Privacy Policy

1. Who we are

This Privacy Policy is issued by Pak Flexible Track Pvt Ltd ("Pak Flexible Track", "we", "us"), a vehicle tracking company with its head office at Office 16, 3rd Floor, Al-Jannat Arcade, G-11 Markaz, Islamabad, Pakistan.

We publish the Pak Flexible Track Pro app for Android on Google Play (package name com.pakflexibletrack.app). We are responsible for the personal information described in this policy.

2. What this policy covers

This policy explains how we collect, use, share, keep and protect information when you:

• use the Pak Flexible Track Pro app (the "App");
• use our vehicle tracking service, including the tracker installed in your vehicle and our web tracking portal; and
• contact our sales, installation, accounts, support or control-room teams.

It does not cover other companies' apps and services that the App opens or uses, such as WhatsApp, Google Maps or your phone's speech service. Those have their own privacy policies.

3. Information we collect

3.1 Information we collect when you take our service

• Contact details: name, mobile number, email address (if you give one), city and address.
• Identity and ownership documents: your CNIC and the vehicle's registration documents, to confirm that you own or are authorised to use the vehicle.
• Photographs taken at installation, such as of the vehicle, its number plate, the installed device and the documents above, as a record of the installation and of ownership.
• Vehicle details: registration number, make, model, colour and type.
• Installation and device records: installation date and place, package, tracker serial number and the tracker's SIM number.
• Account details: the App username and password that we create for you at installation. You cannot sign up inside the App.
• Billing records: package, invoices, renewal dates and payment status, including payment screenshots you send us.
• Communications: calls and messages with our teams, complaints, and the notes we make to resolve them.

3.2 Information from the tracker in your vehicle

The tracker sends data to our tracking server continuously while it has power, whether or not the App is open:

• Precise vehicle location (GPS), speed, direction, date and time;
• Trips and events: route history, ignition on and off, parking and idle time, distance, geofence entries and exits, over-speed and other alerts;
• Vehicle and device readings: battery and power status, signal, tamper and power-cut alerts, and readings used for fuel estimates.

Because this data can show where people travel, we treat it as sensitive (see sections 8 and 12).

3.3 Information the App uses

• Sign-in: your username and password are sent over an encrypted HTTPS connection to our tracking server only to sign you in, or to change your password if you ask the App to. The App keeps a session cookie so you stay signed in. It does not store your password on the phone.
• Things you do in the App that are sent to our server: engine lock or unlock commands you confirm (and their history), geofences you create, change or delete, and alerts you mark as read.
• Microphone (Ask PFT): only if you tap the mic in Ask PFT. Your phone's speech recognition service (for example Google's, on most Android phones) turns your speech into text under that provider's own terms. The App receives only the text, works out the answer on your phone, and does not record, store or upload audio. You can type instead.
• Payment screenshots: on the Payments screen you can choose a picture using Android's photo picker, so the App sees only the picture you pick. The App passes it to WhatsApp on your phone for you to send to our Accounts team. The App does not upload it anywhere itself.
• Fingerprint, face or phone PIN: before an engine lock or unlock, Android checks your identity and tells the App only whether the check passed. No fingerprint, face or PIN data reaches the App or leaves your phone.
• Notifications and voice alerts: with your permission the App shows alerts about your vehicles and can read them aloud using your phone's text-to-speech engine.
• Settings on your phone: language, map type, voice and alert choices, fuel price and average, and refuels you enter are saved only on your phone.

The App does not collect your phone's location, contacts, messages, call logs or files, and it does not use an advertising ID or any analytics or advertising tools.

3.4 Engine lock and audio devices

Where your tracker supports it, you can lock or unlock the engine from the App after a fingerprint, face or PIN check and a final confirmation. Our control room acts on an engine lock request by phone only after verifying that it comes from the registered owner or an authorised person. We keep a record of every command, who requested it and when.

Some customers ask us to fit a separate audio device. It is not connected to the App: the customer listens by calling the device directly. It may be used only by the customer who ordered it, and the customer is responsible for informing the people in the vehicle as the law requires (see section 8).

4. App permissions

The App does not ask for location or photo library permission. You can change any permission at any time in your phone's settings, and the rest of the App keeps working.

5. How we use information

We use personal information only to:

• install, activate and maintain your tracker and manage your account;
• show your vehicles' live location, history, reports, fuel estimates and alerts in the App and portal;
• carry out engine commands you request;
• run our 24/7 control room, including helping you, and the police when you ask, if your vehicle is stolen;
• verify identity and ownership before acting on sensitive requests such as engine lock, account changes or ownership transfer;
• handle renewals, payments and accounts;
• answer your calls, messages and complaints, and send service messages such as renewal reminders;
• keep the App, trackers and server secure, prevent fraud and misuse, and fix problems;
• meet our legal obligations and respond to lawful requests from authorities.

