Privacy Policy

wofo.pk operates a marketplace connecting households in Pakistan with tradespeople — electricians, plumbers, painters, carpenters, AC engineers, cleaners and mechanics. In this policy “we” means wofo.pk, “the app” means our Android and iOS applications, and “you” means whoever is using either.

For anything in this policy, write to help@wofo.pk.

• Your name and phone number. Most accounts are created with a phone number and a one-time code, so the number is also how you sign in. Some accounts use an email address and a password instead.
• A profile photo, if you add one. Optional. It is shown to the person on the other side of a job so each of you knows who is at the door.
• Your location. See clause 4 — this is the one worth reading carefully.
• Your settings. Language, dark mode, whether you want notifications, and any spending ceiling you set for approving extra work automatically.
• A device token, if you allow notifications. Needed to send the alert that a worker has arrived. Revoking notification permission stops it.
• When the app was last open on your account. Used to show our staff who is currently active, and for nothing else.

A booking necessarily involves both sides knowing some things about each other. For each job we hold:

• The address and map location the work is at, and the distance between the two of you.
• The trade, the description you wrote, and any photos you attached.
• The agreed price, any additions requested during the work and your answer to them, the payment method chosen, and the invoice produced afterwards.
• The messages, photos and voice notes sent in that job’s conversation.
• Timestamps for accepting, setting off, arriving, starting and finishing.
• The rating and review written afterwards, which is public.

A job conversation is scoped to its booking and closes when the job ends. Neither side can start a conversation with the other outside a job.

As a customer, you set your location once by placing a pin on a map, and that pin is what the app means by “near you” everywhere. We ask your device for its position only when you have not set a pin yet — once you have, the app stops asking, because it has a better answer than the phone does. You can move the pin at any time from your profile.

As a worker, you set a service area during signup, and your live position is shared only while you are on your way to a job you accepted, and only with that customer. Going offline stops it.

We turn coordinates into a street name using a geocoding service so the address is readable by the person driving to it. We do not build a history of your movements and the app has no background location tracking.

Because a worker is offered to households as checked, an application asks for more:

• Your CNIC and any trade certificates you upload. These are stored in a private bucket, are visible only to you and to our reviewing staff, and are never shown to customers.
• Your trade, service area, prices, experience, languages and the bio you write.
• Portfolio photos, if you add them. These are public — customers are meant to see them.
• Your payout details — the bank account or mobile wallet you withdraw earnings to.
• Your job history, earnings, coin balance and withdrawal requests.

For most of it, because we cannot provide the service without it: an address is not optional for somebody who has to drive to it. For identity documents, because verifying tradespeople is the basis on which we offer them to households. For financial records, because we are required to keep them. For notifications, because you agreed — and you can withdraw that at any time.

We do not sell your data, and we do not use it to build advertising profiles.

• The other person in the job. A worker you book sees your name, phone number, address, photo and notes. You see their name, photo, trade, rating and, once they set off, their position. Neither of you sees anything about the other outside a job.
• Our staff. Enough to review applications, settle disputes and answer support. Staff access is a granted permission and is enforced by the database, not just by the interface.
• Our hosting and database provider. The app’s data, files and sign-in are hosted on Supabase infrastructure.
• Mapping services. Google Maps, for maps, turning coordinates into addresses, and routing a worker to you.
• Notification services. Expo, and through it Apple and Google, to deliver push notifications to your device.
• Payment providers. For card and wallet payments. Card details are handled by the provider — they do not reach our servers and we do not store them.
• Speech recognition, if you use the microphone to search. What you say is transcribed by your phone’s own speech service, which on most Android devices and on iOS may mean it is sent to Google or Apple to be converted to text. We receive only the resulting words, as a search term. Do not use it for anything you would not type.

There is no third-party analytics, no advertising script and no tracking pixel on wofo.pk. The fonts are served from our own domain rather than fetched from Google, so simply reading this page does not report you to anyone. The only cookies set are the session cookies our staff console needs in order to keep an administrator signed in.

Account information for as long as you have an account. Job records, invoices and financial entries for as long as we are required to keep accounting records, which outlasts your account — see the next clause. Job conversations are retained with their booking. Identity documents are kept while a worker is active on the platform and removed when the account is deleted.

You can delete your account yourself, from the app: Profile, then Delete account. It is not a request that queues for us to action — it happens when you confirm it.

What is removed:

• Your name, phone number, email address and profile photo.
• Your saved location and your favourite workers.
• Your bookings, invoices and job conversations.
• Reviews you have written.
• Your uploaded files, including a worker’s identity documents, portfolio and payout details.

Two things do not disappear, and we would rather say so here than surprise you:

• Financial records of jobs already completed, which we must keep for accounting. They no longer carry your name.
• If you are a worker, your worker profile is retained but delisted and stripped of your personal details, because other people’s completed jobs and invoices refer to it. It cannot be found, booked or signed into.

Deletion is refused while you have a booking in progress. Cancel it first — deleting mid-job would leave the other person with no way to reach you or be paid.

• Correct your name, phone number, email and photo at any time from your profile.
• Move or change your saved location whenever you like.
• Turn notifications off in the app, or revoke the permission in your phone’s settings.
• Decline location or microphone permission. The app still works; the features that need them do not.
• Ask us what we hold about you, or ask us to correct or delete it, by writing to help@wofo.pk.

Data is encrypted in transit. Access to every table is restricted at the database level, per account, rather than only in the app — so a fault in the interface does not become a data breach. Identity documents sit in a private store that customers cannot read at all. Passwords, where an account has one, are stored hashed by our authentication provider and are not visible to us.

No system is perfectly secure, and we will not pretend otherwise. If we become aware of a breach affecting your data, we will tell you.

wofo.pk is not for anyone under 18. We do not knowingly hold data about children, and if we learn that we have, we will delete it.

If this policy changes materially we will say so in the app rather than silently editing this page. The date at the top is the date of the current version.