Privacy Policy

1Information we collect

When you create an account

• Mobile phone number — to sign you in with a one-time code (OTP) sent by SMS.
• Full name.
• CNIC number — only to verify that you are a real vehicle owner. It is never shown to other users.

About your vehicles

• Vehicle details: make, maker name, registration (plate) number, colour, date of registration, engine number, chassis number and registered address.
• Photos of your vehicle that you choose to add.
• Photos of the front and back of your vehicle registration (RC) card, if you choose to scan it to fill in the details automatically.
• A nickname for the vehicle.

Messages

• Text messages exchanged between a vehicle owner and a person who scanned their sticker, with the time they were sent and whether the issue was marked resolved.
• Voice messages you choose to record and send in a chat, stored as audio files with their length and the time they were sent.
• If you message an owner after scanning a sticker, you may optionally enter your name. If you don’t, you appear as “Anonymous”.

Collected automatically

• Push notification token — a device identifier from Firebase Cloud Messaging, so we can tell you about new messages.
• App integrity signals — Google Play Integrity and Firebase App Check confirm that requests come from the genuine MoveMe app, to prevent abuse and fraud.
• A random scanner ID — stored on the device of someone who scans a sticker without an account, so their conversation can continue later. It is not linked to their identity.
• App preferences kept only on your device, such as your theme and whether you’ve seen the introduction screens.

2How we use your information

• To create and secure your account, and sign you in with a one-time SMS code.
• To generate the QR sticker for each vehicle and show the scan page when it’s scanned.
• To deliver messages between owners and people who scan their stickers, and to notify you of new messages.
• To read your RC card photos and fill in your vehicle details automatically, so you don’t have to type them.
• To verify vehicle ownership and help prevent fake or abusive accounts.
• To keep the service secure, prevent fraud and spam, and fix problems.
• To comply with the law and respond to lawful requests from authorities.

We do not sell your personal information, and we do not use it for advertising.

3What other people can see

Anyone who scans your vehicle’s QR sticker — with the app or a phone camera — can see:

They can then send you a message. Only the two people in a conversation can see its messages.

4Service providers we share with

We use these trusted providers to run MoveMe. They process information only on our behalf, under their own privacy and security commitments.

We may also disclose information if the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or sale of our business, in which case this policy would continue to apply.

Your data is stored on Google Cloud servers, which may be located outside Pakistan.

5Device permissions

• Camera — to scan QR stickers, scan your RC card and photograph your vehicle. Used only when you choose to do these things.
• Microphone — to record voice messages in a chat. Used only while you are recording one.
• Photos / gallery — to choose existing photos of your vehicle or RC card. Only the photos you pick are accessed.
• Notifications — to alert you when someone messages you about your vehicle.

You can turn these off at any time in your phone’s settings. Some features won’t work without them.

6How long we keep your data

• Account, vehicle and message data is kept for as long as your account is active.
• When you remove a vehicle, its details, photos, RC card images and QR sticker are deleted.
• One-time sign-in codes expire after 5 minutes and are stored only in a scrambled (hashed) form.
• When you delete your account, your data is deleted as described below. Copies may remain in secure backups for up to 30 days before being permanently erased, and we may keep limited records where the law requires it.

7Deleting your account

For email requests, we may ask you to confirm before deleting anything, and we complete them within 30 days. Full details: Delete your MoveMe account.

Deleting your account permanently removes:

• Your profile (name, phone number and CNIC) and your sign-in account
• All your vehicles, including their photos, RC card images and QR stickers, which stop working
• Your conversations and messages, including voice messages
• Your push notification tokens

8Your choices and rights

• Access and correct — view and edit your name in Profile, and your vehicle details on each vehicle’s screen.
• Delete — remove individual vehicles, or delete your whole account as described above.
• Notifications — turn push notifications off in your phone’s settings.
• Other requests — to request a copy of your data or ask any privacy question, contact us below.

9Security

All data is encrypted in transit (HTTPS/TLS) and stored on Google Cloud infrastructure, which encrypts data at rest. Access is restricted by security rules, so private details such as your phone number, CNIC and RC card images are available only to you and our backend. Google Play Integrity and Firebase App Check block requests that don’t come from the genuine app.

No system is perfectly secure, but we work hard to protect your information, and we will notify you and the relevant authorities of a data breach where the law requires it.

10Children

MoveMe is intended for vehicle owners and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.

11Changes to this policy

We may update this policy from time to time. We’ll change the “Last updated” date above, and if the changes are significant we’ll let you know in the app before they take effect.