Privacy Policy

1. Introduction

Waymate ("Waymate," "we," "us," or "our") operates a subscription-based carpooling platform that connects verified Ride Hosts and Passengers for recurring shared commutes in Pakistan. Our mobile applications (iOS and Android), website at waymate.pk, administrative systems, and all associated services are collectively referred to as the "Services."

This Privacy Policy explains, in detail, what personal information we collect, why we collect it, how we use and share it, how long we keep it, and what rights you may have under applicable law. Waymate operates solely as a technology intermediary connecting independent users; nothing in this Policy creates a duty of care, safety guarantee, or liability for user conduct, trips, or criminal acts.

This Policy applies to all individuals who interact with Waymate, including Ride Hosts, Passengers, website visitors, support correspondents, referral participants, and individuals whose data is submitted to us by another user (for example, emergency contacts or individuals named in a live-tracking share link).

This Privacy Policy must be read together with our Terms of Use, which govern your use of the Services and contain extensive limitations of liability, indemnification, and release provisions. In the event of any conflict between this Policy and the Terms regarding liability, accountability, or remedies, the Terms of Use prevail.

2. Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

"Personal Information"

means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual, including as defined under applicable data protection laws in Pakistan and any other jurisdiction that applies to our processing activities.

"Sensitive Personal Information"

includes government-issued identification documents (such as CNIC), biometric or likeness data (such as selfies used for verification), precise geolocation data, financial or payment-related identifiers, and any other category of data that applicable law treats as sensitive or requiring heightened protection.

"Ride Host" or "Host"

means a user who publishes trips, operates a vehicle, and offers seats to Passengers through the Services.

"Passenger"

means a user who searches for, requests, or books seats on trips published by Hosts.

"User" or "you"

means any individual who registers for, accesses, or uses the Services in any capacity.

"Processing"

means any operation performed on Personal Information, including collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.

"Data Controller"

means the entity that determines the purposes and means of Processing Personal Information. For the Services, Waymate is the Data Controller unless otherwise stated.

"Third Party"

means any person or entity other than Waymate, the User, and Waymate's service providers acting on our instructions.

3. Scope & Applicability

This Privacy Policy applies to Personal Information Processed by Waymate in connection with:

• Registration, authentication, and account management via phone number and one-time passwords (OTP);
• Onboarding, identity verification, and document review workflows;
• Trip creation, search, booking, seat selection, and recurring route subscriptions;
• Live trip tracking, GPS location recording, proximity alerts, and third-party tracking share links;
• In-app messaging between Hosts and Passengers;
• Ratings, reviews, safety flags, and support tickets;
• Subscriptions, WayPoints (virtual currency), referral programs, and in-app advertising;
• Push notifications, WhatsApp OTP and transactional messaging;
• AI-assisted customer support chat; and
• Our website, marketing pages, and administrative back-office systems.

This Policy does not apply to information that you choose to share outside the Services (for example, exchanging personal phone numbers in person during a trip, or communicating through third-party messaging apps). Misuse of information by other users is the responsibility of those users, not Waymate, subject to the limitations in Section 24 and our Terms of Use.

4. Data Controller Information

The Data Controller responsible for your Personal Information is Waymate (Private) Limited, a company incorporated in Pakistan and operating the Waymate carpool platform.

For data protection inquiries, rights requests, or complaints, please contact us at privacy@waymate.pk. We will respond within the timeframes set out in Section 17 and Section 26.

5. Information We Collect

We collect Personal Information in the categories described below. The specific data collected depends on whether you use Waymate as a Host, Passenger, or both, and on the permissions you grant.

5.1 Account & Profile Information

• Mobile phone number (required for account creation and authentication);
• First name and last name;
• Gender (used for seat-map display and trip matching preferences);
• Usage role (Passenger, Host, or both);
• Email address (if provided);
• City or location preference;
• Profile picture;
• Referral code and referral relationship data;
• Verification badges (verified Passenger, verified Host);
• Account status (active, deactivated, deleted);
• Ratings and review aggregates (host rating, passenger rating, and counts).

5.2 Identity Verification Documents

For Hosts and Passengers seeking verified status, we collect and store:

• Computerized National Identity Card (CNIC) — front and back images;
• Live or uploaded selfie for identity matching;
• Driving license (required for Host verification);
• Character certificate (where applicable);
• Document verification status, review timestamps, and administrative notes.

