AL-MUHAFIZ TRACKERS

1. Who we are

This Privacy Policy applies to AL-MUHAFIZ TRACKERS (PRIVATE) LIMITED ("AL-MUHAFIZ", "we", "us", or "Service Provider"), our website, customer portals, Android mobile application (including the Google Play listing for com.almuhafiz.tracker), and Vehicle Tracking / Fleet Management services provided in Pakistan.

Contact: hello@almtrace.com | +92 311 1133170
Address: 16 Gulbrig Colony, Kasur 55050, Pakistan

2. Scope and regulatory alignment

This Policy is designed to align with:

Pakistan Telecommunication Authority (PTA) licence conditions for Vehicle Tracking Services
PTA Code of Commercial Practice for VTS / ISP class services
Telecom Consumer Protection Regulations, 2009 (as amended)
Applicable Pakistani laws on personal data, electronic communications, and consumer protection
Google Play Developer Program Policies, including User Data, Permissions, and Location policies

3. Information we collect

3.1 Account and identity information

Name, CNIC (where required for service activation / KYC), phone number, email, address
Company name, NTN, and authorised representative details (for business / fleet accounts)
Login credentials for web portal and mobile app

3.2 Vehicle and service information

Vehicle registration number, make/model, chassis/engine details (as provided)
Device identifiers (IMEI / tracker serial), SIM identifiers used for tracking connectivity
Service package, installation records, support tickets, and billing / payment references
Online payment metadata related to Rapidgateway transactions (invoice ID, amount, status, gateway transaction reference) — not full card numbers

3.3 Location and telemetry (core service data)

To provide vehicle tracking, our GPS devices and related systems collect precise location data, speed, ignition status, route history, geofence events, and similar telemetry. Where you use the mobile app with location permission enabled, the app may also access device location to show maps, nearby vehicles, or navigation context.

Foreground location: while you use the app
Background / continuous location (device-side): tracking devices transmit location while installed and powered, which is essential to the service
App background location: only if you grant the relevant Android permission and only for features that require it (for example live fleet monitoring while the app is minimised). You may deny or revoke this permission in Android settings; core vehicle-device tracking continues independently of phone GPS permission

3.4 Communications and consent records

SMS, voice call / robocall, WhatsApp, email, and push-notification preferences
Records of your opt-in / opt-out for marketing and for critical / security alerts
Complaint numbers, correspondence, and dispute history

3.5 Technical and app data

Device model, OS version, app version, IP address, crash logs, and diagnostics
Cookies / similar technologies on our website for security and basic analytics

4. Why we use your information (purposes)

Install, activate, and operate Vehicle Tracking / Fleet Management services
Show live maps, history, reports, geofences, and authorised engine-control workflows
Send service, security, and billing notices you have consented to receive
Provide customer support, complaint handling, and warranty service
Process online payments via Rapidgateway, verify settlements (webhook/API), mark invoices paid, credit wallets where applicable, and issue receipts
Prevent fraud, misuse, spam, and unauthorised access
Comply with PTA, law-enforcement, court, and other legal obligations
Improve reliability, safety, and quality of service (QoS)

We do not sell personal information. We do not use tracking location data for unrelated advertising.

5. Communications consent (SMS, calls, robocalls, alerts)

5.1 Categories of communications

Critical / security alerts: theft/snatch alerts, SOS, tamper / power-cut, geofence breach, overspeed (where enabled), immobiliser events, and similar safety notices via SMS, automated voice / robocall, push notification, WhatsApp, and/or email
Service / account notices: installation appointments, outage notices, billing reminders, suspension/restoration notices (as required under PTA TCP regulations)
Marketing: offers, product updates, and promotions — only with separate opt-in

5.2 How we obtain consent

Written service agreement / order form tick-boxes or signed consent clauses
In-app or portal consent screens with clear purpose descriptions
Documented verbal consent through our helpline where permitted, followed by confirmation SMS/email

For automated voice calls / robocalls used for critical alerts, we obtain express prior consent describing: purpose, channels, approximate frequency in emergency situations, and how to withdraw or limit consent. Consent is recorded with timestamp, channel, and account identity.

