Privacy Policy

This Privacy Policy explains what information Savari collects about you, what Savari does with it, who else receives it, how long it is kept, how it is protected and what you can do about it.

In this policy, "Savari", "we" and "us" mean HUWAZ TECHNOLOGIES (SMC-PRIVATE) LIMITED (Corporate Unique Identification No. 0360301), a company incorporated in Pakistan under the Companies Act, 2017, with its registered office at Flat 2, First Floor, Plaza 5, Sector A, Bahria Enclave, Islamabad, which operates the Savari app and the Savari services. "You" means anyone who uses Savari: passengers, parcel senders, drivers, couriers and visitors to the Savari website.

Savari is a transport app for Pakistan. It offers:

• City rides: trips inside one city, where the passenger proposes a fare and nearby drivers accept it or answer with their own price;
• Savari Parcel: parcel delivery inside one city, with one or more drop-off points;
• InterCity: trips from one city to another, in a shared seat or a private car;
• wallets for customers and drivers, the driving balance and payouts for drivers, and a support service.

One Savari account can be used as a passenger and, once Savari approves it, as a driver, a courier or both. This policy covers all of these uses. Where something applies only to drivers and couriers, the policy says so.

This policy works together with the Terms of Use, the Savari Parcel Terms, the InterCity Terms and the End-User Licence Agreement. You can read all of them in the Legal section of the Savari app.

This version takes effect on 23 October 2026.

The rest of this policy gives the details. In short:

• Savari collects what it needs to arrange trips and deliveries, handle money, check drivers and couriers, keep people safe and answer support requests.
• Savari reads your phone's location only while the Savari app is open and in use. It does not ask for permission to follow your location in the background.
• Section 9 lists what other users see about you. In City rides and InterCity, neither side sees the other's phone number, and calls are made inside the app. In Savari Parcel, the couriers who receive your request see your phone number.
• Savari does not sell your information, does not show advertising and does not put advertising or analytics tools from other companies in the app. On Android phones, Google ML Kit, which checks your face during the live selfie, sends Google technical information about how it runs, as section 10 explains.
• Photos of identity documents, licences and vehicles are protected, and Savari shows them only to people who are allowed to see them.
• A driver registration that is never submitted is deleted completely, with its documents and photos, after 30 days without activity.
• You can ask for a copy of your information and ask Savari to correct it through the Support section of the Savari app. You can delete your account yourself at any time under Settings in the app.
• Deleting your account is complete, permanent and immediate. Savari then keeps a sealed safety record for one year, which only authorised members of its team can open when there is a specific reason, and destroys it after that.

You give Savari information when you create an account, fill in your profile, ask for or offer a trip, register as a driver or courier, or contact support.

Account and profile (everyone):

• your mobile phone number, which Savari confirms by sending a one-time code to it;
• your first and last name;
• your gender, which you choose when you sign up or save once in your profile, and which after that only Savari support can change. Savari uses it for safety features, such as seating women only with other women in shared InterCity rides;
• the address you pick on the map when you sign up;
• if you choose to add them: an email address, a profile photo and the details on the Other Personal Details screen (national identity number, country, state, district, tehsil, postal code and village or sector);
• your settings: language, light or dark theme, distance unit, preferred navigation app and whether you want promotional notifications;
• the trusted contacts you add on the Safety screen: their name, their phone number and how they are related to you.

Trips and deliveries:

• for City rides: the pickup point, the destination, any stops, the vehicle category, the fare you offer and any raise, your payment method and whether you switched on automatic acceptance;
• for Savari Parcel: the pickup point, each drop-off address with the recipient's phone number, the delivery type, the package size, whether the parcel is fragile, your comments, the fare you offer and your payment method;
• for InterCity: the two cities, the pickup and drop-off points, the travel date and time, the number of seats, a shared or private ride, your notes, the fare and your payment method;
• the reason you choose, and any note you write, when you cancel;
• the messages you send in trip chat, the ratings and written reviews you give, and the problems you report about a delivery;
• the emergency alerts you raise with the panic button.

Wallets and payouts:

• the amount of each wallet top-up and the reference you enter with it;
• for a top-up by bank transfer: the Savari bank account you sent the money to and a screenshot of the payment as proof, which Savari's team checks before the money is added;
• for a payout: the account holder's name, the bank name, the account number and, if you give it, the branch.

The app does not ask for bank card details.

