1. Who we are
This Privacy Policy applies to AL-MUHAFIZ TRACKERS (PRIVATE) LIMITED ("AL-MUHAFIZ", "we", "us", or "Service Provider"), our website, customer portals, Android mobile application (including the Google Play listing for com.almuhafiz.tracker), and Vehicle Tracking / Fleet Management services provided in Pakistan.
Contact: [email protected] | +92 311 1133170
Address: 16 Gulbrig Colony, Kasur 55050, Pakistan
2. Scope and regulatory alignment
This Policy is designed to align with:
- Pakistan Telecommunication Authority (PTA) licence conditions for Vehicle Tracking Services
- PTA Code of Commercial Practice for VTS / ISP class services
- Telecom Consumer Protection Regulations, 2009 (as amended)
- Applicable Pakistani laws on personal data, electronic communications, and consumer protection
- Google Play Developer Program Policies, including User Data, Permissions, and Location policies
3. Information we collect
3.1 Account and identity information
- Name, CNIC (where required for service activation / KYC), phone number, email, address
- Company name, NTN, and authorised representative details (for business / fleet accounts)
- Login credentials for web portal and mobile app
3.2 Vehicle and service information
- Vehicle registration number, make/model, chassis/engine details (as provided)
- Device identifiers (IMEI / tracker serial), SIM identifiers used for tracking connectivity
- Service package, installation records, support tickets, and billing / payment references
- Online payment metadata related to Rapidgateway transactions (invoice ID, amount, status, gateway transaction reference) — not full card numbers
3.3 Location and telemetry (core service data)
To provide vehicle tracking, our GPS devices and related systems collect precise location data, speed, ignition status, route history, geofence events, and similar telemetry. Where you use the mobile app with location permission enabled, the app may also access device location to show maps, nearby vehicles, or navigation context.
- Foreground location: while you use the app
- Background / continuous location (device-side): tracking devices transmit location while installed and powered, which is essential to the service
- App background location: only if you grant the relevant Android permission and only for features that require it (for example live fleet monitoring while the app is minimised). You may deny or revoke this permission in Android settings; core vehicle-device tracking continues independently of phone GPS permission
3.4 Communications and consent records
- SMS, voice call / robocall, WhatsApp, email, and push-notification preferences
- Records of your opt-in / opt-out for marketing and for critical / security alerts
- Complaint numbers, correspondence, and dispute history
3.5 Technical and app data
- Device model, OS version, app version, IP address, crash logs, and diagnostics
- Cookies / similar technologies on our website for security and basic analytics
4. Why we use your information (purposes)
- Install, activate, and operate Vehicle Tracking / Fleet Management services
- Show live maps, history, reports, geofences, and authorised engine-control workflows
- Send service, security, and billing notices you have consented to receive
- Provide customer support, complaint handling, and warranty service
- Process online payments via Rapidgateway, verify settlements (webhook/API), mark invoices paid, credit wallets where applicable, and issue receipts
- Prevent fraud, misuse, spam, and unauthorised access
- Comply with PTA, law-enforcement, court, and other legal obligations
- Improve reliability, safety, and quality of service (QoS)
We do not sell personal information. We do not use tracking location data for unrelated advertising.
5. Communications consent (SMS, calls, robocalls, alerts)
5.1 Categories of communications
- Critical / security alerts: theft/snatch alerts, SOS, tamper / power-cut, geofence breach, overspeed (where enabled), immobiliser events, and similar safety notices via SMS, automated voice / robocall, push notification, WhatsApp, and/or email
- Service / account notices: installation appointments, outage notices, billing reminders, suspension/restoration notices (as required under PTA TCP regulations)
- Marketing: offers, product updates, and promotions — only with separate opt-in
5.2 How we obtain consent
- Written service agreement / order form tick-boxes or signed consent clauses
- In-app or portal consent screens with clear purpose descriptions
- Documented verbal consent through our helpline where permitted, followed by confirmation SMS/email
For automated voice calls / robocalls used for critical alerts, we obtain express prior consent describing: purpose, channels, approximate frequency in emergency situations, and how to withdraw or limit consent. Consent is recorded with timestamp, channel, and account identity.
