Privacy Policy

Last Updated: July 2026

Information We Collect

When you use My Lifto, we collect information you provide directly: your full name, phone number, email address, profile photo, and payment details. We also collect location data when you use the app for ride tracking, device information including model, operating system, and app version.

For drivers, we additionally collect vehicle information (make, model, year, color, license plate), driver's license details, CNIC information, and vehicle registration documents as part of our verification process.

How We Use Your Information

We use your information to provide, maintain, and improve our ride-sharing and cargo transport services. This includes matching passengers with drivers, processing payments, verifying driver credentials, and facilitating communication between users.

Your data also helps us send service-related communications, respond to your inquiries, detect and prevent fraud, and comply with legal obligations in the Islamic Republic of Pakistan.

Data Sharing

We share your information with other users only as necessary to fulfill a ride or cargo booking. When you accept a booking, your phone number and name are shared with the other party. We do not sell your personal data to third parties.

We may share data with payment processors to complete transactions, with law enforcement when required by law, and with service providers who help us operate the platform under strict confidentiality agreements.

Data Security

We implement industry-standard security measures including end-to-end encryption for data transmission, secure server storage with access controls, regular security audits, and employee training on data protection. However, no method of electronic storage is 100% secure.

Account Deletion and Data Retention

Users may request the deletion of their account at any time through the app's settings (Profile to Delete Account). Upon request, your account is immediately hidden from public view, your status is changed to Pending Deletion, and you will receive a confirmation notification.

We provide a 30-day grace period after a deletion request. During this period, you can log in to your account normally, you can cancel the deletion request at any time, your data remains intact but not visible to others, and you will receive reminders before the period ends (3 days before).

Once the 30-day grace period expires, your account and all associated data are permanently deleted. This includes: profile information, posts, bookings, ratings, messages, and uploaded documents. No recovery is possible after this point.

In compliance with the Prevention of Electronic Crimes Act 2016 (PECA), we retain certain personal information in a secured, isolated archive for a period of 365 days from the date of deletion. This archived data includes: full name, phone number, government-issued identification document keys (CNIC/license), driver ID (if applicable), and trip statistics (aggregated counts). This data is stored separately from active production systems and is only accessible for legal compliance purposes. After 365 days, this archived data is permanently and irreversibly destroyed.

Pursuant to the Income Tax Ordinance 2001 (Section 175), financial transaction records including payment amounts, dates, methods, and screenshots are retained in anonymized form for a period of 6 years. These records are disconnected from any personally identifiable information, maintained solely for tax and audit compliance, not accessible for any other purpose, and permanently deleted after the statutory retention period expires.

During the 30-day grace period, you can cancel the deletion request by logging in to your My Lifto account. You will see your account's deletion status on the home screen. Tap Cancel Deletion and your account will be fully restored.

If you have questions about account deletion or need assistance, please contact us via our contact page or email us at . We will respond to your deletion-related inquiry within 48 hours.

Your Rights

You have the right to access, correct, or delete your personal data at any time through your account settings. You can also request a copy of your data in a portable format. To exercise these rights, contact us at .

Cookies & Tracking

My Lifto uses essential cookies only for the functioning of our website. These cookies do not track your activity across other websites. We do not use third-party tracking cookies or analytics that collect personal data without your consent.

Third-Party Services

Our platform integrates with Google Maps for navigation and route display, and with payment gateways for transaction processing. These services have their own privacy policies, and we encourage you to review them. We only share the minimum data necessary for these services to function.

Children's Privacy

My Lifto is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we learn that we have collected data from a person under 18, we will delete it immediately.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes via email or through the app. Your continued use of My Lifto after such changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this privacy policy or how we handle your data, please contact our Data Protection Officer at or write to us at 42-Gulberg, Lahore, Punjab, Pakistan.

Governing Law

This privacy policy is governed by the laws of the Islamic Republic of Pakistan. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts in Lahore, Pakistan.