Drivers and couriers also give:

• vehicle details: type, make, model, colour, year, number plate and registration authority, with photos of the front and back of the vehicle and of both sides of its registration card, and, if the vehicle is not registered in your name, photos of both sides of the registered owner's CNIC and how you are related to the owner;
• the ride modes you ask for and the vehicle facts they depend on, such as engine size, air conditioning and whether the vehicle runs on fuel, electricity or both;
• the documents Savari asks for, currently both sides of your driving licence and both sides of your CNIC, photographed with the document camera in the app, and a live selfie taken with the front camera in the app while you look at the camera and blink, during which the app takes two photos that show only your face, one with your eyes open and one with your eyes closed, together with your licence number, issue date and expiry date;
• requests for the courier role and applications to drive InterCity;
• a daily earnings goal, if you set one.

While you register as a driver, Savari saves each detail, photo and document on its servers as soon as you enter it, so you can stop and later carry on from the step you reached. Savari's team can see an unfinished registration, including which items are still missing, and may send you a reminder listing them. Once you submit the registration, nothing in it can be changed until Savari approves or rejects it.

When you contact Savari support, Savari receives your message and anything you choose to include with it.

Some information is created automatically while you use Savari:

• Location. With your permission, Savari reads your phone's exact location while the Savari app is open and in use. For passengers and senders, it is used to set the pickup point, show where you are and find drivers near you. For drivers and couriers who are online, it is used to offer nearby requests, show your position to the customer during a trip and guide the trip. While you are online as a driver for City rides, customers nearby also see your vehicle's position on their map, without your name, photo or phone number. Savari does not ask for permission to read your location in the background.
• Driver position. For drivers and couriers, Savari keeps the latest position, and each new one replaces the one before. The route of each trip is stored with that trip. Savari also keeps location information from trips, without names, to improve maps and arrival times.
• Trip records: when each ride, delivery or booking was requested, accepted, started, completed or cancelled, and by whom; the offers and counter-offers made; the route, distance and duration; the suggested, agreed and final fares; waiting at the pickup point; and, for Savari Parcel, the hand-over codes of each delivery and how they were used.
• Money records: wallet balances and every movement in them, the wallet and cash parts of each payment, the commission taken from drivers, cashback, incentive rewards, top-ups and payouts.
• Driver activity: when you go online and offline, when you were last active, the requests you receive and the offers you send, your completed trips and deliveries, your progress on incentives and achievements, and your ratings. Savari uses this to decide which requests you can receive and to run driver access and incentives.
• Recent places: the addresses you used recently, so that you can pick them again quickly.
• To improve place search, Savari keeps the words of some searches, without your name, phone number or location, for up to 30 days.
• Call records: who called whom through the app, the phone numbers on both accounts, the trip, and when the call started, was answered and ended. The sound of a call is never recorded.
• Emergency alerts: when you press the panic button during a trip, Savari records your position, the trip and the time, and shows the alert to its team. Savari does not send your trusted contacts a message itself; the Safety screen lets you call them, or the emergency services, from your phone.
• Notifications: the notices Savari sends you in the app and whether you have read them.
• Technical details: Savari's servers log each request, including the network (IP) address it came from, the time and the part of the service used. The app also tells Savari which language it is set to, so that answers come back in that language.
• Devices and sign-ins: when you sign in, and while you stay signed in, the app sends Savari your phone's model, its operating system and version, and the Savari app version. Savari keeps these with the network (IP) address the app connects from, the approximate city worked out from that address, and when each session started, was last used and ended. You can see your current and past sessions on the Sessions screen, and Savari's team can see them to protect your account and help you. The approximate city is looked up on Savari's own servers in the IP to City Lite database by DB-IP (db-ip.com), used under the Creative Commons Attribution 4.0 licence (CC BY 4.0); your IP address is not sent to DB-IP. To deliver call alerts and notices while the app is closed, the app also gives Savari a push token for your phone, which is kept with your session and removed when the session ends.
• Camera, photos and microphone: the app opens your camera or photo library only when you choose to take or upload a picture. Identity documents, the vehicle registration card and the live selfie can be taken only with the camera inside the app, not chosen from your photos. The microphone is used only during an in-app voice call.