5.3 Vehicle Information (Hosts)

• Vehicle type, brand, model, variant, year, and color;
• Registration number, engine number, and chassis number;
• Passenger capacity, total seats, available seats, helmet availability;
• Vehicle features and safety attributes;
• Vehicle photographs (front and back);
• Owner notes and default vehicle designation.

5.4 Trip, Route & Booking Data

• Trip names, departure times, recurrence patterns, and operating days;
• Start and end location labels, coordinates, route polylines, and distance/duration estimates;
• Price ranges, seat availability, gender preferences, and comfort features;
• Trip requests, booking confirmations, seat positions, agreed fares, and cancellation records;
• Booking series for recurring commutes;
• Trip run status, start/completion timestamps, and session records;
• Pickup and drop-off coordinates for passenger sessions;
• Search snapshots captured at the time of booking or request.

5.5 Location & GPS Data

• Real-time GPS coordinates during active Host trip runs (latitude, longitude, speed, heading, accuracy, and timestamp);
• Append-only location chunks forming a full GPS trail for completed trips;
• Last known location of active trips;
• Traveled route polylines after trip completion;
• Proximity event data (for example, when a Host is within a defined distance of a Passenger pickup point);
• Device location permissions status and related technical metadata.

5.6 Communications Data

• In-app chat messages (text and images) between Hosts and Passengers;
• Message delivery and read receipts;
• Conversation metadata (titles, status, timestamps, unread counts);
• WhatsApp OTP codes and delivery status (we store hashed OTP values, not plaintext codes);
• WhatsApp webhook events and message metadata where applicable;
• Push notification tokens (Expo push token and platform identifier);
• In-app notification history.

5.7 Safety, Reviews & Support Data

• Trip reviews (scores, tags, and comments) submitted by Hosts and Passengers;
• Safety flags (including categories such as harassment, dangerous driving, no-show, smoking, misbehavior, fake profile, and vehicle mismatch);
• Support tickets (subject, message, category, emergency flag, and associated trip references);
• AI support chat conversations, messages, and tool-call logs;
• Profile field change history (name, email, city edits).

5.8 Payment, Subscription & Monetization Data

• Subscription plan, price, trial price, start/end dates, and status;
• WayPoints ledger transactions (earnings, redemptions, booking fees, referral rewards, ad rewards, admin adjustments);
• Waypoint purchase records and package selections;
• Payment processor transaction references (we do not store full payment card numbers on our servers);
• Ad interaction data where rewarded or banner advertisements are displayed.

5.9 Live Tracking Share Data

• Share tokens, creation timestamps, expiry and revocation records;
• Track anchor coordinates and timestamps for shared views;
• Identity of the user who created the share link;
• Access logs related to shared tracking URLs where technically feasible.

5.10 Technical & Device Information

• Device type, operating system, and app version;
• IP address, network information, and general device identifiers;
• Crash logs, diagnostic data, and performance metrics;
• Authentication session data and security event logs;
• Onboarding step completion records and associated JSON payloads.

6. How We Collect Personal Information

We collect Personal Information through the following means:

6.1 Directly From You

When you register, complete onboarding, upload documents, create trips or vehicles, send messages, submit reviews, purchase subscriptions, contact support, or otherwise interact with the Services.

6.2 Automatically

When you use the app with location permissions enabled, receive push notifications, view advertisements, or when our systems log technical events necessary for security and service delivery.

6.3 From Other Users

When a Host or Passenger initiates a trip request, booking, chat conversation, review, or safety report that references your account or trip session.

6.4 From Third-Party Service Providers

Including identity verification partners, cloud hosting providers, mapping and routing services, payment processors, WhatsApp Business API providers, push notification services, and advertising networks—solely to the extent necessary to provide the Services.

6.5 From Referral Links

When you sign up using another user's referral code, we record the referring user's identity in association with your account.

7. Purposes & Legal Bases for Processing

We Process your Personal Information for the following purposes. Where applicable law requires a legal basis, we rely on one or more of: contractual necessity (to provide the Services you request), legitimate interests (to operate, secure, and improve the platform, balanced against your rights), legal obligation, and consent (where required, such as for certain optional features or marketing).

We do not sell your Personal Information to third parties for their independent marketing purposes. We do not use your identity verification documents for advertising. We do not permit Hosts or Passengers to download another user's verification documents through the consumer-facing application.

8. Identity Verification & Sensitive Documents

Waymate may collect CNIC images, selfies, driving licenses, and other verification documents as described in Section 5. When you submit such documents, you consent to our collection, storage, review, and Processing solely for account identification, fraud prevention, and locating accounts involved in reports or lawful investigations—not as a safety guarantee or background check.

