Privacy Policy

1. Data we collect

Account data: your name, username, email address, password (stored only as a secure hash), and the profile picture, bio and city you choose to add. If you sign in with Apple or Google we receive the account identifier and email address that service gives us; we never receive your password for it.

Contact and delivery data: your phone number and shipping address, collected when you place an order so that the courier can deliver to you. Both are stored encrypted.

Identity data, from sellers only: if you apply to become a Verified Reseller we collect your CNIC number and photographs of your CNIC together with a selfie, so that we can confirm you are who you say you are before any money is paid out.

Payout data, from sellers and from buyers owed a refund: the bank or wallet account you want to be paid into — the provider, the account title, and the IBAN or account number. This is stored encrypted with a key held outside the database.

Transaction data: your listings, orders, offers, reviews, Buyer Protection choices, and the commission recorded against a sale. Payment itself is cash on delivery and is collected by the courier, so we do not collect or store card or bank details for paying us.

Photos and video: the photographs you take of the items you list, and any photo or video you send us as evidence when you report a problem with an order. A video recorded as evidence keeps its sound.

Usage and content data: the messages and offers you send in chat, the items you view, favourite or follow, and technical information such as your device type and app version.

Push notification tokens, if you allow notifications, so that we can deliver order, message and offer alerts to your device. Declining notifications means no token is created.

2. How we use your data

To create and operate your account, show and process listings and orders, arrange delivery, and provide support.

To keep the marketplace safe, for example detecting fraud, abuse, and attempts to take payments off-platform, and to comply with Pakistani law.

We process your data on the basis of performing our contract with you, your consent, and our legitimate interest in running a safe service.

3. Sharing your data

We share only what is necessary: your public profile and listing details are visible to other users; a seller and buyer see the information needed to complete a transaction (such as the shipping address).

We use a small number of service providers who process data only on our instructions and only for these purposes: our own servers host the app, the database and the images you upload; Groq processes your search phrase, or a listing photo and title, when you use the optional AI features; Expo's push service delivers notifications to your device; our email provider sends account and order email; and our encrypted database backups are held with an object-storage provider.

We may also share data with authorities where required by law or by valid legal process under PECA 2016.

We do not sell your personal data.

4. Data security and retention

We use reasonable technical and organisational measures to protect your data. Everything travels over an encrypted connection, passwords are stored only as hashes, and your phone number, shipping address and payout details are encrypted at rest with a key held outside the database. Access to identity documents is restricted to the staff who review them.

We keep personal data only as long as needed for the purposes above or as required by Pakistani law, after which it is deleted or anonymised.

5. Your rights

You can access and update most of your information from your profile and account settings. You can delete your account at any time from Settings, in the app or on the website; what is deleted, what is kept and for how long is set out at https://nayapurana.shop/delete-account.

When you delete your account, your listings, orders and related data are removed, subject to any records we must retain by law.

6. Children

NayaPurana is for adults. You must be 18 or over to create an account, and we do not knowingly collect personal data from anyone under 18. If we learn that an account belongs to someone under 18 we close it and delete the data.

7. Governing law and contact

This Policy is governed by the laws of the Islamic Republic of Pakistan.

For privacy questions or requests — including access, correction or deletion — email support@nayapurana.shop, or use the support option in the app. We respond within 30 days.