Document checks: when you send a document, the vehicle registration card or a live selfie, Savari's own software on Savari's servers reads the text printed on it, such as names, numbers, dates and vehicle details, and compares it with what you typed and with your other documents. No outside company reads your documents. The two photos of your live selfie show only your face. The software uses them to check that the live selfie is genuine and shows the same person as the photos on your CNIC and driving licence. It also compares your documents and vehicle details with those on other Savari accounts, so that a driver has one vehicle registered on Savari at a time and a vehicle is registered with one driver at a time. Savari keeps the results of these checks, but never keeps a face template (a stored model of your face). The photo with your eyes closed is not added to your documents, and it is deleted automatically like other uploads that are never used.

Savari does not read your contacts list, does not use advertising identifiers and does not build a profile of you for advertising.

Savari also receives information about you from others:

• Other users: the stars and any written review that the person you travelled with gives you after a trip or delivery, which you can see in the details of that trip; the messages they send you; the problems they report about a trip or delivery you took part in; and cancellation reasons that concern you.
• Parcel senders: the phone numbers and addresses of the people who receive their parcels. Savari uses these only for that delivery.
• Users who name you as a trusted contact: your name and phone number, which Savari keeps only so that the user can see and call you from the Safety screen.
• Savari's team: decisions on documents, vehicles and ride modes with the reasons for them, notes on trips, suspensions and their reasons, and the outcome of support requests and problem reports.
• Google: addresses, places, routes, distances and travel times for the positions and searches that Savari may send to it.
• Vehicle owners: when a driver's vehicle is registered in someone else's name, the driver gives Savari photos of both sides of the owner's CNIC and says how they are related. Savari uses them only to confirm who owns the vehicle, and only Savari's team sees them.

Savari uses information for these purposes:

• To create your account, confirm your phone number, keep you signed in, show you your sessions and protect your account from being used by someone else.
• To arrange City rides, deliveries and InterCity trips: showing your request to suitable drivers or couriers nearby, suggesting a fare, working out routes, distances and arrival times, checking that a City ride or delivery stays inside the pickup city, showing each side where the other is, and making sure a customer has only one open ride, delivery or InterCity request at a time. Neighbouring cities that Savari treats as one connected area, such as Islamabad and Rawalpindi, count as one city when Savari checks the pickup city: a trip or delivery between them is a City ride or a Savari Parcel delivery, and InterCity does not serve trips between them.
• To handle money: splitting a payment between wallet and cash, taking the commission from the driver's driving balance, paying cashback and incentive rewards, recording top-ups and payouts, checking the payment screenshots sent with bank transfer top-ups, and keeping accurate accounts.
• To check drivers and couriers before and while they work: reviewing documents, vehicles, ride mode requests, courier role requests and InterCity applications, tracking which registration steps are finished, reminding drivers what is still missing, and stopping work when a document or vehicle is rejected or expires.
• To keep people safe: offering safety features such as women-only shared InterCity rides, dealing with emergency alerts, looking into reports and complaints, preventing fraud and misuse, suspending accounts that break Savari's terms, keeping the sealed safety record of a deleted account for one year, and noticing when an account that was suspended when it was deleted comes back as a new account.
• To help you: answering your questions, looking into problems with trips, deliveries and payments, and settling disagreements between users.
• To keep you informed: sending notices about your trips, deliveries, documents and account in the language you chose, and, only if you switch them on, offers, promotions and news from Savari.
• To run and improve Savari: fixing faults, keeping the service secure, setting fare tables and other settings, and understanding how the service is used from Savari's own records.
• To meet legal duties, such as keeping financial records and answering valid requests from the authorities.

Savari does not use your information for purposes unrelated to these.

Savari relies on the following grounds:

• Providing the service you asked for. Most information, such as your phone number, name, trip details and payments, and for drivers and couriers the vehicle and document details, is needed to give you the service described in the Terms of Use, the Savari Parcel Terms and the InterCity Terms. Without it, Savari cannot arrange your trips or let you drive.
• Legal duties. Savari keeps financial records and answers valid legal requests because the law requires it.
• Legitimate interests. Savari uses some information to keep users safe, prevent fraud and misuse, protect its systems, settle disagreements and improve the service, and keeps the sealed safety record of a deleted account for the same reasons. It does so only where this does not unfairly affect your rights, and you can object as section 16 explains.
• Your permission. Savari uses your location, camera, photos and microphone, and sends promotional notifications, only when you allow it. Adding an email address, a profile photo, other personal details or trusted contacts is also your choice. You can take back your permission at any time; this does not undo what Savari did before.