You expressly acknowledge that:

• Verification documents are used to identify user accounts and assist in locating accounts referenced in incidents or lawful requests;
• A "verified" badge does not mean Waymate guarantees a user's identity, character, criminal history, driving competence, or safety;
• Waymate does not warrant that submitted documents are genuine or that verification detects fraud or criminal intent;
• Verification documents are not displayed in full to other users in the consumer application;
• We may retain verification records as described in Section 16;
• Waymate bears no responsibility or liability for any harm caused by a user who submitted false documents or who passed verification, including theft, assault, or any criminal conduct during or related to trips.

Submitting false, forged, or misleading verification documents is prohibited and may result in account termination and referral to authorities. Waymate may provide account and document records to law enforcement where permitted by law; such cooperation does not admit liability or create any duty to compensate affected parties.

9. Location Data & Live Tracking

Location data is essential to Waymate's carpooling functionality. When a Host starts a trip run, the app may collect continuous or periodic GPS samples that are transmitted to our servers and associated with the active trip session.

9.1 What Location Data Is Collected

During active trip runs, we may collect latitude, longitude, speed, heading, accuracy estimates, and timestamps. After trips complete, we may store a merged polyline representing the traveled route.

9.2 Who Can See Location Data

• Passengers with confirmed bookings on the active trip may view live Host location during the trip run through the app;
• Users who create tracking share links may share live tracking with third parties via tokenized URLs, subject to expiry and revocation controls;
• Waymate personnel may access location data for safety investigations, support, fraud prevention, and legal compliance;
• Location data is not made publicly searchable or published on open directories.

9.3 Your Controls

You may revoke location permissions at the device level; however, certain features (including hosting trips with live tracking) will not function without location access during active trip runs. You may revoke tracking share links before their expiry where the app provides revocation controls.

9.4 No Liability for Location Data

Location and tracking features are provided on an "as is" basis for user convenience. Waymate does not guarantee the accuracy, continuity, or security of GPS data. You use location features and share tracking links at your own risk. Waymate is not liable for unauthorized access to location data caused by other users, share-link recipients, device compromise, or user error, except where liability cannot be excluded under mandatory applicable law. See Section 24 and our Terms of Use.

10. Communications Data

10.1 In-App Chat

Trip-scoped chat enables Hosts and Passengers to coordinate pickups, timing, and trip details. Messages may include text and images. We store message content, timestamps, delivery/read status, and participant identifiers.

10.2 Monitoring & Safety Review (Discretionary)

Waymate may, but is not obligated to, access, monitor, review, or retain chat messages where we deem it useful to respond to legal process, enforce our Terms of Use, or address reported violations. We may use automated tools to flag content. Any review or enforcement action is discretionary and does not create an ongoing duty to monitor communications or prevent harm. Waymate is not liable for chat content, user misconduct in chat, or failure to detect or act on messages.

10.3 WhatsApp & SMS

We use WhatsApp and/or SMS channels to deliver OTP codes and transactional messages. Message delivery metadata may be logged. WhatsApp inbound webhook events may be stored for troubleshooting and compliance.

10.4 Push Notifications

We store push tokens to deliver trip alerts, booking updates, proximity notifications, and service announcements. You may disable push notifications through device settings; however, critical safety or account messages may still be delivered through other channels where necessary.

11. Payments, Subscriptions & WayPoints

Waymate offers subscription plans and an internal virtual currency called WayPoints. Payment processing is handled by third-party payment providers. We receive confirmation of payment status and limited transaction metadata but do not store full payment card numbers on our servers.

We Process payment-related information to:

• Activate and renew subscriptions;
• Process WayPoint purchases and redemptions;
• Apply booking fees and issue refunds in WayPoints where applicable;
• Administer referral rewards and promotional credits;
• Detect billing fraud and resolve payment disputes.

WayPoints have no cash value outside the Services unless expressly stated. Transaction histories are retained for audit, dispute resolution, and monetization integrity.

12. How We Share & Disclose Personal Information

We may share Personal Information in the following circumstances:

12.1 With Other Users (Platform-Mediated Sharing)

When you participate in trips, certain profile and trip information is visible to matched Hosts or Passengers as described in Section 13.

12.2 With Service Providers

We engage trusted vendors for cloud hosting, database management, identity verification, mapping, payment processing, messaging, push notifications, analytics, and customer support. These providers Process data on our instructions and under contractual confidentiality and security obligations.