5.3 Withdrawing or limiting consent

Marketing: reply STOP to SMS, disable in app settings, or email hello@almtrace.com
Non-critical alerts: manage in app / portal notification settings
Critical security alerts: you may request deactivation, but we will warn you that turning them off may reduce your ability to receive time-sensitive theft or safety notices. Some mandatory service/legal notices (for example suspension notices required by PTA rules) may still be sent

6. Mobile app permissions (Google Play transparency)

Depending on features you use, the Android app may request:

Location — to display maps and vehicle context (precise location; background only if you grant it for continuous monitoring features)
Notifications — for push alerts
Network / internet — to sync live data with our servers
Phone / SMS-related permissions — only if a specific feature requires them and only after disclosure and consent; not used for unrelated harvesting of contacts

Permissions are requested in context, with in-app disclosure before sensitive access. You can revoke permissions in Android Settings; some features may stop working if required permission is denied.

7. Sharing of information

We may share information only with:

Authorised employees and technicians for installation, support, and monitoring
Network / SIM / hosting / map / messaging providers acting as processors under confidentiality obligations
Rapidgateway (our official online payment gateway) and its acquiring / payment-channel partners, solely to process invoices, subscriptions, renewals, installations, and related fees; verify payments via API/webhooks; prevent fraud; and complete refunds to the original method where approved. We do not store card numbers on AL-MUHAFIZ systems — sensitive card data is handled by Rapidgateway under SSL-encrypted processing
Law-enforcement agencies, courts, PTA, SBP-regulated institutions (where legally required), or other authorities where required by applicable law or licence conditions
Financing / leasing institutions — only where you (or the owner) have authorised such access under the service agreement
Professional advisors under confidentiality (legal, audit)

Consistent with PTA confidentiality requirements, we do not disclose consumer use of the network or service to third parties except as published in directories, agreed by you, or required by law.

8. Data retention

Account and billing records: retained as required for legal, tax, and regulatory purposes
Location / trip history: retained according to your package and operational needs, then deleted or anonymised
Consent and complaint records: retained to demonstrate compliance
App diagnostics: retained for a limited period for security and quality improvement

9. Security

We use administrative, technical, and physical safeguards appropriate to vehicle-tracking services, including access controls, encrypted transport where applicable, and staff confidentiality obligations. No method of transmission or storage is 100% secure; please protect your login credentials and notify us immediately of suspected misuse.

10. Your rights and choices

Access or correct account information
Request deletion of account data where legally permitted (service history required by law may be retained)
Export or receive copies of certain account data upon verified request
Manage communication preferences and app permissions
Lodge complaints with us first, then with PTA Consumer Protection Directorate if unresolved

To exercise rights, email hello@almtrace.com from your registered email or provide account verification details. We aim to respond within PTA complaint timelines (acknowledgement with a complaint reference and resolution as soon as practicable, generally within three working days for first-level redressal).

11. Children

Our services are intended for vehicle owners and authorised adult users. We do not knowingly collect personal information from children under 13 for Google Play purposes, or under the minimum age required by Pakistani law for contracting. School-bus solutions may process route/vehicle data for institutional customers; institutions remain responsible for any parental notices required under their own policies.

12. International processing

Primary operations are in Pakistan. If any processing or backup occurs on infrastructure outside Pakistan, we apply contractual and technical protections consistent with this Policy and applicable law.

13. Changes to this Policy

We may update this Policy to reflect legal, PTA, or Google Play requirements. Material changes will be posted on this page with an updated date and, where required, notified through email/SMS/in-app notice.

14. PTA complaint escalation

If you are not satisfied with our response, you may contact the Consumer Protection Directorate, Pakistan Telecommunication Authority, or email complaint@pta.gov.pk with your details, our company name, nature of complaint, and prior correspondence.

Last updated: 24 July 2026

Questions? Email hello@almtrace.com or call +92 311 1133170.