Some decisions in Savari are made automatically, following rules set by Savari's team:

• the suggested fare and the range of fares you may offer, based on things such as the distance and the vehicle category;
• which drivers or couriers receive a request, based on how close they are, the vehicle category and ride modes approved for them, and the other conditions Savari sets;
• automatic acceptance, if the passenger switches it on: it accepts a suitable offer for the passenger, never one above the passenger's fare;
• refusing a City ride or a delivery when the destination, a stop or a drop-off is in another city, and refusing an InterCity trip that starts and ends in the same city, where neighbouring cities that Savari treats as one connected area, such as Islamabad and Rawalpindi, count as one city;
• blocking offers from a driver whose driving balance is too low, until the driver adds money to it;
• taking a driver offline when the phone stops sending a location;
• giving access to some ride modes, to InterCity and to achievement badges only to drivers who meet the conditions Savari sets, which can include their rating;
• stopping a driver or courier from working when a required document or the vehicle passes its expiry date;
• refusing to register a vehicle while you already have a vehicle registered on Savari, or while that vehicle is registered with another driver;
• warning you that your account is at risk, and then suspending it for a set time, when limits set by Savari are reached: repeated cancellations of orders a driver or courier has already accepted, a high rate of cancelling trips after accepting them, a low average rating, or several complaints that Savari's team found valid; a suspension of the customer side covers only booking, and a suspension of the driver side covers only driving and delivering;
• refusing to delete an account while one of the things listed in section 17 is still open, and alerting Savari's team when another account appears to belong to someone whose account was suspended when it was deleted within the past year.

Savari's own software also checks the documents, vehicles and ride modes that drivers and couriers send. When every check passes, it can approve them without waiting for a person, and it can then open the courier role and InterCity to a driver who meets their conditions. It rejects a document or a vehicle on its own only when the photo cannot be read, when the document has clearly expired, or when you already have a vehicle registered on Savari or the vehicle is already registered with another driver. A face that does not match never leads to a rejection on its own. Every case that is not clear goes to people on Savari's team.

People on Savari's team decide every document, vehicle, ride mode, courier role and InterCity case that the software does not settle, and every suspension other than the automatic ones above. An automatic suspension ends by itself when its time is over, and when automatic suspensions repeat, people on Savari's team review the account. If you think a decision about you is wrong, including one made automatically, you can ask for a person to look at it again through the Support section of the Savari app. The support assistant in Help only answers questions; it never makes one of these decisions.

This section sets out what other users see about you when you ride, send a parcel, drive or deliver with Savari.

City rides:

• When you ask for a ride, every driver nearby who is eligible for it sees your first and last name, your rating and number of ratings, the pickup point, the destination, any stops and the fare you offer. This includes drivers whose driving balance is too low for them to send you an offer.
• When a driver sends you an offer, you see the driver's name, photo, rating, number of ratings and completed rides, the make, model, colour, year, number plate and category of the vehicle, how far away the driver is, when the driver can arrive and the price offered.
• After you choose an offer, you can follow the driver's position on the map until the trip ends.
• You and the driver can message and call each other inside the app. Neither of you sees the other's phone number.

Savari Parcel:

• When you send a delivery request, every courier nearby who is eligible for it sees your name, your phone number, your rating and number of ratings, the pickup point, each drop-off address, the package size, the delivery type, whether the parcel is fragile, your comments and the fare you offer. They see all of this before you accept anyone, and this includes couriers whose driving balance is too low for them to send you an offer.
• With each offer you see the courier's photo, rating, number of ratings and completed deliveries, the vehicle and its number plate, how far away the courier is, when the courier can arrive and the price offered. Once you accept, you also see the courier's name and phone number and can follow the courier on the map.
• The courier who accepts sees the phone number of each recipient, to reach them at the drop-off. Savari itself never contacts recipients.
• The drop-off code for each stop is sent only to you. You pass it to the recipient, who gives it to the courier at delivery.
• Before you enter a recipient's phone number, make sure the recipient is happy for the courier to have it for this delivery.

InterCity:

• The passenger and the driver see each other's name and rating, the pickup and drop-off points, the date and time, the number of seats, the vehicle and the planned route. Phone numbers are not shown.