12.3 For Legal Reasons

We may disclose information when we believe in good faith that disclosure is necessary to comply with applicable law, regulation, legal process, or enforceable governmental request; to protect the rights, property, or safety of Waymate, our users, or the public; or to detect and prevent fraud or security issues.

12.4 Business Transfers

If Waymate is involved in a merger, acquisition, financing, reorganization, or sale of assets, Personal Information may be transferred subject to confidentiality arrangements and notice to users where required by law.

12.5 With Your Direction

When you create a live tracking share link or explicitly authorize a disclosure through in-app features.

We do not sell Personal Information. We do not share CNIC or raw verification document images with other users through the app.

13. Inter-User Data Exposure & Trip Context

Because Waymate connects individuals who share physical commutes, certain Personal Information is necessarily visible to other users. You should understand the following defaults:

13.1 Visible to Matched Hosts & Passengers

• First name, profile photo, ratings, and verification badge status;
• Trip details including route labels, departure time, seat selection, and booking status;
• Live location (Host) during active trip runs for confirmed Passengers;
• Chat messages sent within the trip conversation;
• Phone numbers may be disclosed in limited circumstances (for example, active trip coordination or support escalation) as implemented in the Services from time to time.

13.2 Not Visible to Other Users

• Full CNIC numbers and verification document images;
• Full driving license images;
• Payment card details;
• Hashed OTP codes and authentication secrets;
• Complete historical GPS trails except as authorized for active trip context or share links.

13.3 Your Responsibilities

You are solely responsible for your use of information about other users. You agree not to misuse information obtained through the Services, including using another user's phone number, location history, or chat content for harassment, stalking, unsolicited marketing, discrimination, theft, or any unlawful purpose. Violations may result in account termination and referral to authorities.

13.4 No Waymate Liability for Inter-User Data Misuse

Waymate facilitates limited data sharing between matched users as necessary for carpool coordination. Waymate is not responsible or liable for how users collect, use, disclose, or misuse each other's Personal Information before, during, or after trips—including criminal use of such data for theft, stalking, fraud, or violence. Remedies for inter-user harm lie against the offending user(s) and applicable authorities, not against Waymate, except where mandatory law provides otherwise.

14. User Conduct & Discretionary Platform Actions

Waymate is a technology platform that enables users to connect for shared commutes. Waymate does not supervise trips, guarantee user behavior, or assume responsibility for user interactions. We may, at our sole discretion and without obligation, take actions such as:

• Operating identity verification workflows (without guaranteeing outcomes);
• Reviewing safety flags or support reports;
• Suspending or terminating accounts that violate our Terms of Use;
• Preserving records for lawful requests;
• Providing in-app reporting channels (which are not emergency services);
• Cooperating with law enforcement when legally required or voluntarily, without admission of liability.

The availability of these features does not impose on Waymate any duty to prevent crime, investigate every report, or protect users from harm. Failure to take action against a user does not create liability for Waymate. Users participate in trips and share data entirely at their own risk, as set out in our Terms of Use.

15. Data Security Measures

We implement administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, alteration, disclosure, or destruction. These measures include, where appropriate:

• Encryption of data in transit using TLS/HTTPS;
• Encryption at rest for sensitive categories including verification documents;
• Role-based access controls and authentication for administrative systems;
• Hashed storage of OTP codes with limited validity windows;
• Tokenized live tracking share URLs with expiry and revocation support;
• Logging and monitoring of administrative access;
• Vendor security assessments for material subprocessors;
• Employee and contractor confidentiality obligations.

We implement reasonable safeguards designed to protect Personal Information; however, no system is completely secure. Waymate does not guarantee that Personal Information will never be accessed, disclosed, altered, or destroyed by unauthorized parties. To the maximum extent permitted by law, Waymate disclaims liability for security incidents except where notification or other response is strictly required by applicable law. See Section 23 and Section 24.

16. Data Retention

We retain Personal Information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law.

When you request account deletion, we will deactivate your account and delete or anonymize Personal Information within a reasonable period, except where retention is necessary for legal compliance, fraud prevention, outstanding disputes, or safety investigations. Residual copies may persist in encrypted backups for a limited period before automated purging.

