Privacy Policy

Tehreek Social is invite-only. You join by invitation, and you can only sign in after confirming your email address with a one-time code. The app is not intended for children under 18. If you believe a child has given us information, contact us and we will delete it.

a. Information you give us

• Account details: your name, email address, phone number, and the region you live in.
• Sign-in: your email address and the one-time codes sent to it. If you sign in with Google, we receive the name and email address on that Google account.
• Profile picture (optional): a picture you choose to add. It is shown next to your name as an avatar. It is not checked for identity and nobody reviews it. You can leave it out.
• Preferences: the tones, languages, and notification choices you select.
• Social handles you prove: the public account names you link (for example on X, Instagram, Facebook, TikTok, YouTube) and the proof code you post on them so we can confirm the account is yours. We read only what is publicly visible for proof. We never ask for your social media passwords or access tokens.
• Content you submit: posts, screenshots, images or videos you submit for a campaign, and any text you write for a campaign.
• Messages and support: anything you send us by email or through the app.

b. Information we collect when you use the app

• Activity records: which campaigns you received and when, which posts you made, your submissions, and your points history. Points are never changed by how much engagement your posts receive.
• Device and notification data: a push-notification token issued by Google Firebase Cloud Messaging, so we can send you notifications. We keep this token on our servers while notifications are enabled for your account.
• Session data on your device: sign-in tokens, stored in the phone's secure storage (Android Keystore-backed), so you stay signed in.
• Technical records: basic server logs such as request time, the address the request came from, and error details. These are used for security and fixing faults and are kept for a limited period.
• Admin audit log: when staff change records in the admin system, the action, the staff member, and the time are logged. We do not store request bodies in this log.

c. Device permissions the app asks for

• Photos, camera and files: only when you choose to add a picture, submit campaign media, or save an image or video. The app does not scan your photo library in the background.
• Notifications: to tell you about campaigns and account events.
• Links: the app opens invite and campaign links (for example, links that start with qrtf:// or the qrtf.digitalmatters.pk web address) and can share content you choose to share.

• We do not show advertising in the app.
• We do not include third-party advertising or analytics SDKs in the app.
• We do not sell your personal information.
• We do not track your location.
• We do not read your messages, contacts, or call history.

• To create and run your account, and to sign you in.
• To send you one-time codes, invitations, campaign notices and account messages.
• To record your campaign work and calculate your points and tier.
• To check that a social account you link really belongs to you.
• To help write draft campaign posts for Members and staff, as described in section 5.
• To keep the service secure, prevent abuse, and fix faults.
• To meet legal obligations, including requests from lawful authorities.

We share information only with the service providers listed below, and only as needed to run the app:

We may also disclose information when the law requires it, or when it is necessary to protect the rights, safety or property of users or the public. Staff can see only what their role allows. For example, some fields are hidden from some staff roles, and some exports are limited to the owner role and are logged.

Our database and file storage are hosted on AWS in Singapore (ap-southeast-1). Some of our service providers process data in other countries, including the countries where the AI model providers above run their services.

• Account details: kept while your account is active.
• When you leave the app: your personal information is removed at once, in the same request that closes your account. There is no waiting period.
• Campaign and points records: kept in anonymised form, so campaign totals stay accurate. Your name and contact details are removed from them.
• Records that link you to a specific post: kept for 12 months, after which your identity is removed from them and only anonymised totals remain.
• Pictures and media: deleted when you remove them or when your account is closed.
• Technical and audit logs: kept for a limited period needed for security and accountability, then deleted.
• Backups: copies made for disaster recovery are deleted on their normal schedule, which is at most 30 days.

• Access: you can ask us for a copy of the personal information we hold about you.
• Correction: you can update your name, phone number, region, preferences and picture in the app.
• Deletion: you can close your account at any time. Your personal information is then removed as described in section 7.
• Notifications: you can turn notifications off in your phone settings or in the app.
• Permissions: you can revoke photo, camera or file access in your phone settings at any time. Parts of the app will not work without them.
• Withdraw consent: where we rely on your consent, you can withdraw it at any time. This does not affect what we did before.

To use any of these rights, email contact@jamaat.org from the address registered to your account. We will respond within [RESPONSE PERIOD]. We may ask you to confirm your identity before acting on a request.

We use encryption in transit (HTTPS), encrypted storage for databases and files, restricted staff access based on role, and an audit trail for administrative actions. No system is perfectly secure. If we learn of a breach that affects your information, we will tell you and the relevant authorities as the law requires.

We handle personal information in line with applicable Pakistani law, including the Prevention of Electronic Crimes Act, 2016 (as amended). If you are in another country, local data-protection rules may also apply to you.

We may update this policy. When we make a material change, we will tell you in the app and update the date at the top of this page. The version in force is always the one published at the address where you found it.

Questions about this policy or your information: contact@jamaat.org, Salman Hameed Shaikh (trading as JI Media Cell), FLAT # E-710, Tulips Tower, Tulip Towers, Karachi, Karachi East - 75330, Pakistan.