Other cases:

• Ratings: the average of the ratings you receive, and how many there are, is shown to the people you travel with as described above. The person you rate can see the stars and any written review you gave them in the details of that trip, and Savari's team can read them as well.
• Drivers on the map: while you are online as a driver for City rides, customers nearby see your vehicle's position on their map, without your name, photo or phone number.
• Sharing from the Safety screen: the Share option opens your phone's own sharing menu with a message you can send to people you choose. Savari does not see who you send it to.
• Savari's team: authorised members of Savari's operations team can see account, trip, delivery, wallet and document information in Savari's staff portal when their work needs it, for example to approve a driver, answer a support request, look into a safety report or settle a disagreement. They may read the messages of a trip when that is needed to deal with a complaint, a safety report or a disagreement.

Sharing your trip with a live link:

• During a City ride, or once you have booked an InterCity journey, you can create a live link from the trip screen and send it through any messaging app to people you choose. Anyone who has the link can open it on getsavari.com in a web browser, without signing in.
• The page shows your driver's first name, photo and rating, the make, model, colour and number plate of the vehicle, a note that the driver's CNIC was checked with only its last four digits, the trip reference, your first name, the stage of the trip, the departure date and time of an InterCity journey and the expected arrival time. After the viewer taps to show the map, it also shows the live position of the vehicle, the route and the pickup and destination pins. If an emergency alert is open on the trip, the page says so.
• The page never shows the fare, anyone's phone number, full addresses beyond the pins on the map, or photos of identity documents.
• A link stops working as soon as you stop sharing, which you can do at any time from the trip screen. Otherwise it stops working on its own, no later than a short time after the trip ends.
• If you are the driver, a passenger may share a live link to your trip, which shows the details about you and your vehicle listed above. Savari does not tell the driver when a trip is shared.

Savari uses a small number of other companies to run the service. Each receives only what its part of the work needs:

• Google Cloud runs Savari's servers and stores the photos and documents you upload.
• Supabase hosts Savari's database, which holds your account, trips, deliveries, wallets and the other records described in this policy.
• Google Maps Platform draws the maps in the app and on shared trip pages, and may also find the places you search for, turn map positions into addresses, and work out routes, distances and arrival times. When it does, Google receives the search words, positions and addresses involved from Savari's servers. To draw a map, Google receives technical information straight from the phone or browser showing it, such as its network address and the part of the map being shown. Google handles this under its own privacy policy, available at https://policies.google.com/privacy.
• Google Cloud Translation translates text written by Savari's team, such as help articles, notices, lists of reasons and vehicle category names, so that you can read it in your language. Your messages, notes, reviews and documents are never sent for translation.
• Google and Cloudflare help two phones connect for an in-app voice call, and Cloudflare carries the call when the phones cannot connect directly. They receive the network addresses of the two phones but cannot hear what is said.
• Google Firebase Cloud Messaging (on Android phones) and the Apple Push Notification service (on iPhones) deliver call alerts and notices, such as a driver arriving or a missed call, to your phone while the app is closed. For this, they receive your phone's push token and the content of the alert, which for a call includes the caller's display name and the call details.
• Google ML Kit (on Android phones) finds your face and sees when you blink during the live selfie. It works on the phone itself: the camera image is not sent to Google, and only the two photos of the live selfie, which show only your face, are sent, to Savari. ML Kit sends Google technical information about how it runs, such as the make, model and Android version of the phone, the name and version of the app, an identifier for this installation of the app that does not identify you or your phone, the size and format of the camera image, how long each check took and any error codes. Google receives this information in encrypted form, uses it to keep ML Kit working and to measure how it is used, does not pass it to other companies and handles it under its own privacy policy, available at https://policies.google.com/privacy. On iPhones, the check uses the face detection built into iOS instead.
• If you contact Savari by phone, WhatsApp or email from the Support section, your message travels through that phone, messaging or email service, which handles it under its own terms.
• If you open a trip in another navigation app, such as Google Maps or Apple Maps, that app receives the place you are heading to.
• Apple's App Store and Google Play handle downloads and updates of the app under their own terms and privacy policies.
• Anthropic provides the AI model behind the support assistant in Help. When the assistant cannot answer from Savari's own help articles, it sends Anthropic your message, the earlier messages of the same chat, Savari's help content and a short summary of your own account: whether you use Savari as a customer or a driver; the trip you opened Help from and your recent trips and deliveries, with their service, date, status, fare, payment, cashback or commission and any cancellation; your wallet balances and your recent top-ups and withdrawals; for drivers, the state of your documents, vehicle, ride modes, courier role and driving schedule and whether you can work; any suspension of your account or warning that it is at risk; and your recent support tickets. When a chat becomes a ticket, the chat may also be sent to Anthropic to write a short English summary for Savari's team. Numbers that look like phone or CNIC numbers are removed from your messages first, and Savari does not add your name, your phone number or details about other people. Anthropic handles this under its commercial terms and privacy policy, available at https://www.anthropic.com/legal/privacy, keeps it only for a limited time and does not use it to train its models.

