Rider & Merchant Privacy Notice

1. Who This Notice Covers

This notice is issued by Jointt (Private) Limited (“Jointt”, “we”), company registration number 0336117, NTN J015187, Suite 502, Bali Business Boulevard, DHA Phase 2 EXT, Karachi 75500, Pakistan. It applies to:

• Riders who deliver Jointt orders using the Jointt Rider app; and
• Merchant staff at our brand partners who accept, pack and hand over orders using the Jointt Merchant app.

Shoppers are covered by our separate Privacy Policy. Where you are engaged under a rider or brand-partner agreement, that agreement applies alongside this notice.

2. Riders — What We Collect

3. Rider Location — Including in the Background

• When it runs: tracking starts when you go online for a shift and stops when you go offline. Nothing is collected while you are offline, and you can go offline at any time from the home screen.
• Why background access: a delivery does not pause when your screen locks or you switch to the maps app. A persistent notification is shown whenever tracking is running. The “allow all the time” permission is used for one purpose only — to resume tracking automatically if your phone restarts in the middle of a shift, so you do not silently drop out of dispatch.
• Who sees it: Jointt dispatch and support staff; the customer whose order you are carrying, as a live position on their tracking map during that delivery only; and the brand partner, as an arrival estimate. Location is never shared with advertisers.
• Your choice: you can decline background permission and still ride — tracking will then work while the app is open or in the foreground service, but will not restart by itself after a reboot. You can change the permission at any time in your phone settings.
• Retention: route history is kept for 12 months for earnings, dispute and safety purposes, then deleted or anonymised.

4. Merchant Staff — What We Collect

• Your name, phone number and the store or branch you work at, so we can create your login and route orders to you.
• Orders you accept, pack and hand over, the OTPs confirmed at pickup, and the time each step took.
• Cash received from riders on COD orders and refunds you process.
• Device model, OS version, app version, push-notification token, and crash logs.

The Merchant app does not collect your location, contacts or photos.

5. How We Use This Data

• To verify that you are eligible to work with Jointt and to comply with our legal obligations.
• To dispatch orders, coordinate pickup and delivery, and verify handovers with OTPs.
• To calculate and pay earnings and settle cash, and to keep accounting records.
• To send you order offers, shift and payout notifications, and support messages by push notification, SMS, WhatsApp or phone.
• To keep riders, merchant staff and customers safe, investigate complaints and incidents, and prevent fraud.
• To fix crashes and improve the apps.

6. Who We Share It With

• Customers: see a rider's first name, photo, vehicle and live position during their delivery, and can call the rider through the app for that order.
• Brand partners: see the rider assigned to each order and their arrival estimate. Riders see the store address and the merchant contact for pickup.
• Banks and payment providers: to pay rider earnings and reconcile COD cash.
• Platform providers: Google Cloud (hosting), Google Firebase (notifications, crash reporting, app integrity), Google Maps (routing), and Meta (WhatsApp messages). Each processes data only on our instructions and may do so on servers outside Pakistan under contractual safeguards.
• Authorities: where the law requires it, or in response to a valid legal request, or to protect someone's safety.

We never sell your personal data.

7. How Long We Keep It

8. Your Rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it once your engagement with Jointt has ended and the retention periods above have run. You can update your profile and bank details in the app. To exercise any right, or to ask us to delete your account, email privacy@jointt.pk from the phone number or email on your account; we respond within 30 days. Complaints go to the same address, and if you are not satisfied you may raise the matter with the relevant authority in Pakistan.

9. Security & Changes

Data is encrypted in transit and at rest, access is limited to staff who need it, and the apps sign you in by one-time password. We will update this notice when our practices change; the date at the top always reflects the current version, and we will tell you in the app before any material change takes effect.