Privacy Policy

Himmat Karo is built with privacy at its core. We understand that many users are in sensitive situations — your safety and confidentiality are our top priority.

We will NEVER sell your personal data to third parties. Period.

We use your information only to:

• Provide and improve the Platform's features
• Personalize your experience (e.g., language preference, chat history)
• Send important account-related notifications (password resets, security alerts)
• Ensure the safety and security of the Platform
• Improve Dost AI's ability to provide helpful responses

We do NOT use your data for advertising, marketing to third parties, or any purpose unrelated to providing the service.

We understand that many users may be in dangerous or sensitive situations. We have built these safety features:

• Quick Exit button: Instantly redirects to Google — no browser history traces
• No SMS/email notifications by default: We won't send messages that could put you at risk
• Anonymous community participation: Post in Himmat Circle without revealing your real name
• No social login tracking: We don't share your activity with social platforms
• Encrypted connections: All data is transmitted over secure HTTPS

• Your data is stored on secure, encrypted servers
• Passwords are encrypted using industry-standard bcrypt hashing
• We use CSRF protection on all forms
• Regular security audits and updates
• Budget data is stored in your browser's localStorage — it never leaves your device unless you choose to back it up

• Account data: Kept as long as your account is active
• Chat history: Stored to improve AI responses, can be cleared by you at any time
• Community posts: Retained for community value, can be deleted upon request
• Budget data: Stored only in your browser — you have full control
• After account deletion: All personal data is permanently removed within 30 days

You have the right to:

• Access: View all data we have about you
• Correct: Update any inaccurate information
• Delete: Request complete deletion of your account and data
• Export: Download a copy of your data
• Clear chat: Delete your Dost AI conversation history at any time
• Opt out: Disable analytics tracking

To exercise any of these rights, contact us through the platform.

We use only essential cookies:

• Session cookie: Keeps you logged in during your visit
• CSRF token: Protects against cross-site request forgery
• Language preference: Remembers your language choice (EN/Urdu/Roman)

We do NOT use advertising cookies, tracking pixels, or third-party analytics cookies.

The Platform may contain links to external resources (government portals, helplines, shelters). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies independently.

Google OAuth (if used for login) is governed by Google's own privacy policy. We only receive your name and email address — nothing else.

The Platform is designed for adults (18+). We do not knowingly collect data from children under 18. If we discover that a minor has created an account, we will delete their data immediately.

We may update this Privacy Policy occasionally. Any changes will be posted on this page with an updated date. We will notify registered users of significant changes via email or in-platform notification.

For privacy-related questions or requests, please reach out through the platform.

Remember: Your safety comes first. If you are in immediate danger, close this page quickly using the Quick Exit button and call 15 (Police), 1043 (Women Helpline), or 115 (Edhi).