Privacy Policy

1. Information We Collect

1.1 Account Information

• Personal Details: Full name, email address, phone number
• Profile Information: Profile picture, username, date of birth
• Authentication Data: Password (encrypted), login history

1.2 Location Data

• Real-time Location: GPS coordinates when app is active to show nearby venues
• Search Location: City, area, or venue addresses you search for
• Permission: Location data is only collected with your explicit consent

1.3 Booking Information

• Transaction Details: Booking dates, times, venue selections
• Payment Information: Processed through secure third-party providers (Stripe, PayPal). We never store full credit card numbers
• Booking History: Past and upcoming reservations

1.4 User-Generated Content

• Photos and Videos: Venue images, field pictures you upload
• Reviews and Ratings: Feedback you provide about venues
• Messages: Communications with venue owners or support

1.5 Device and Usage Data

• Device Information: Device type, operating system, unique device identifiers
• Usage Analytics: App features used, time spent, search queries
• Technical Data: IP address, browser type, crash logs

2. How We Use Your Information

• Service Delivery: Process bookings, show nearby venues, manage reservations
• Account Management: Create and maintain your account, authenticate users
• Payment Processing: Complete transactions securely through third-party processors
• Communication: Send booking confirmations, reminders, and customer support responses
• Personalization: Recommend venues based on your location and preferences
• Improvement: Analyze usage patterns to enhance app features and user experience
• Security: Detect and prevent fraud, abuse, and security incidents
• Legal Compliance: Meet regulatory requirements and enforce our terms of service

3. Data Sharing and Disclosure

3.1 We Share Information With:

• Venue Partners: Your name and booking details to confirm reservations
• Payment Processors: Stripe, PayPal for secure transaction processing
• Service Providers: Cloud hosting (AWS), analytics tools, customer support platforms
• Legal Authorities: When required by law or to protect rights and safety

3.2 We Never:

• Sell your personal data to third parties
• Share your information for advertising without consent
• Provide access to your data without legitimate purpose

4. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted using SSL/TLS encryption
• Secure Storage: Data stored on encrypted servers with restricted access
• Authentication: Multi-factor authentication options available
• Regular Audits: Periodic security assessments and vulnerability testing
• Access Controls: Limited employee access on need-to-know basis

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

5. Data Retention

• Active Accounts: Data retained while your account is active
• Booking History: Kept for 7 years for accounting and legal purposes
• Deleted Accounts: Personal data removed within 30 days, except where legally required to retain
• Analytics Data: Anonymized usage data may be retained indefinitely

6. Your Rights and Choices

You have the following rights regarding your personal data:

6.1 Access and Portability

• Request a copy of your personal data
• Download your booking history and profile information

6.2 Correction and Update

• Update your profile information anytime in the app
• Correct inaccurate data by contacting support

6.3 Deletion

• Delete your account through app settings
• Request permanent deletion of all personal data (subject to legal retention requirements)

6.4 Control and Preferences

• Opt out of marketing emails (transactional emails required for service)
• Disable location services in device settings
• Manage notification preferences in the app

6.5 Object to Processing

• Object to certain data processing activities
• Withdraw consent for optional data collection

7. Children's Privacy

Kheylo is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it immediately. Parents or guardians who believe their child has provided information should contact us.

8. International Data Transfers

Your information may be transferred to and processed in countries other than Pakistan. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy, regardless of where it is processed.

9. Cookies and Tracking Technologies

• Essential Cookies: Required for app functionality and security
• Analytics Cookies: Help us understand how users interact with the app
• Preference Cookies: Remember your settings and preferences

You can control cookies through your device settings, but disabling them may affect app functionality.

10. Third-Party Links

Our app may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes through:

• In-app notifications
• Email to your registered address
• Notice on our website

Your continued use of Kheylo after changes indicates acceptance of the updated policy.

12. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process your data based on:

• Contract: To provide services you've requested
• Consent: For optional features like marketing communications
• Legitimate Interests: To improve services and prevent fraud
• Legal Obligation: To comply with applicable laws