5.3 Withdrawing or limiting consent
- Marketing: reply STOP to SMS, disable in app settings, or email [email protected]
- Non-critical alerts: manage in app / portal notification settings
- Critical security alerts: you may request deactivation, but we will warn you that turning them off may reduce your ability to receive time-sensitive theft or safety notices. Some mandatory service/legal notices (for example suspension notices required by PTA rules) may still be sent
6. Mobile app permissions (Google Play transparency)
Depending on features you use, the Android app may request:
- Location — to display maps and vehicle context (precise location; background only if you grant it for continuous monitoring features)
- Notifications — for push alerts
- Network / internet — to sync live data with our servers
- Phone / SMS-related permissions — only if a specific feature requires them and only after disclosure and consent; not used for unrelated harvesting of contacts
Permissions are requested in context, with in-app disclosure before sensitive access. You can revoke permissions in Android Settings; some features may stop working if required permission is denied.
7. Sharing of information
We may share information only with:
- Authorised employees and technicians for installation, support, and monitoring
- Network / SIM / hosting / map / messaging providers acting as processors under confidentiality obligations
- Rapidgateway (our official online payment gateway) and its acquiring / payment-channel partners, solely to process invoices, subscriptions, renewals, installations, and related fees; verify payments via API/webhooks; prevent fraud; and complete refunds to the original method where approved. We do not store card numbers on AL-MUHAFIZ systems — sensitive card data is handled by Rapidgateway under SSL-encrypted processing
- Law-enforcement agencies, courts, PTA, SBP-regulated institutions (where legally required), or other authorities where required by applicable law or licence conditions
- Financing / leasing institutions — only where you (or the owner) have authorised such access under the service agreement
- Professional advisors under confidentiality (legal, audit)
Consistent with PTA confidentiality requirements, we do not disclose consumer use of the network or service to third parties except as published in directories, agreed by you, or required by law.
8. Data retention
- Account and billing records: retained as required for legal, tax, and regulatory purposes
- Location / trip history: retained according to your package and operational needs, then deleted or anonymised
- Consent and complaint records: retained to demonstrate compliance
- App diagnostics: retained for a limited period for security and quality improvement
9. Security
We use administrative, technical, and physical safeguards appropriate to vehicle-tracking services, including access controls, encrypted transport where applicable, and staff confidentiality obligations. No method of transmission or storage is 100% secure; please protect your login credentials and notify us immediately of suspected misuse.
10. Your rights and choices
- Access or correct account information
- Request deletion of account data where legally permitted (service history required by law may be retained)
- Export or receive copies of certain account data upon verified request
- Manage communication preferences and app permissions
- Lodge complaints with us first, then with PTA Consumer Protection Directorate if unresolved
To exercise rights, email [email protected] from your registered email or provide account verification details. We aim to respond within PTA complaint timelines (acknowledgement with a complaint reference and resolution as soon as practicable, generally within three working days for first-level redressal).
11. Children
Our services are intended for vehicle owners and authorised adult users. We do not knowingly collect personal information from children under 13 for Google Play purposes, or under the minimum age required by Pakistani law for contracting. School-bus solutions may process route/vehicle data for institutional customers; institutions remain responsible for any parental notices required under their own policies.
12. International processing
Primary operations are in Pakistan. If any processing or backup occurs on infrastructure outside Pakistan, we apply contractual and technical protections consistent with this Policy and applicable law.
13. Changes to this Policy
We may update this Policy to reflect legal, PTA, or Google Play requirements. Material changes will be posted on this page with an updated date and, where required, notified through email/SMS/in-app notice.
14. PTA complaint escalation
If you are not satisfied with our response, you may contact the Consumer Protection Directorate, Pakistan Telecommunication Authority, or email [email protected] with your details, our company name, nature of complaint, and prior correspondence.
Last updated: 24 July 2026
Questions? Email [email protected] or call +92 311 1133170.