Privacy Policy

YauzaiSafar is owned and operated by Hizli System (hizlisystem.com). YauzaiSafar and Hizli System ("YauzaiSafar", "we", "our", or "us") operate a technology platform that allows users to create ride listings, search for available rides, book seats, and coordinate travel arrangements with other users. This Privacy Policy explains what information we collect when you use the YauzaiSafar application, why we collect it, how it is used, and what control you have over it.

This policy applies to everyone who creates a YauzaiSafar account, publishes a ride, books a seat, uses live trip tracking, or communicates with other users through the app. By using YauzaiSafar, you acknowledge that your information is handled as described here.

It also covers yauzaisafar.com, this website. Most of the site is ordinary marketing pages that collect nothing, but two things there do involve your information: confirming an email verification link, and completing a password reset. Both are described in Section 15. Accounts themselves are created in the app, not on this site.

We have written this policy to be readable, not just legally complete. If you have a question it does not answer, contact us at info@yauzaisafar.com.

Specifically, YauzaiSafar:

• Does not own or operate vehicles.
• Does not employ drivers or any user who creates a ride listing.
• Does not provide, guarantee, or arrange transportation directly.
• Does not act as an agent for any user.
• Does not control how users behave, communicate, or complete their travel.

All travel arrangements are made directly between users. YauzaiSafar provides the tools to discover rides, manage bookings, and coordinate — the decisions and actions that follow are between the users involved.

Users on YauzaiSafar may act as ride creators (offering available seats) or as passengers (booking seats). Both are referred to as "Users" throughout this policy.

Listings from other sources. So that a ride is almost always available to you, YauzaiSafar also shows ride offers and seat requests gathered from other sources where people share travel for a route, across the areas we serve. These are marked in the app as coming from another source. The people who posted them are not YauzaiSafar Users and have not been verified by us; any arrangement you make with them is between you and them.

We collect only the information that is necessary to operate the platform. We do not collect browsing history, purchase history, social media profiles, or device advertising identifiers.

Every piece of information we collect has a specific purpose tied to running the platform. We do not use your information for advertising, profiling, or selling to third parties.

Here is exactly when your information becomes visible to other users:

• Ride listings: When you publish a ride, your name and ride details (route, date, time, vehicle, available seats) are visible to users searching for rides. Your contact numbers are not shown at this stage.
• After a booking is confirmed: The ride creator and the booked passenger can see each other's name, mobile number, and WhatsApp number to coordinate the journey. This is visible only to participants of that specific booking.
• WhatsApp contact: When you tap "Contact," the app uses the recipient's WhatsApp number to open WhatsApp on your device. This is user-initiated — we do not transmit the number to WhatsApp independently.
• Live location: During an active trip, your real-time GPS coordinates are shared only with the ride creator and confirmed passengers on that same trip, for pickup and drop-off coordination. No other users and no one outside the app can see your location. This sharing stops when the trip ends or when location sharing is turned off.
• One-time location for auto-detect: When creating a ride or passenger request, we may request a single location reading to auto-detect your country and currency for the form. This reading is not shared with other users and is not stored as a location history.
• Push notifications: Your device push token is shared with Expo's push notification service and, on Android, Google Firebase Cloud Messaging, solely to deliver booking-related alerts to your device.
• Map tiles: When you view a trip map, map tile images are loaded from OpenStreetMap and Carto. These providers may receive your IP address and the map area being viewed, as part of standard tile-serving.
• Google Sign-In: If you sign in with Google, the sign-in itself happens with Google, which will know that you signed in to YauzaiSafar. We receive your name, email, and Google account identifier in return. We send Google nothing about your rides, bookings, location, or activity in the app.
• Identity verification documents: Your ID photo is visible only to the YauzaiSafar team member reviewing it. It is never shared with other users, never shown on your profile, and never given to any third party except where legally compelled.
• Listings from other sources: These are visible to signed-in users, together with the contact number that was published with the original listing, so users can get in touch directly. They are not shown to anyone who is not signed in.
• Legal requirements: We may disclose information if required by law or court order, but will not go beyond what is legally required.

YauzaiSafar uses a small number of third-party services to operate. We have described each one clearly below.

Real-time location is the most sensitive data YauzaiSafar handles. Here is a precise account of how it works.

• When location is collected: GPS coordinates (latitude, longitude, and heading) are collected in two scenarios only: (1) during an active trip — after the journey has started and before it is marked as complete or cancelled — so the other trip participant can see live location for pickup and drop-off coordination; and (2) as a single, one-time reading when you create a ride or passenger request, used solely to auto-detect your country and currency for the form. The app does not access your location outside of these two scenarios.
• One-time location for auto-detect: This reading is used only to pre-fill your country and currency on the ride or passenger request form. It is not stored as a location history and is not shared with other users.
• Who can see your location: Only the ride creator and confirmed passengers on that specific trip. No other users, and no one outside the app, can see your location while it is live.
• When collection stops: Live location access ends automatically when the trip is marked complete or cancelled, or when location sharing is turned off.
• How long it is stored: Trip location records are not retained permanently. Data is cleared at or shortly after trip completion. We do not build or archive a history of your movements.
• What we do not do: We do not track your location in the background, outside of active trips, or for any purpose other than live trip coordination.

After a booking is confirmed, the ride creator and passenger need a way to coordinate pickup details. YauzaiSafar makes contact information available between participants for this purpose.

