Privacy Policy for BC Appa
Effective Date: June 17, 2025 Last Updated: June 17, 2025 Version: 1.0
1. Introduction
BC Appa ("we," "our," or "us") is committed to safeguarding your privacy. This Privacy Policy delineates how we collect, utilize, disclose, and secure the information you provide when using our mobile application BC Appa (the "App") and associated services. BC Appa is a digital platform delivering secure Ballot Committee (BC) management services in Pakistan, underpinned by insurance-backed protection for savings circles and committee administration.
2. Information We Collect
2.1 Personal Information
- Identity Information: Full name, CNIC number, date of birth
- Contact Information: Phone number, email address, postal address
- Financial Information: Bank account details, payment history, contribution amounts
- Verification Documents: CNIC copies, bank statements, income verification
- Profile Information: Profile picture, occupation, monthly income
2.2 Committee Information
- Committee membership details
- Payment schedules and contribution amounts
- Payout history and records
- Member selection preferences
- Committee creation and management activities
2.3 Technical Information
- Device information (model, OS, unique device identifiers)
- App usage data and analytics
- Location data (with permission)
- Log files and crash reports
- Push notification preferences
2.4 Communication Data
- In‑app messages and notifications
- Customer support communications
- Feedback and reviews
3. How We Collect Information
- Account registration and profile setup
- Committee creation and participation
- Payment and financial transactions
- App usage and interactions
- Customer support communications
- Identity verification processes
- Automatic data‑collection technologies
4. How We Use Your Information
4.1 Primary Services
- Facilitate committee creation and management
- Process payments and contributions
- Provide insurance‑backed security features
- Verify user identity and mitigate fraud
- Match users with suitable committees
- Send payment reminders and notifications
4.2 Secondary Purposes
- Enhance app functionality and user experience
- Provide customer support and technical assistance
- Comply with legal and regulatory requirements
- Prevent fraud, abuse, and security threats
- Conduct analytics for service improvement
- Dispatch marketing communications (with consent)
5. Information Sharing and Disclosure
5.1 With Committee Members
- Basic profile information (name, verified status)
- Payment status and contribution history within shared committees
- Committee participation details
5.2 With Service Providers
- Payment Processors: JazzCash for secure financial transactions
- Insurance Partners: JazzDost for default‑protection coverage
- Cloud Service Providers: AWS for secure data storage and processing
- Verification Services: To authenticate user identity
- Analytics Providers: Google Analytics, Facebook Pixel for performance insights
5.3 Legal Requirements
We may disclose information when mandated by:
- Pakistani laws and regulations
- Court orders or legal processes
- Regulatory authorities (State Bank of Pakistan, SECP)
- Law enforcement agencies for fraud prevention
5.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction.
6. Data Security
We deploy robust security measures, including:
- Encryption: All sensitive data encrypted in transit and at rest
- Access Controls: Restricted access on a need‑to‑know basis
- Regular Security Audits: Periodic assessments of security posture
- Secure Payment Processing: PCI DSS–compliant handling
- Regular Backups: Secure data backup and recovery protocols
7. Your Rights and Choices
7.1 Access and Control
- View and update personal information
- Download data in a portable format
- Delete account and associated data
- Opt out of marketing communications
- Manage push‑notification preferences
7.2 Committee Data
- Exit committees at any time (subject to payment obligations)
- View full payment and contribution history
- Access committee member information (within shared committees)
7.3 Data Deletion
You may request deletion of personal data, subject to:
- Completion of active committee obligations
- Legal retention requirements
- Fraud‑prevention measures
8. Data Retention
- Active Accounts: Duration of app usage + 6 months
- Committee Records: 7 years post‑completion (regulatory requirement)
- Financial Transactions: 7 years (per Pakistani financial regulations)
- Deleted Account Data: Removed within 14 days of request
- Legal Compliance: As mandated by applicable laws
9. International Data Transfers
Your data is processed and stored on AWS servers, which may reside outside Pakistan. We ensure adequate protection through:
- Encryption in transit and at rest
- Regular security audits and monitoring
- Compliance with Pakistani data‑protection requirements
10. Children's Privacy
BC Appa is not directed at users under 14 years of age. We do not knowingly collect personal information from children under 14; any such data will be deleted immediately upon discovery.
11. Third‑Party Services
Our App may include links to third‑party services. This Privacy Policy does not govern those services. We recommend reviewing their privacy policies before sharing personal information.
12. Changes to This Privacy Policy
We may update this Policy periodically. Material changes will be communicated via:
- In‑app notifications
- Email notifications
- Updates on our website (bcappa.com)
Continued use of the App after updates constitutes acceptance of the revised Policy.
13. Contact Information
For privacy inquiries, please contact: BC Appa Privacy Team
- Email: privacy@bcappa.com
- Phone: +92 332 3882001
- Website: https://bcappa.com
- Address: Unit No. 7, House No 142C, near Ravi Exchange, Block D Latifabad, Hyderabad 71000
14. Compliance
BC Appa adheres to:
- Pakistani data‐protection laws
- State Bank of Pakistan regulations
- Securities and Exchange Commission of Pakistan requirements
- International data protection standards
15. Specific Disclosures for Pakistani Users
15.1 Regulatory Compliance
- Conforms to State Bank of Pakistan's digital‑finance regulations
- Committee operations per Pakistani savings and credit society guidelines
- Insurance partnerships with JazzDost registered with SECP
- Payment processing through JazzCash aligned with SBP guidelines
15.2 Dispute Resolution
- Disputes are adjudicated under Pakistani law
- Users may lodge complaints with relevant Pakistani authorities
- Alternative dispute‑resolution mechanisms are available
By using BC Appa, you acknowledge that you have read, understood, and agree to this Privacy Policy.