Privacy Policy

1. Information We Collect

Information you provide directly

• Account details: full name, email address, and phone number when you register.
• Payment information: when you purchase a subscription, your card or bank details are entered directly into Bank Alfalah's (Alfa) secure payment gateway. We do not store or process payment card numbers — Alfa handles this.
• Support communications: messages you send us via email or the contact form.

Information collected automatically

• Usage data: pages visited, tests taken, MCQs attempted, score history, and time spent on the platform — to provide personalised study tracking.
• Device & log data: IP address, browser type, operating system, and device identifiers.
• Analytics: we use Google Analytics 4 to understand aggregate usage patterns. Google Analytics may set cookies; see Section 5 for details.

2. How We Use Your Information

• To create and manage your account and subscription.
• To process payments and verify subscription status.
• To track and display your study progress and test history.
• To send transactional emails: account verification OTPs, password resets, and payment confirmations.
• To respond to support queries and resolve technical issues.
• To improve the platform through aggregate usage analysis.
• To comply with legal obligations under Pakistani law.

We will not use your information for unsolicited marketing without your consent.

3. Sharing of Information

We do not sell, rent, or trade your personal data. We share information only in these limited circumstances:

• Bank Alfalah (Alfa): payment data is processed by Bank Alfalah under their own privacy policy. We only receive a transaction confirmation token.
• Cloud infrastructure: data is stored on MongoDB Atlas (databases) and Amazon S3 (files), both with industry-standard security controls.
• Google Analytics: anonymous, aggregated usage statistics are shared with Google for platform analytics.
• Legal compliance: if required by a court order or government authority under applicable Pakistani law.

4. Payment Data Security

All payment transactions are processed by Bank Alfalah Limited through their Alfa payment gateway. Dareecha never stores credit card numbers, CVV codes, or full bank account details on our servers. The payment page uses Bank Alfalah's PCI-DSS-compliant infrastructure.

We store only the payment status and a non-sensitive transaction reference number to verify your subscription.

5. Cookies

We use the following cookies:

• Session cookies: to keep you logged in during your visit (8-hour idle timeout).
• Analytics cookies (Google Analytics 4): to measure aggregate usage. You can opt out via Google's opt-out tool.

We do not use advertising or third-party tracking cookies.

6. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law (e.g., financial transaction records under Pakistani tax regulations).

7. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correct — update inaccurate information via your profile settings or by contacting us.
• Delete — request deletion of your account and personal data.
• Portability — request your data in a structured format.

To exercise any of these rights, email dareecha4@gmail.com with the subject "Privacy Request." We will respond within 14 business days.

8. Data Security

We implement industry-standard security measures including HTTPS encryption, JWT-based authentication with short-lived tokens, and MongoDB Atlas security controls. While we take these precautions seriously, no system is completely immune from security incidents. We will notify affected users promptly in the event of a data breach.

9. Children's Privacy

Our service is designed for students aged 13 and above. We do not knowingly collect personal data from children under 13. If we discover that a user under 13 has registered, we will delete their account. If you believe a child has provided us their data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice on the platform at least 7 days before the changes take effect.

11. Contact

For any privacy-related questions or requests, contact us: