Last updated:
Privacy Policy
This Privacy Policy explains what personal data BOLIAPP Private Limited collects when you use BoliApp, why we collect it, who we share it with, how long we keep it and the choices you have. We do not sell your personal data.
1. Who we are and what this policy covers
BoliApp is an online marketplace operated by BOLIAPP Private Limited, a private limited company incorporated in Pakistan and based in Lahore, Punjab ("BoliApp", "we", "us" or "our"). "BOLIAPP" is our registered trademark. We are responsible, as data controller, for the personal data described in this policy.
This policy applies to the BoliApp website at boli-app.com, our mobile apps when they are released, and any related services, emails and notifications that link to it (together, the "Service"). It covers everyone who uses the Service, whether you are browsing, buying, selling, bidding, posting a job or property, or contacting our support team.
This policy should be read together with our Terms of Service (/legal/terms-of-service) and our Cookie Policy (/legal/cookie-policy). By using the Service you acknowledge that your personal data will be handled as described here.
2. Information you give us
Most of the information we hold comes directly from you when you create an account, set up your profile, list an item or interact with other users. A single BoliApp account can be used both to buy and to sell.
- Account details: your full name, email address, mobile phone number (verified by a one-time password sent by SMS) and password. Passwords are stored only in hashed form; we cannot see them.
- Profile details: username, profile photo, bio, and your city, region and country.
- Listings: the products, property for sale or rent, jobs and services you post, including titles, descriptions, prices, categories, photos and location.
- Marketplace activity: bids in timed and live auctions, offers, fixed-price purchases, orders, saved items, stores you create, reviews you write and reports you submit about listings or users.
- Communications: messages you send and receive through in-app chat, and the content of support tickets and other correspondence with us.
- Payments and wallet: records of transactions, wallet balances, payouts and refunds. Where online payments are offered, your card or mobile-wallet credentials are entered with our licensed payment provider and are not stored by BoliApp.
- Verification: where we ask a seller to verify their identity, the information submitted for that purpose and the resulting verification status.
3. Information we collect automatically
When you use the Service, we and our service providers automatically collect certain technical and usage information. This helps us keep your account secure, prevent fraud and improve the Service.
- Log-in, session and device data: IP address, browser type and user agent, operating system, device identifiers, log-in times and session records. We use this to detect sign-ins from new devices and alert you.
- Usage data: pages and listings you view, searches you make, features you use, and the time and date of your activity.
- Location: an approximate location based on your IP address and the city you choose. If you allow it in your browser, we also use your device's precise location to show listings near you; you can switch this off at any time in your browser or device settings.
- Notification data: device and push-notification tokens used to send you alerts through Firebase Cloud Messaging.
- Cookies and similar technologies: as described in section 10 and in our Cookie Policy.
4. Information we receive from others
We also receive personal data about you from third parties in the following cases:
- Sign-in providers: if you sign in with Google, Facebook or Apple, the provider shares your name, email address, profile photo and a provider account ID with us, according to the permissions you approve. We do not receive your password for those services.
- Payment providers: when you pay or are paid through a licensed payment provider such as JazzCash, EasyPaisa, a card processor or a bank, we receive confirmation of the transaction, its amount and status, and limited reference details.
- Other users: other users may give us information about you, for example when they leave a review, send you a message or report a listing or account.
- Advertising and analytics partners: information about how our ads and pages perform, as described in sections 9 and 10.
5. How we use your information
We use personal data only for the following purposes:
- To create and manage your account, verify your email and phone number, and keep you signed in.
- To run the marketplace: publishing your listings, processing bids, offers and orders, running auctions, connecting matched buyers and sellers, and enabling chat, stores and reviews.
- To process payments, wallet transactions, payouts and refunds where BoliApp-held payments are available.
- To calculate your BoliTrust trust score and show it to other users, based on factors such as verification status, reviews, transaction history and reports.
- To keep the Service safe: detecting and preventing fraud, scams, spam, fake listings and account takeovers, enforcing our Terms of Service, and investigating reports.
- To provide AI-powered features, including price suggestions, scam and risk checks, smarter search, image enhancement and automated moderation of listings and chat messages. Automated moderation may flag or hold content for review by our team; you can contact us if you believe a decision about your content or account is wrong.
- To send you service messages (such as bid, offer, order, chat and security alerts) by email, SMS and push notification, and, if you agree, marketing messages about BoliApp.
- To provide customer support and respond to your requests.
- To show advertising on the website, including through Google AdSense, as described in section 9.
- To analyse how the Service is used, fix problems and develop new features.
- To comply with our legal obligations, including tax and accounting rules and lawful requests from authorities, and to establish or defend legal claims.
6. Our legal grounds and your consent
We process your personal data where it is necessary to provide the Service you have asked for and to perform our agreement with you; where we have a legitimate interest, such as keeping the marketplace safe, preventing fraud and improving our features; where we must do so to comply with the law; and where you have given us your consent, for example for precise location, marketing messages or, where the law requires it, personalised advertising cookies.
Where we rely on your consent, you may withdraw it at any time. Withdrawing consent does not affect processing that took place before you withdrew it.
Pakistan does not yet have a comprehensive personal data protection law in force. We handle personal data in line with applicable Pakistani law, including the Prevention of Electronic Crimes Act 2016 and the Electronic Transactions Ordinance 2002, and with internationally recognised privacy principles. We will update this policy and our practices when a personal data protection law comes into force in Pakistan.
7. What other users can see
BoliApp is a public marketplace, so some of your information is visible to others. Please think carefully before including personal details in listings, photos or public reviews.
