Privacy policy

Last updated 29 October 2026. Barabar is run by Owais Builds (Lahore, Pakistan). This page says what we collect, why, who sees it, and how to delete it. We keep it plain on purpose.

What we collect

Data Why Who sees it
Email address Signing in with a one-time code (through Clerk) Only us. Never shown in the app.
Name and mobile number So the rider and driver on a trip can recognise and call each other The other person on your trip, while it’s live. Hidden afterwards.
Gender (optional) Only to power the women-only option Nobody. Only used for matching.
Pickup, drop-off and route To match you with nearby drivers and show the trip Drivers nearby see pickup and drop-off while you’re searching; your driver sees them during the trip.
Driver’s live location While a driver is online, to show riders where their car is and to find requests nearby The rider on the trip, and anyone they share the live-trip link with. Never collected in the background or when offline.
Driver documents: CNIC photo, licence, vehicle photo, selfie Verification. We store a hash of the CNIC number and only the last four digits readable, so one person can’t run many accounts Riders see the selfie, plate and vehicle. Documents are only seen by us if an account is reviewed.
Ratings, reports and blocks Keeping both sides safe. Three independent reports pause an account Averages are public in the app. Report text is seen only by us.
Wallet top-ups Drivers pay for passes. Payments are processed by Safepay; we never see card or wallet numbers Only us.
Crash reports Fixing bugs (Sentry). No names, emails or IP addresses are sent. Only us.

We do not collect contacts, photos other than the ones you take for verification, advertising IDs, or background location. There are no ads and no data brokers.

Fare money

Riders pay drivers directly in cash. Barabar never handles fare money and never takes a share of it.

Sharing

Service providers that process data for us: Clerk (sign-in), Neon (database, Singapore region), Vercel (hosting), Safepay (payments), Sentry (crash reports), OpenStreetMap-based services for addresses and routing (they receive the coordinates you search, never your identity). We share data with authorities only when the law requires it, or to respond to a safety emergency.

Keeping it

Your profile and documents stay while your account exists. Trip history stays while your account exists; after deletion, past trips remain on the other person’s record without your name or number. Live-trip links stop working 24 hours after the trip.

Your choices

Children

Barabar is for adults aged 18 and over. We don’t knowingly collect data from anyone under 18. See Child safety.

Contact

. We answer from Lahore, usually within a day.