The AI support assistant:

• The assistant answers from Savari's own help articles where it can, and asks the AI model only when no article fits. If it stops using the AI model in a chat, you see the matching help articles and the option to create a ticket.
• The assistant is a computer program, not a person. It cannot decide anything about refunds, payments, fares, withdrawals or your account; only people on Savari's team can.
• You can reach a person at any time: create a ticket from the chat or from Help. If you say that an answer did not solve your problem, the app creates the ticket for you. Savari's team reads the ticket together with the chat and replies in the app, and you can follow it under My tickets.
• If your message mentions danger, an accident, harassment or a threat, it is not sent to the AI model. The assistant shows you how to use SOS and sends your message to Savari's team as an urgent ticket.
• Tickets you create without the assistant are never sent to the AI model.

Savari does not sell your information, does not rent it out and does not give it to advertisers.

Apart from the people you travel with and the companies listed above, Savari passes information on only in these cases:

• when the law requires it, for example when a court, the police or another authority with legal power makes a valid request, including about an account that was deleted within the past year; Savari checks each request and gives only what it must;
• when it is needed to protect someone's life or safety, for example to help the emergency services after an emergency alert;
• when it is needed to establish, exercise or defend legal rights, including in a dispute between users;
• if Savari's business, or part of it, is sold or handed over to another organisation, in which case the information needed to carry on the service moves with it and the new operator must keep protecting it as this policy describes;
• when you ask Savari to share it or agree to it;
• in a form that no longer identifies anyone, such as the total number of trips in a city.

Savari's servers and the files you upload are held on Google Cloud in its Mumbai region, and Savari's database is hosted by Supabase in its Mumbai region. Both are in India, so your information is stored outside Pakistan.

Google may handle map and translation requests and the technical information from ML Kit, and Google and Apple may handle push alerts, in other countries where they run their services.

The app also keeps some information on your phone itself, such as your sign-in, your settings and screens you loaded recently, so that it opens quickly. If you remove the app and install it again, it clears what it had saved there and asks you to sign in again.

Savari works with providers that have established security practices, and gives its own team access to information only where their work needs it.

Anthropic handles support assistant requests in the United States.

Savari keeps information only while it has a reason to. These periods apply:

• Your account and profile: while your account is open. When you delete your account, your profile is removed at once; section 17 explains what is removed and what is kept.
• An unfinished driver registration: if it is never submitted and nothing in it changes for 30 days, Savari deletes all of it automatically, including the vehicle details and photos, the ride mode requests and the uploaded documents with their files. Submitting the registration stops this clock.
• Uploads that are never used: a photo or document that is uploaded but never becomes part of a profile, a vehicle or a registration is deleted automatically 30 days after the upload.
• Sign-in codes: each code works only for a short time.
• Offers: offers in City rides and Savari Parcel are held only while the request is open and disappear once it ends. InterCity offers are kept with the journey they belong to, for the same period as trip records.
• Driver position: the latest position is kept, and each new one replaces the one before. Location information from trips that is kept without names: as long as Savari needs it to improve maps and arrival times.
• Trips, deliveries and InterCity bookings, with their fares, payments, wallet movements, commission, cashback and payouts: while your account is open and, after you delete it, as long as Savari needs them to keep accurate accounts, to meet tax and other legal duties and to deal with complaints and claims. After the deletion they no longer carry your name, phone number or bank details and are linked only to the anonymous record of the former account.
• Messages, call records, ratings, reviews, cancellation reasons and problem reports: with the trip or delivery they belong to, for the same period.
• Emergency alerts and safety reports: as long as they may be needed to look into what happened, to protect the people involved or to deal with a claim.
• Driver and courier documents, vehicle records, the details read from them, the results of the automatic checks and review decisions: while your account is open, so that Savari can show that each driver and courier was checked. When you delete your account, your document photos, vehicle photos, CNIC and licence numbers and number plates are removed from the service and kept only inside the sealed safety record.
• The sealed safety record of a deleted account: one year (365 days) from the day of the deletion. Savari then destroys it automatically, together with the document and vehicle photos it holds.
• The anonymous record of a deleted account: it holds only the former account number, the roles the account had, the date it was deleted and the number of trips that were anonymised, and it is kept so that the trip and money records linked to it stay correct.
• Technical logs on Savari's servers: for a limited time, only to keep the service running and secure.
• Device and sign-in records (sessions): for a limited time after a session ends, then deleted automatically. Deleting your account ends all of its sessions, and their records are then deleted in the same way.
• Payment screenshots of bank transfer top-ups: with the top-up they belong to while your account is open, so that Savari can answer questions about it. When you delete your account, they are deleted.
• Support assistant chats: while your account is open. When you delete your account, they are deleted.
• Support tickets and their replies: while your account is open, so that Savari can follow up on them. When you delete your account, the messages in your tickets are deleted, and only the reference, category, status and dates of each ticket are kept, without any text.
• Trip share links: a record of each link, with the trip it belongs to and when it was created, stopped or expired, is kept with the trip record, for the same period.

