phone, so we send the right alert.
Rider alert volume: while a new-order alert rings on the offer screen, the app plays it at the phone’s alarm volume. If a rider allows it, the app raises that volume to full and puts it back when the alert stops. Riders can change this at any time under Settings → Full volume alert, and can turn the ring off under Settings → New request sound.
Who can see your information
- The shop you order from sees your order and the details needed to prepare it.
- Your rider sees your delivery address, landmark, delivery notes and your location on the map while the order is active. Customers and riders talk through in-app chat; phone numbers typed in chat are hidden.
- Riders offered your Pick & Drop or Buy for me request can read it and play your voice note before they accept, so they know what is involved. After a rider accepts, only that rider can play it. Voice notes, request photos and receipts are kept in private storage and opened only through short-lived links (15 minutes).
- On Buy for me, you see the rider’s receipt photo and bill, and the rider sees your spend limit and whether you approved the bill.
- Customers see their rider’s name, profile photo, vehicle, number plate, rating and live location during their order.
- Service providers that run the service for us, only for that purpose: cloud hosting and file storage, Google Firebase (push notifications) and Mapbox (maps, routes and address search).
- Authorities, when Pakistani law requires it, or to protect someone’s safety.
How long we keep it
- Account and profile details: until you delete your account.
- Rider identity photos and numbers: while your rider account exists. They are deleted when you delete your account.
- Order, payment, earnings and cash records: kept for up to 6 years for accounting and tax, without your name or phone number once your account is deleted.
- Order chat, ratings and reports: kept with the order for safety, dispute handling and legal requests. After account deletion they are no longer linked to your name or phone number.
- Voice notes, request photos and shop receipt photos: deleted from our storage 30 days after the order is delivered or cancelled. A voice note you recorded but did not send stays only on your phone, and is removed when you delete it, place the request, or uninstall the app.
- Notification history in the app: deleted after 90 days, or when you delete your account.
- Merchant applications that do not go ahead: deleted within 12 months.
Deleting your account
You can delete your account at any time in the app: customers go to Account → Delete account, riders go to Account → Delete account. If you no longer have the app, see how to request deletion. When an account is deleted we erase the name, phone number, email, PIN, saved details and, for riders, the CNIC and licence numbers, ID photos, selfie and profile photo. The records listed above under “How long we keep it” stay without your identity.
Your other choices
- You can turn off location, notifications, the microphone or the camera in your phone settings. Some features will not work without them; you can always type your request instead of recording it.
- You can ask us for a copy of your information or to correct it by emailing hello@bhooklaagi.com.
Safety and reporting
Customers and riders can report a chat message, a rating comment or a person, and block them, from inside the app. Our team reviews reports within 24 hours and may remove content or suspend accounts. See our Terms of Service.
Security
Data travels over encrypted connections (HTTPS). Phone and CNIC numbers are encrypted in our database, PINs are stored as one-way hashes, and identity photos are kept in private storage that only our verification team can open. Every order has a 4-digit delivery code, so the order is handed only to the person who has the code. No system is perfectly secure, but we work to protect your information.
Children
Bhook Laagi is for people aged 18 and over and is not meant for children. If you think a child has given us personal information, contact us and we will delete it.
Changes
We may update this policy. The date above shows the latest version, and we will tell you in the app about important changes.
Contact us
Bhook Laagi, Fateh Jang and Attock, Pakistan.
Phone / WhatsApp: 0309 9718473
Email: hello@bhooklaagi.com