Privacy Policy

1. Information We Collect

We collect the following categories of data:

• Account information — your full name, email address, phone number (optional), and password (stored as a one-way hash). If you sign in via Google, we receive your name and email from Google.
• Onboarding profile — your job title, company name, primary skill, years of experience, available hours per week, monthly income target (PKR), and risk tolerance. This data is used exclusively to personalise your AI-generated recommendations and action plan.
• Income logs — amounts (PKR), source descriptions, client names, and dates that you voluntarily enter when logging earned income.
• Task activity — which tasks you have completed, completion timestamps, and points earned.
• Community content — posts, comments, and likes you submit to the community feed.
• Usage data — pages visited, features used, and session timestamps, collected to improve the platform and for analytics purposes.
• Feedback and contact messages — star ratings, comments, and messages you send via the feedback form or contact section.

2. How We Use Your Information

• To generate and personalise your AI income stream recommendations, 28-day action plan, daily tasks, tips, and skill quizzes.
• To track your income progress, streaks, points, and milestones and display them on your dashboard.
• To send WhatsApp task reminders (Pro and Premium users) and email notifications about your account.
• To power the community feed, leaderboard, and public share card features.
• To analyse platform-wide usage trends (in aggregated, anonymised form) and improve our product.
• To respond to your support requests, feedback, and contact messages.
• To detect and prevent fraudulent or abusive behaviour.

3. AI Processing

ZiadaKamao uses Anthropic's Claude AI models to generate personalised content. When generating recommendations or action plans, relevant parts of your onboarding profile (skills, experience, available hours, income target) are sent to Anthropic's API as part of a prompt. Anthropic processes this data solely to return AI-generated text and does not use it to train their models under their standard API terms. We do not send your name, email, income logs, or payment information to Anthropic.

4. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We share data only in the following limited circumstances:

• Service providers — trusted third-party services we use to operate the platform, including Anthropic (AI processing), database hosting providers, and email delivery services. These providers process data only on our behalf and under confidentiality obligations.
• Analytics — we use Google Analytics to understand how the platform is used. Google Analytics collects anonymised usage data via cookies. You can opt out using Google's opt-out tools.
• Legal requirements — if required by Pakistani law, court order, or regulatory authority, we may disclose your data to comply with legal obligations.
• Public profile features — if you enable your public share card or participate in the leaderboard, your display name, income milestones, and streak data are visible to other users. You can disable this in Settings at any time.

5. Data Storage & Security

Your data is stored in a PostgreSQL database hosted on secured cloud infrastructure. Passwords are hashed using bcrypt and are never stored in plain text. Refresh tokens are also stored as bcrypt hashes. Access tokens exist only in memory (your browser) and are never persisted to disk.

We implement industry-standard security measures including encryption in transit (TLS), secure API authentication (JWT), and rate limiting. No system is completely secure, however — if you become aware of any security vulnerability, please notify us immediately at ziadakamao@gmail.com.

6. Cookies

ZiadaKamao uses a minimal number of cookies:

• Session cookie (zk-logged-in) — a boolean cookie used by our Edge middleware to determine whether to protect authenticated routes. It contains no personal data.
• localStorage — we store your user profile and refresh token in your browser's localStorage to maintain your session across page reloads. You can clear this at any time by logging out.
• Google Analytics cookies — used for anonymised usage analytics. You can opt out via your browser settings or Google's opt-out tools.

7. Your Rights

You have the following rights over your data:

• Access — you can view your profile, income logs, and activity data within the platform at any time.
• Correction — you can update your profile and onboarding information from your profile and settings pages.
• Deletion — you can permanently delete your account and all associated data from the Settings page. Deletion is irreversible.
• Data portability — to request a copy of your data in a portable format, contact us at ziadakamao@gmail.com.
• Opt-out of communications — you can disable WhatsApp reminders and email notifications from your Settings page.

8. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, your personal data (name, email, profile, income logs, tasks) is permanently deleted within 30 days. Anonymised, aggregated platform statistics (e.g., total income logged by all users) may be retained indefinitely as they contain no personal information.

9. Children's Privacy

ZiadaKamao is not intended for use by anyone under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. For significant changes, we will notify you via email or an in-app notification. We encourage you to review this page periodically. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

For any privacy-related questions, data requests, or concerns, please reach us at: ziadakamao@gmail.com