What is shared between booking participants:

• Your name
• Your mobile number (with country code)
• Your WhatsApp number (which may be the same as your mobile number)

This information is only visible to users who are part of the same confirmed booking. It is not visible to users browsing listings, to other ride creators, or to anyone not connected to that specific ride.

How the WhatsApp feature works: When a participant taps "Contact," YauzaiSafar generates a wa.me deep link using the recipient's WhatsApp number and opens WhatsApp on your device. This is an action you initiate. The app does not send messages on your behalf, does not store the conversation, and does not pass your number to Meta independently. Once WhatsApp is open, the conversation is between you and the other user.

Your choice: You provide your WhatsApp number when registering. You can use the same number as your mobile number, or a different one. If you have concerns about contact sharing, email support@yauzaisafar.com.

Because YauzaiSafar connects users directly, how you use the platform and treat other users matters. By using YauzaiSafar, you agree to:

• Provide accurate information. The name, contact details, and ride information you enter must be truthful. Misleading other users through false information is prohibited.
• Use contact information responsibly. Phone numbers and WhatsApp details shared through the platform are provided for the purpose of coordinating travel. Using this information to harass, spam, or contact users outside the context of a specific booking is not permitted.
• Respect other users. Abusive, threatening, or discriminatory communication through the platform is prohibited.
• Follow applicable laws. You are responsible for complying with the laws of your country or region when using the platform and when travelling.
• Use the platform for its intended purpose. YauzaiSafar is for coordinating shared travel. Using the platform to collect user information for any other purpose is strictly prohibited.

We use reasonable and industry-standard practices to protect your information. Here is what is specifically in place:

• Password security: Passwords are managed by Supabase Authentication and hashed using strong cryptographic algorithms. YauzaiSafar never stores or accesses your password in readable form.
• Session management: User sessions use authenticated tokens that are scoped and expire, limiting exposure if a session is compromised.
• Database access controls: Your data is stored in a Supabase-managed database, accessible only through authenticated API requests made by the YauzaiSafar application.
• Contact information protection: Mobile and WhatsApp numbers are not exposed to arbitrary users — they are only available to participants of a confirmed booking, and only after the booking is confirmed.
• Location data: Live location is transmitted securely and made available only to trip participants in real time.

We keep your information only as long as it is needed to provide the service, meet legal obligations, resolve disputes, or maintain security.

You have the following rights over your information:

You can permanently delete your YauzaiSafar account and personal data at any time.

In-app self-service deletion. YauzaiSafar provides in-app self-service account deletion:

1. Open the app and go to your Profile screen.
2. Tap "Delete Account."
3. Confirm the deletion. Your account is deleted immediately and permanently.

Confirming deletion:

• Deletes your profile and login credentials, including the link to your Google account if you signed in with Google.
• Deletes your identity verification record and the ID document photo you submitted.
• Deletes your push notification token, so notifications stop immediately.
• Deletes all ride posts and passenger requests you created.
• Deletes all bookings you made as a passenger, and all bookings on rides you posted as a driver.
• Deletes all offers you sent or received.
• Deletes any live trip-coordination data associated with you, including active trip location sharing and trip participant records.

YauzaiSafar is a ride-sharing and travel coordination platform intended for adults. We do not knowingly collect personal information from anyone under the age of 18. The platform is not designed for or marketed to minors.

If you believe a user under 18 has created an account on YauzaiSafar, please contact us at info@yauzaisafar.com. We will investigate and take appropriate action, including removing the account and associated data if confirmed.

The YauzaiSafar mobile app does not use cookies at all. It stores your login session on your own device, using the operating system's secure storage, so that you are not asked to sign in every time you open it. That session is removed when you log out or delete the app.

This website stores only the following, and only in your own browser:

• Your theme preference. When you switch this site between light and dark mode, that single choice is saved in your browser's local storage so the site remembers it next visit. It contains no personal information and is never sent to us.
• A short-lived sign-in token, on the password reset page only. When you open a password reset link from your email, the reset token in that link is held in memory just long enough to set your new password, and is discarded as soon as the page finishes. It is not persisted between visits.

Clearing your browser data removes both. The site continues to work normally without them — you will simply see the default theme.

YauzaiSafar is operated from Pakistan, but the infrastructure it runs on is not necessarily located there. Your information is stored and processed by Supabase, which runs on cloud providers such as Amazon Web Services, and may be held on servers outside your own country. Push notifications are routed through Expo and, on Android, Google Firebase Cloud Messaging, which operate globally.

This means that by using YauzaiSafar you are asking us to process your information in the way described in this policy, wherever the underlying servers happen to be. Wherever your data is held:

• It is protected by the same measures described in Section 10.
• It is handled only for the purposes described in Section 4, and is never sold or used for advertising.
• Our processors act only on our instructions, under their own contractual and security obligations.
• Your rights in Section 12 — including deletion — apply to your data regardless of the country it is stored in.

If you would like to know where a specific category of your data is currently held, write to info@yauzaisafar.com and we will tell you.

We may update this Privacy Policy as the platform evolves or as requirements change. When we do:

• We will update the "Last updated" date at the top of this document.
• For significant changes, we will notify registered users via email or an in-app notice before the change takes effect, giving you the opportunity to review it.

Continued use of YauzaiSafar after an update constitutes acknowledgement of the revised policy. If you disagree with material changes, you can stop using the app and request account deletion before they take effect.

For questions about this policy, data rights requests, or privacy concerns, use the contacts below. We aim to respond to all privacy-related requests within a reasonable timeframe. For data access, correction, or deletion requests, include your registered email address so we can verify your identity before taking action.