17. Your Privacy Rights

Subject to applicable law, you may have the following rights regarding your Personal Information:

• Access: Request confirmation of whether we Process your Personal Information and obtain a copy of certain data we hold about you;
• Correction: Request correction of inaccurate or incomplete Personal Information;
• Deletion: Request deletion of your account and associated Personal Information, subject to lawful retention exceptions;
• Restriction: Request restriction of Processing in certain circumstances;
• Portability: Request a structured, commonly used, machine-readable copy of certain data you provided to us;
• Withdrawal of consent: Where Processing is based on consent, withdraw consent at any time without affecting the lawfulness of prior Processing;
• Objection: Object to Processing based on legitimate interests where applicable law provides this right;
• Complaint: Lodge a complaint with a supervisory authority or regulator where applicable.

17.1 How to Exercise Your Rights

Submit requests to privacy@waymate.pk from the email address associated with your account or through in-app support. We may verify your identity before fulfilling requests. We aim to respond within 30 days of receipt; complex requests may require an extension with notice.

17.2 Limitations

We may decline requests where fulfillment would impair the rights of others, interfere with active safety investigations, violate legal retention obligations, or where the request is manifestly unfounded or excessive. We will explain the basis for any denial where required by law.

18. Children's Privacy

The Services are intended for individuals who are at least 18 years of age. We do not knowingly collect Personal Information from children under 18. If we learn that we have collected Personal Information from a child under 18 without verifiable parental consent, we will take steps to delete that information promptly. If you believe a minor has provided us with Personal Information, contact privacy@waymate.pk.

19. International Data Transfers

Waymate is based in Pakistan and primarily stores and Processes data within Pakistan or with cloud service providers that may maintain servers in other countries. Where Personal Information is transferred across borders, we implement appropriate safeguards such as contractual data protection clauses with vendors, access minimization, and encryption to protect your information in line with this Policy.

By using the Services, you acknowledge that your information may be Processed in jurisdictions that may have different data protection laws than your country of residence. Waymate uses commercially reasonable measures where applicable but does not accept liability for Processing by third-party infrastructure providers beyond what is required by mandatory law. See Section 24.

20. Third-Party Services & SDKs

The Services integrate third-party services that may collect information according to their own privacy policies, including but not limited to:

• Cloud infrastructure and database providers;
• Mapping, geocoding, and routing services;
• Payment gateways;
• WhatsApp / Meta messaging infrastructure;
• Push notification services (including Expo);
• Mobile advertising networks for banner and rewarded ads;
• Identity verification partners;
• AI/LLM providers for customer support chat.

Waymate engages third-party vendors to operate the Services. Those vendors Process data under their own terms and our contractual arrangements where applicable. Waymate is not liable for acts or omissions of third-party service providers, including data breaches, service outages, or unauthorized disclosure attributable to vendors, except to the minimum extent required by mandatory applicable law. Your remedies regarding third-party Processing may lie against the relevant vendor or offending user, not Waymate.

Links to third-party websites on our marketing site are not governed by this Policy. Review their privacy policies before providing personal information.

21. Cookies & Similar Technologies

Our website may use cookies, local storage, and similar technologies to enable core functionality, remember preferences, measure traffic, and improve user experience. Mobile applications may use analogous device identifiers and analytics SDKs.

Categories of technologies we may use include:

• Strictly necessary: Required for site operation and security;
• Functional: Remember settings and choices;
• Analytics: Understand usage patterns in aggregate;
• Advertising: Deliver and measure in-app ads where enabled.

You may control cookies through browser settings. Disabling certain cookies may limit website functionality. In-app ad personalization may be limited through device-level advertising settings where available.

22. Automated Decision-Making & Profiling

We may use automated Processing for purposes including:

• Fraud detection and duplicate account identification;
• Document verification assistance and status assignment;
• Trip search ranking and route matching;
• Chat or support message classification for safety routing;
• Dynamic booking fee tier assignment based on fare ranges.

We do not make solely automated decisions that produce legal or similarly significant effects without appropriate human review where required by law. If you believe an automated decision adversely affected you, contact privacy@waymate.pk to request human review where applicable.

23. Data Breach Notification

If Waymate becomes aware of a security incident affecting Personal Information, we may take steps we deem appropriate, including investigation and containment. Where notification to users or authorities is strictly required by applicable law, we will comply with those legal requirements. Nothing in this Section expands Waymate's liability beyond Section 24 or our Terms of Use, and notification where provided does not constitute an admission of fault, negligence, or responsibility for any resulting harm.

You acknowledge that data breaches may occur despite reasonable precautions and that Waymate is not liable for incidents caused by third parties, user negligence, or factors outside our control, except as mandatory law requires.