- Your public profile shows your name or username, profile photo, bio, BoliTrust score, reviews, active listings and store, and the date you joined.
- Your city or region is shown on your profile and listings by default. You can hide your location in Settings → Privacy (boli-app.com/settings/privacy).
- Your phone number is shown publicly only if you choose to display it. You control profile and contact visibility in Settings → Privacy.
- When you bid in an auction, the bid amount and your name or username may be visible to other users viewing that auction.
- When a buyer and seller are matched on a deal (for example, an accepted offer or a won auction), we share the contact details needed to complete the deal with the other party.
8. How we share your information
We do not sell your personal data. We share it only in the following circumstances:
- With other users, as described in section 7, so that deals can be completed.
- With service providers who process data on our behalf and under our instructions, including cloud hosting, email and SMS delivery, push notifications (Google Firebase), payment processing, sign-in providers (Google, Facebook and Apple) and analytics. They are only allowed to use your data to provide services to us.
- With licensed payment providers such as JazzCash, EasyPaisa, card processors and banks, to process payments, payouts and refunds.
- With advertising partners, including Google, as described in section 9.
- With law enforcement agencies, courts, regulators or other public authorities when we are required to do so under applicable Pakistani law, including the Prevention of Electronic Crimes Act 2016, and only in response to a valid legal process, or where disclosure is necessary to protect someone from serious harm.
- With professional advisers such as lawyers, auditors and insurers, where necessary.
- With a buyer, investor or successor if BoliApp is involved in a merger, acquisition, financing or sale of assets, in which case your data will remain protected by this policy or an equivalent one.
- With anyone else when you have asked us to or have given your consent.
9. Advertising and Google AdSense
BoliApp shows advertisements on its website using Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website and other websites on the internet.
Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to BoliApp and/or other sites on the internet. Google and its partners may collect information such as your IP address, browser and device details, and the pages you visit for this purpose.
You can learn how Google uses information from sites that use its services at https://policies.google.com/technologies/partner-sites. Where the law requires it, we ask for your consent before personalised advertising cookies are used. If you do not consent or opt out, you may still see ads, but they will be less relevant to you.
- Opt out of personalised advertising from Google by visiting Google Ads Settings at https://adssettings.google.com.
- Opt out of some third-party vendors' use of cookies for personalised advertising by visiting www.aboutads.info.
- Block or delete cookies in your browser settings, as explained in our Cookie Policy (/legal/cookie-policy).
10. Cookies and similar technologies
We use cookies, local storage and similar technologies to keep you signed in, protect your account, remember your preferences (such as language and light or dark theme), measure how the Service is used and support advertising.
Some of these are strictly necessary for the Service to work; others can be controlled through your browser and the advertising choices described in section 9. Full details are in our Cookie Policy (/legal/cookie-policy).
11. Where your data is processed
BoliApp is operated from Pakistan, but some of our service providers, including cloud hosting, messaging and analytics providers, may store or process your personal data on servers located outside Pakistan.
When this happens, we take steps to make sure your data receives an appropriate level of protection, for example by choosing reputable providers, requiring contractual confidentiality and security commitments, and limiting access to what is needed to provide the service.
12. How long we keep your data
We keep your personal data for as long as your account is active and as long as needed to provide the Service to you.
When you delete your account, or when we no longer need your data, we delete or anonymise it. However, we may keep certain records for longer where this is necessary for legal, tax or accounting obligations, to prevent fraud and abuse (for example, to stop banned users from re-registering), or to resolve disputes and enforce our agreements. Listings, reviews and messages you shared with other users may remain visible to them in anonymised form.
13. How we protect your data
We use technical and organisational measures designed to protect your personal data, including encryption of data in transit using TLS, hashing of passwords, access controls that limit staff access to those who need it, monitoring for suspicious activity and alerts when your account is accessed from a new device.
No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. You can help by using a strong, unique password, keeping your one-time passwords private, and never sharing payment details or OTPs in chat. If you believe your account has been compromised, contact us immediately.
14. Your rights and choices
You have control over your personal data. To exercise any of the rights below, use the settings in your account or contact us at boli-app.com/help/contact or info@boliapp.pk. We may need to verify your identity before acting on a request, and we will respond within a reasonable time.
- Access: ask for a copy of the personal data we hold about you.
- Correction: update or correct your profile and account details at any time, or ask us to correct information you cannot change yourself.
- Deletion: request deletion of your account and personal data, subject to the records we must keep as described in section 12.
- Privacy settings: control who can see your profile, location and contact details in Settings → Privacy (boli-app.com/settings/privacy).
- Marketing: withdraw your consent to marketing messages at any time using the unsubscribe link in our emails or your account settings.
- Notifications: choose which email and push notifications you receive in your notification preferences or device settings.
- Personalised ads: object to personalised advertising using Google Ads Settings, www.aboutads.info or your browser settings, as described in section 9.
15. Children
The Service is intended only for people aged 18 and over. We do not knowingly collect personal data from children under 18, and children may not create an account or use the Service.
If you believe a child has provided us with personal data or is using BoliApp, please contact us at boli-app.com/help/contact or info@boliapp.pk. We will investigate and delete the account and data where appropriate.
16. Changes to this policy and how to contact us
We may update this Privacy Policy from time to time to reflect changes to the Service or to the law. We will post the updated version on this page with a new "last updated" date and, if the changes are significant, we will notify you by email or through the Service before they take effect.
If you have any questions or complaints about this policy or how we handle your personal data, please contact BOLIAPP Private Limited, Lahore, Punjab, Pakistan, through boli-app.com/help/contact or by email at info@boliapp.pk.