Hiding a trip from your trip history removes it from your list only; the record itself is kept as described above.

When Savari no longer needs information for any of these reasons, it deletes it or removes the details that identify you.

Savari protects your information in these ways:

• Signing in needs a one-time code, and each code works only for a short time.
• After you sign in, the app keeps your sign-in protected on your phone, and logging out removes it from that phone. Your account can be signed in on only one phone at a time: signing in on another phone signs the first one out at once.
• Apart from a few public pages such as these legal documents, every part of the service needs you to be signed in, and your account can open only its own trips, wallets and documents.
• Photos of identity documents, licences, selfies, vehicles and registration cards, and payment screenshots, are protected, and Savari shows them only to people who are allowed to see them. Profile photos are not protected in this way, because they are meant to be shown to the people you travel with.
• Savari's staff portal can be used only by authorised members of Savari's team.
• Savari protects information as it moves between its servers and its database.
• Only authorised people can manage Savari's servers, and the servers are protected against unauthorised access.
• Unused uploads, abandoned driver registrations and, after one year, the sealed safety records of deleted accounts are destroyed automatically, as section 13 explains, so that less information is left stored.
• The sealed safety record of a deleted account is hidden from normal use, and only authorised members of Savari's team can open it, when there is a specific reason to.

No system can be made completely secure, so Savari cannot promise that your information will never be reached without permission. If Savari learns of a security problem that puts your information at risk, it will act to contain it and will tell the people affected when they need to take steps to protect themselves or when the law requires it.

You can help too: keep your phone locked, never share a sign-in code with anyone, and tell Savari through the Support section of the Savari app straight away if your phone is lost or you think someone else has used your account.

Savari is not meant for children. To open a Savari account you must be old enough, under the law that applies to you, to accept a binding agreement; in Pakistan this generally means 18 or older. Drivers and couriers must also hold a valid driving licence.

Savari does not knowingly collect information from children. If you think a child is using a Savari account or has given Savari their details, tell Savari through the Support section of the Savari app. Savari will close the account and delete the information, except anything Savari must keep by law.

Subject to the law that applies to you, you can:

• See and correct it. In the app you can see your name, see and change your photo, email address, other personal details, settings and trusted contacts, move your account to a new phone number after confirming it with a code, and see your trips, wallet history and sessions. For anything you cannot change yourself, such as your name, ask Savari.
• Get a copy. You can ask for a copy of the personal information Savari holds about you.
• Have it deleted. You can delete your account and your information yourself, at any time, under Settings in the Savari app, as section 17 explains.
• Object or ask for limits. You can object to Savari using your information on the ground of legitimate interests, or ask Savari to limit how it uses it. Savari will stop unless it has a strong reason to continue, such as safety or a legal duty.
• Take back permission. You can turn off location, camera, photos, microphone and notifications for Savari in your phone's settings, and switch off promotional notifications under Notifications in the app's Settings. Some features do not work without these permissions; for example, a driver cannot go online without location.
• Complain. If you are unhappy with how Savari handles your information, tell Savari first so that it can put things right. You may also be able to take the matter to a public authority where the law gives you that right.

Apart from deleting your account, which you do yourself in the app, you can use any of these rights by contacting Savari through the Support section of the Savari app. Savari may ask for details that show the account is yours before it acts on a request. Savari will answer as soon as it reasonably can and will not charge you for a reasonable request.

