Privacy Policy

We collect only the information necessary to provide and improve our services. The exact data collected depends on which app you are using and the features you choose to use. Below is a comprehensive overview of all categories of data we may collect across our app portfolio.

We use the information we collect for the following purposes:

We do not share your personal data with third parties except in the following limited circumstances:

• Service providers — we share data with trusted vendors who help us operate our services (e.g. Firebase by Google, Stripe, PayPal, Agora). These providers are contractually bound to process your data only on our instructions and in accordance with this policy.
• Other users of the same app — for social or marketplace features, content you choose to post publicly (profile name, listing details, reviews) will be visible to other users of that app.
• Business transfers — if Zarcon Nexusundergoes a merger or acquisition, your data may be transferred as part of that transaction. You will be notified in advance.
• Legal requirements — we may disclose information if required to do so by law, court order, or government authority, or to protect the rights, safety, or property of our users or the public.
• With your explicit consent — in any other situation, we will ask for your consent before sharing your information.

We retain your personal data for as long as your account is active or as needed to provide you with our services. You may request deletion of your account and associated data at any time (see Section 12).

Certain data may be retained for longer periods where we have a legitimate legal obligation to do so — for example, transaction records for financial/tax compliance, or log data for fraud prevention — typically for up to 6 years in line with applicable accounting regulations.

After deletion, anonymised or aggregated data (which cannot identify you) may be retained indefinitely for statistical and product improvement purposes.

We implement industry-standard security measures to protect your information, including:

• Encrypted data transmission over HTTPS / TLS 1.2+
• Firebase Security Rules restricting unauthorised database access
• Passwords stored using strong cryptographic hashing — we never store plain-text passwords
• Firebase Authentication for secure sign-in flows
• Regular dependency updates and security patching

Our apps are not directed to children under the age of 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children below these age thresholds.

If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately at contact@zarconnexus.org. Upon verification, we will delete the information promptly.

For apps rated for general audiences or that may be used by minors under parental guidance, we take additional care to limit data collection and disable targeted advertising features.

Our apps integrate third-party services to provide core functionality. Each of these services has its own privacy policy which governs how they handle your data. Below is a list of services we commonly use across our app portfolio:

We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies before using any features that interact with them.

Some of our apps offer in-app purchases, subscriptions, escrow-based transactions, or marketplace payments. All payment processing is handled by secure, PCI-compliant third-party processors:

• Stripe — for direct card payments and marketplace payouts
• PayPal — for PayPal wallet payments and subscriptions
• Apple In-App Purchase — for purchases made through Apple devices
• Firebase In-App Purchases — for subscriptions and one-time purchases handled through the Play Store

We receive only a transaction confirmation and the last four digits of your card (for your reference). We never store, transmit, or have access to your full card number, CVV, or bank credentials.

Our apps may send push notifications for service updates, order confirmations, messages, job alerts, or promotional content. Your device will always ask for permission before enabling push notifications.

You can disable push notifications at any time through your device's notification settings (Settings → Notifications → [App Name] on iOS, or Settings → Apps → [App Name] → Notifications on Android). Disabling notifications will not affect your ability to use core app features.

Some of our apps (such as Rebary, TaskZing, and NUMI) require access to your device's location to provide core features such as mapping, local discovery, ride booking, or matching you with nearby service providers.

• Location access is always requested with explicit permission via your operating system's permission dialog.
• You can grant "While Using the App" access (recommended) or "Always" access for ride/delivery apps that need background location.
• Location data is processed in real-time and is not stored permanently beyond what is necessary to complete the requested action (e.g. matching a ride).
• You can revoke location access at any time in your device settings. Some features may be limited or unavailable without location access.

We do not use location data for advertising or share precise location data with advertisers.

Apps such as Art Explorer, Melanated People, and Musta'amil may request access to your device's camera, photo library, or microphone to enable features such as artwork scanning, posting images/videos, or live audio/video calls.

• Camera — used to capture photos or scan artwork in real time. Images are processed on-device or sent to our servers / OpenAI API solely to perform the requested function.
• Photo Library — accessed only to let you select and upload photos or videos you choose to share.
• Microphone — used for voice/video calls via Agora SDK. Audio is transmitted in real time and is not recorded or stored by us.

All permissions are requested at the point of use. You can revoke any permission at any time via your device settings.

Depending on your location, you may have the following rights regarding your personal data. We honour these rights for all users regardless of jurisdiction.

To exercise any of these rights, contact us at contact@zarconnexus.org. We will respond within 30 days. We may ask you to verify your identity before processing your request.

Account Deletion: You can delete your account directly within the app (Settings → Account → Delete Account) or by emailing us. Deletion is permanent and irreversible. Certain data may be retained as required by law (see Section 4).

If you believe your rights have not been respected, you have the right to lodge a complaint with your local data protection authority.

Zarcon Nexusis based in Pakistan. Our apps serve users in multiple countries including Saudi Arabia, the United States, Australia, the United Kingdom, Iraq, and others.

Your data may be stored and processed in any country where our service providers (such as Google Firebase) maintain servers — including the United States and the European Union. By using our apps, you consent to this transfer and processing.

Where data is transferred to countries outside the EEA, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses — to protect your information in accordance with applicable data protection law.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

1. Update the "Last Updated" date at the top of this page.
2. For material changes, display a prominent notice within the app or send you a notification (if you have notifications enabled).
3. For significant changes affecting your rights, we may request renewed consent.

We encourage you to review this page periodically. Your continued use of our apps after changes are posted constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us using any of the methods below. We aim to respond to all enquiries within 30 days.

This Privacy Policy was prepared to comply with the Apple App Store Review Guidelines, Google Play Developer Program Policies, GDPR (EU) 2016/679, CCPA (California), and applicable Pakistani data protection principles. For the purposes of data protection law, the data controller is Ayesha Azhar / ZarConnexus, Lahore, Punjab, Pakistan.