24. Limitation of Liability & No Accountability

This Section aligns with and supplements the limitation of liability, indemnification, assumption of risk, and release provisions in our Terms of Use. In the event of conflict, the Terms of Use govern.

24.1 Platform Intermediary — No Duty of Care

Waymate is a technology intermediary only. We do not provide transportation, employ users, or guarantee the identity, conduct, or safety of any Host, Passenger, or third party. Nothing in this Privacy Policy creates a duty of care, fiduciary duty, safety obligation, or warranty regarding how Personal Information is used by other users or how users behave during trips.

24.2 Identity Documents — Identification Only

CNIC, selfie, driving license, and related verification data are collected and retained solely to identify user accounts and locate accounts involved in reports or lawful investigations. They do not constitute a background check, criminal clearance, or trust endorsement. Waymate is not liable for any harm arising from false documents, failed verification, or reliance on verification badges—including theft, assault, kidnapping, homicide, or any criminal act during or related to a trip.

24.3 Criminal & Inter-User Misuse of Data

Waymate disclaims all liability for criminal or unlawful use of the Services or Personal Information by any user or third party, including using the platform or data obtained through it to commit or facilitate theft, robbery, fraud, stalking, harassment, assault, kidnapping, murder, or any other offense. Full responsibility rests with the perpetrator(s). Waymate's optional cooperation with law enforcement does not imply prior knowledge, fault, or liability, and does not oblige Waymate to compensate victims.

24.4 Trips, Location Data & Physical Harm

Waymate is not liable for any injury, death, emotional distress, property damage, theft of belongings, or other harm occurring during or in connection with trips, pickup/drop-off locations, live tracking, share links, chat messages, or off-platform contact between users—regardless of whether Personal Information was involved.

24.5 Security Incidents & Third Parties

To the maximum extent permitted by applicable law, Waymate is not liable for unauthorized access, disclosure, or loss of Personal Information caused by cyberattacks, vendor failures, user device compromise, share-link misuse, or other events except where liability cannot be excluded by law. Subprocessors and integrated third-party services are independent; Waymate is not responsible for their acts or omissions.

24.6 Cap on Liability

24.7 Indemnification & Release

You agree to indemnify and hold harmless Waymate from claims arising from your use of the Services, your Processing of other users' data, or your participation in trips, as further set out in our Terms of Use. To the fullest extent permitted by law, you release Waymate from all claims related to other users' misuse of Personal Information or criminal conduct connected to the Services.

24.8 No Remedies From Waymate for User Harm

Waymate is not obligated to provide compensation, WayPoints credits, subscription extensions, or other remedies to users affected by another user's conduct, data misuse, or criminal activity. Any enforcement or account action Waymate takes is discretionary and does not create precedent or ongoing duty.

25. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, legal requirements, or operational practices. When we make material changes, we will provide notice through one or more of: in-app notification, email to your registered address, website banner, or updated effective date on this page.

Your continued use of the Services after the effective date of an updated Policy constitutes acceptance of the revised Policy, except where applicable law requires explicit consent for specific changes. If you do not agree to an updated Policy, you must stop using the Services and may request account deletion under Section 17.

We encourage you to review this page periodically. Prior versions may be available upon request to privacy@waymate.pk.

26. Contact, Complaints & Dispute Resolution

For privacy-related questions, rights requests, or complaints, contact:

We will acknowledge complaints within 7 business days and aim to resolve them within 30 days. If you are dissatisfied with our response, you may escalate to applicable regulatory authorities in Pakistan or your jurisdiction where you have standing to complain.

For emergencies during an active trip, contact local emergency services immediately. Waymate support channels are not emergency services and Waymate is not responsible for emergency response or outcomes.

27. Governing Law & Jurisdiction

This Privacy Policy is governed by the laws of the Islamic Republic of Pakistan, without regard to conflict-of-law principles. Disputes relating to this Policy, Personal Information Processing, or liability are subject to the exclusive jurisdiction provisions and dispute resolution terms in our Terms of Use, including limitations of liability in Section 24 above.

Subject to mandatory consumer or data protection rights that cannot be waived by contract, courts located in Lahore, Pakistan shall have primary jurisdiction. You acknowledge that many claims against Waymate related to user conduct, trips, or data misuse are released and barred under Section 24 and the Terms of Use.

If any provision of this Policy is found invalid or unenforceable, the remaining provisions remain in effect. Waymate's failure to enforce any provision does not constitute a waiver.