We do not sell personal information or use it for advertising. We will only send you promotional messages if you agree, and you can stop them at any time.

6. Why we are allowed to use it

We use your information because it is needed to provide the service you have asked for under your agreement with us; because you have given consent (for example to optional App permissions); because we have a legitimate interest in running a safe service and preventing fraud; or because the law requires it. Where we rely on consent, you can withdraw it at any time.

7. Who we share it with

• SJ Solutionz, our tracking platform provider, which provides our tracking software and keeps a backup copy of our tracking and account data, used only to run and restore our service. It acts only on our instructions and may not use the data for any other purpose.
• Map providers. The App draws maps with Google Maps by default, or OpenStreetMap with Esri satellite images if you choose them in Settings. Like any website, these providers receive your phone's IP address and the map area being loaded, and Google's map software also collects usage and diagnostic information as described in Google's privacy policy.
• Your phone's speech service, only if you use the mic in Ask PFT (see section 3.3).
• WhatsApp, only when you choose to send us a payment screenshot or message.
• Mobile network operators that provide the SIM connection in the tracker.
• People you authorise, such as family members or fleet managers you ask us to give access to, and your organisation if the vehicle is on a company account.
• Police and other authorities, when you ask us to help recover a stolen vehicle, or when we are required to by law, court order or a lawful request of a competent authority in Pakistan.
• A buyer or successor of our business, if it is reorganised, merged or sold, subject to this policy.

The App contains Google Firebase Cloud Messaging code for future push notifications. It is switched off in the current version, and no push token is created or sent. If we switch it on, we will update this policy first.

8. Drivers and other people in the vehicle

A tracker records where the vehicle goes, and therefore where the people in it go. If a vehicle you track is driven by someone else, such as an employee, family member or hired driver, you are responsible for telling them that the vehicle is tracked and, where the law requires it, getting their consent. The same applies to any audio device. Our service must not be used to track or listen to anyone unlawfully or without their knowledge, and we may suspend an account that is misused in this way.

9. How long we keep it

We may keep information longer if it is needed for an open theft case, complaint, legal claim or investigation, or if the law requires it. Deleted data may remain in secure backups for a limited time until they are overwritten.

10. Deleting your account and data

You can ask us to delete your account and the personal data linked to it at any time, without needing the App installed:

• on our website: flexibletrack.pk/delete-account; or
• by email or WhatsApp using the details in section 16.

We will confirm your identity on your registered mobile number, then delete your account and associated data within 30 days, except for the records we must keep under section 9. Deleting your account stops tracking in the App and portal. It does not by itself remove the tracker from your vehicle; tell us if you also want that and our team will arrange it.

11. Your choices and rights

You can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct information that is wrong or incomplete;
• delete your information, as described in section 10;
• stop promotional messages;
• remove access you have given to someone else.

Contact us using section 16. We will reply within 30 days. We will verify your identity first, to protect your vehicle's location from anyone pretending to be you.

12. How we protect it

• All communication between the App and our tracking server uses encrypted HTTPS connections.
• Each account can see only its own vehicles, and engine commands need your fingerprint, face or PIN and a final confirmation.
• Staff can access customer information only where their job needs it, under confidentiality obligations.
• We check identity before giving out location information or acting on requests by phone.

No system is completely secure. Keep your password private and your phone locked, and tell us straight away if you think someone else has used your account. If a security incident affects your information, we will act promptly to contain it and inform you where appropriate.

13. Where it is stored

Tracking and account data is stored on our own tracking server at our office in G-11 Markaz, Islamabad, Pakistan. A backup copy is held for us by our tracking platform provider, SJ Solutionz (see section 7). Only Pak Flexible Track and SJ Solutionz hold this data. Documents, photographs and invoices are held at our offices in Pakistan. Map and speech providers may process information in other countries. Wherever information is processed, we protect it as described in this policy.

14. Children

The App and our service are for customers aged 18 or over who own or manage vehicles. They are not directed at children, and we do not knowingly collect information from children. If you believe a child has given us personal information, contact us and we will delete it.

15. Changes to this policy

We will update this page, and its "Last updated" date, before any change in how the App uses information reaches the App. Where a change is significant we will also tell you in the App or by message.

16. Contact us