PRIVACY

Privacy Policy

How Baanto collects, uses and protects your information. Last updated 30 July 2026.

Who we are

Baanto is a food and item sharing app operated from Pakistan. In this policy, "Baanto", "we" and "us" mean the operators of the Baanto app and the website at baanto.pk. You can reach us at contact@baanto.pk.

This policy explains what we collect, why, how long we keep it and what you can ask us to do with it. It applies to the Baanto mobile app and this website.

The law we work under

Pakistan does not yet have a single comprehensive data protection statute. The Personal Data Protection Bill has been through several drafts but has not been enacted. In the meantime we are guided by:

• Article 14 of the Constitution of Pakistan, which protects the privacy of the home and has been read by the courts to extend to personal data;
• the Prevention of Electronic Crimes Act 2016 (PECA), in particular section 38, which makes the unauthorised disclosure of personal data a criminal offence;
• applicable Pakistan Telecommunication Authority (PTA) regulations, including requirements on where data is stored;
• the standards set out in the draft Personal Data Protection Bill, which we intend to follow so that we are already compliant if and when it becomes law.

What we collect

Account information. An email address, and a phone number if you choose to add one. A display name that you pick - it does not have to be your full legal name.

Listings you create. The photo, description, approximate area, pickup window and any expiry information you enter.

Approximate location. If you allow it, a rough location so we can show you listings nearby and place yours on the correct part of the map. We do not publish a precise location and we do not track you in the background.

Messages. The item-based chats that open when you accept a request.

Reports and blocks. If you report or block someone, we record that and the item it relates to.

Basic technical information. Device type, app version and error logs, so we can fix crashes.

We do not ask for your CNIC, your bank details or your home address, and no part of Baanto needs them.

What we never publish

Your exact address is never shown to anyone. Your email address is never shown to other users. Your phone number is never shown to other users. A listing only ever displays an approximate area - you decide, in a private chat and after you have accepted a request, whether to share an exact meeting point.

How we use it

To create and secure your account; to show your listings to people nearby; to let a requester and a giver talk about one specific item; to award points and badges for completed shares; to investigate reports and keep the community safe; to fix bugs and improve the app. We do not sell your data, and we do not use it for advertising.

How long we keep it

Listings are removed from the public feed once marked given away or expired.

Chats close when a handover is marked complete and disappear from your app. We retain a copy for 30 days so that a safety report can still be investigated, after which it is deleted.

Account data is kept while your account is open. If you delete your account we remove your profile and listings and delete remaining personal data within 30 days, except anything we are required to keep in connection with an ongoing investigation or a legal obligation.

Who else sees your data

We use third-party providers to run the service, hosting and database services, and a service that sends verification emails. They process data on our instructions only. We do not share your information with advertisers or data brokers.

We may disclose information to law enforcement or a regulator where we are legally required to do so, for example under PECA 2016, or where it is necessary to prevent serious harm.

Children

Baanto is not intended for anyone under 13. We do not knowingly collect information from children under 13. If you believe a child has created an account, email us and we will remove it.

Your choices

You can view and edit your profile in the app, delete any listing at any time, turn location permission off in your phone settings, block or report any user, and delete your account entirely. You can also ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it, email contact@baanto.pk and we will respond within 30 days.

Security

Data is transmitted over encrypted connections and access to production systems is restricted. No system is perfectly secure, so we also ask you to use a strong, unique password and to never share a login code with anyone. Baanto staff will never ask you for your password or a verification code.

Changes to this policy

If we change this policy we will update the date at the top of this page and, for anything significant, tell you in the app. Continuing to use Baanto after a change means you accept the updated policy.

Contact

Questions, requests or complaints about privacy: contact@baanto.pk.