Removing the Savari app from your phone does not delete your account.

You can delete your account yourself at any time: open Settings in the Savari app and tap Delete my account. This works the same way for every account, whether you use Savari as a passenger, a sender, a driver, a courier or all of these. Before anything is deleted, the app explains what the deletion means and asks you to confirm it.

Deleting your account is complete and permanent. It cannot be undone, and nobody at Savari can bring the account back.

The app refuses the deletion, and names each reason, while any of these is still open:

• a City ride in progress, or a search for a driver that is still running;
• a Savari Parcel delivery in progress, or a search for a courier that is still running;
• an InterCity request that is still open, or an InterCity booking that is not finished;
• a payout you asked for that is still being processed;
• a bank transfer top-up that is still waiting for review;
• an emergency alert on your account or on one of your trips that Savari has not yet closed;
• a problem reported on one of your deliveries that Savari has not yet resolved;
• a suspension of your account that is still in force.

If money is left in any of your wallets, the app shows each balance and asks you to withdraw what you can first, with a shortcut to the wallet. Some balances cannot be withdrawn, so money left in a wallet does not stop the deletion. If you delete the account anyway, that money is lost for good and is not paid out later.

The deletion takes effect at once:

• you are signed out on every phone, and the account can never be signed in to again;
• if you are online as a driver or courier, you are taken offline and stop receiving requests;
• your profile disappears from the app: your name, gender, profile photo, email address, other personal details, trusted contacts, recent places, notifications and payment screenshots are removed;
• any unfinished driver registration, and any request of yours still waiting for review, such as a ride mode, courier role or InterCity application, is removed;
• the people who shared a trip or delivery with you see "Deleted user" in place of your name;
• your support assistant chats are deleted, and the messages in your support tickets are removed; each ticket keeps only its reference, category, status and dates;
• your phone number is freed. Signing up with it again creates a brand-new account with no link to the old one, its trips, ratings or money, apart from the check on suspended accounts described below.

Trips, deliveries and InterCity bookings also belong to the other people on them and to Savari's accounts, so they are not erased. They stay, with their fares, payments, wallet movements, commission, ratings and problem reports, but without your name, phone number, bank details or other details: they are linked only to an anonymous record of the former account. This keeps the history of the people you travelled with, and Savari's financial records, correct. Chat messages you sent are the exception: they are removed from the trips and deliveries, and kept only in the sealed safety record described below.

For safety incidents, disputes and requests from the police or other authorities, Savari keeps a sealed safety record of the deleted account for one year. It holds your name, phone number, CNIC and licence numbers, the photos of your documents and vehicles, your number plates, your trips with their routes and times, emergency alerts, chat messages, call records, delivery problems and payments, as they stood when you deleted the account.

Nobody sees the sealed record in normal use. Only authorised members of Savari's team can open it, and only when there is a specific reason, for example to look into an incident, settle a dispute or answer a valid request from the police. Savari passes the record on only in the cases section 11 describes.

One year after the deletion, Savari automatically destroys the sealed record and the document and vehicle photos it holds. After that, only the anonymous record remains: the former account number, the roles the account had, the date it was deleted and the number of trips that were anonymised, together with the anonymous trip and money records described above.

If your account was suspended when you deleted it, Savari also uses details kept with the sealed record for one more purpose: to tell its team if, during that year, another account appears to belong to you. Those details, and any such alert, are destroyed together with the sealed record.

An unfinished driver registration needs no request: if it is never submitted and nothing in it changes for 30 days, Savari deletes it automatically, as section 13 describes.

Savari will revise this policy when the service or the law changes. The newest version is always available in the Legal section of the Savari app, with the date it takes effect.

If a revision makes a real difference to how Savari uses your information, Savari will tell you in the app before it takes effect. Where the law requires your agreement to a revision, Savari will ask for it.

For any question, request or complaint about your privacy or this policy, contact Savari through the Support section of the Savari app: open the menu, tap Help and use Get help from Savari or one of the other support options listed in Help. You can also email Savari at support@getsavari.com. A support ticket created from Help works too, and its replies appear in the app.

Savari's postal address is Flat 2, First Floor, Plaza 5, Sector A, Bahria Enclave, Islamabad, Pakistan.

Say that your message is about privacy and which request you are making, so that it reaches the right people quickly.