Privacy Policy - Zain Bike Center (ZBC)

Welcome to Zain Bike Center (also referred to as ZBC, iOS Bundle ID & Android Package: com.builtbyusman.zbc), developed and published by Muhammad Usman ("we", "our", or "us"). We are committed to protecting your personal information and upholding your privacy rights. This unified Privacy Policy explains what information we collect, how we use and safeguard it, and how you can exercise full control over your personal data across both our Apple iOS and Google Android applications in strict accordance with the Apple App Store Review Guidelines (Section 5: Legal & Privacy) and Google Play Developer Program Policies.

1. Information We Collect

When you use the Zain Bike Center mobile application to explore motorcycle parts, manage your cart, and place orders, we collect the following categories of data:

Personal Account Identifiers: Name, Email Address, and securely hashed account passwords.
Delivery & Logistics Details: Physical Delivery Address, City, District (ضلع), Tehsil, Village/Area, Contact Phone Number, and WhatsApp Number (for dispatch notifications and courier tracking).
Order & Transaction Records: Purchased products, quantities, parcel weights, delivery fee calculations, and historical invoice statuses.
Payment Verification Receipts: Photographs and screenshots of bank transfers or mobile wallet confirmations (e.g., Easypaisa, Meezan Bank, JazzCash) uploaded by customers to confirm advance delivery charges.
Device & Push Notification Data: Unique device tokens used exclusively by Firebase Cloud Messaging (FCM) and Apple Push Notification service (APNs) to send real-time order status updates.

Note on Sensitive Financial Information: We do NOT collect or store sensitive payment instruments, credit/debit card numbers, CVVs, or online banking passwords. All bank transfers are made directly by customers inside their banking or wallet applications.

2. How We Use Your Information

We process your personal information strictly for legitimate commercial and operational purposes:

To process, pack, and ship your motorcycle spare parts and accessories to your doorstep.
To calculate dynamic delivery fees based on verified shipment weight and destination district.
To transmit order status confirmations, dispatch tracking numbers, and delivery updates via push notifications and WhatsApp/SMS.
To verify legitimate payment receipts and prevent duplicate submission of transaction IDs.
To maintain your shopping cart, wishlists, and account preferences across sessions.
To detect and prevent fraudulent transactions, duplicate orders, or unauthorized account access.

3. Optical Character Recognition (OCR) & Payment Screenshot Processing

When placing an order with advance delivery fees, customers submit an image of their bank or wallet transfer receipt:

Our backend servers analyze the uploaded image strictly to verify the Transaction ID (TRX ID), timestamp, and amount transferred.
This enables instantaneous order verification and shields honest customers against transaction tampering or fraud.
Sole Purpose: Photos are accessed exclusively for App Functionality (payment verification and optional customer avatar) and are NEVER used for advertising, behavioral profiling, or tracking.

4. Data Retention & 20-Day Automated Purge Policy

We follow strict data minimization principles:

Automated 20-Day Media Purge: Uploaded payment receipt screenshots are kept securely on our encrypted servers and are automatically and permanently erased within 20 days after the order is fulfilled.
Account & Order Records: Customer profile and order history records are retained only as long as your account is active, or until you exercise your right to account deletion.

5. Device Permissions & Apple Privacy Manifest Compliance

The Zain Bike Center app requests only the minimum native device capabilities necessary for core app features:

Platform Capability	iOS / Android Key	User-Facing Context & Purpose
Camera Access	`NSCameraUsageDescription` `android.permission.CAMERA`	Allows you to capture clear photographs of payment slips and bank transfer receipts directly within the app. Optional and only requested when you tap the camera button.
Photo Library Access	`NSPhotoLibraryUsageDescription` Android Photo Picker	Allows you to select and upload payment confirmation screenshots or set an avatar. Scoped strictly to user-selected media for App Functionality.
Photo Library Additions	`NSPhotoLibraryAddUsageDescription`	Allows you to save digital order invoices, receipts, and consignment slips directly to your photo library for offline record-keeping.
Push Notifications	APNs Remote Notifications `POST_NOTIFICATIONS`	Delivers critical alerts regarding order confirmation, dispatch, courier tracking, and customer support messages.
Network & Internet	`NSAppTransportSecurity` (TLS only) `INTERNET`	Encrypted HTTPS communication with our cloud API to load catalog items, manage orders, and sync user carts securely.

Zero User Tracking & AppTrackingTransparency (ATT) Statement:
Zain Bike Center does NOT track users. We do NOT link user data (including Photos, Videos, Names, or IDs) with third-party data from other companies for advertising or marketing. We do NOT share data with data brokers. In accordance with Apple's App Tracking Transparency guidelines, because our app does not track user activity, the ATT framework permission prompt is neither implemented nor required.

Apple Privacy Manifest (May 2024 Mandates): Our iOS app includes a dedicated PrivacyInfo.xcprivacy manifest declaring zero user tracking (NSPrivacyTracking = false), zero third-party tracking domains, and Apple-approved reasons for required APIs (UserDefaults CA92.1, FileTimestamps C617.1, SystemBootTime 35F9.1, and DiskSpace 85F4.1).

6. Authentication & Social Login Disclosure (Guideline 4.8)

Zain Bike Center provides secure account creation using your mobile phone number, name, and password. On supported platforms, optional Google Sign-In is offered adhering strictly to the Google API Services User Data Policy.

We only receive basic profile information (name and verified email) to authenticate your customer account.
We do NOT sell, lease, or distribute your authentication data to any advertising network or data broker.
Your account data is never utilized to train AI or machine learning models.

7. Third-Party Services & Data Sharing

We do not sell, rent, or trade your personal information to third parties. We share data only with essential infrastructure partners necessary to deliver our services:

Firebase / Apple APNs: For secure delivery of push notifications.
Courier & Delivery Logistics Partners: Recipient name, delivery address, and contact number are shared strictly for parcel delivery to your address.

8. Data Security & Encryption

All data exchanged between the Zain Bike Center iOS/Android applications and our cloud infrastructure is encrypted in transit using industry-standard TLS (Transport Layer Security / HTTPS). Sensitive database fields and user passwords are protected with cryptographic salting and hashing.

9. User Rights & In-App Account Deletion (Apple Guideline 5.1.1(v))

Both Apple and Google policies guarantee your right to access, correct, and permanently delete your account and personal data:

In-App Deletion: You can initiate account deletion at any time directly inside the app: navigate to Settings → Delete Account, read the confirmation notice, and confirm deletion. This immediately revokes your session tokens, purges device push notification tokens, and permanently deletes or anonymizes all personal identifiers.
Web-Based Deletion: You can also submit an account deletion request through our web portal at Account Deletion Page.
Data Correction: You can update your name, phone number, WhatsApp contact, and shipping address at any time in the Profile tab.

10. Children's Privacy

Our app and services are intended for general audiences and are not directed to children under 13 years of age. We do not knowingly collect personal data from children. If we discover that personal data from a child under 13 has been collected, it is immediately deleted from our servers.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory requirements. Any updates will be published on this page with the revised "Last Updated" timestamp.

12. Contact Information

For questions, privacy requests, or assistance regarding your data, please contact our Data Protection team:

App Name: Zain Bike Center (ZBC)
iOS Bundle Identifier: com.builtbyusman.zbc
Android Package ID: com.builtbyusman.zbc
Developer: Muhammad Usman (Built by Usman)
Email: builtbyusman@gmail.com
Support WhatsApp: +92 301 6878322
Physical Location: Shop 2, 3 Chatri Chowk, Khanna Pul, Rawalpindi, Pakistan

Privacy Policy for Zain Bike Center (ZBC)