This policy covers the Al Madinah Meat Market mobile app (package com.zentro.madinameat), operated by Al Madinah Premium Halal Meat Market, Karachi, Pakistan ("we", "us", "the shop"). It explains what we collect when you order meat or book a slaughter or Eid sacrifice service, why we hold it, who else sees it, and what you can ask us to do with it.
If anything here is unclear, contact us using the details at the bottom of this page.
What we collect
1.1 Information you give us
| Category | Details |
|---|---|
| Account | Your name, email address and password (the password is held by Google Firebase Authentication in hashed form — we never see it), and your mobile phone number, which you confirm with a one-time SMS code before your first order or booking. |
| Delivery addresses | A label (e.g. "Home"), recipient name and phone, street address, area, city, any delivery notes you write and, only if you choose "Use my current location", the map coordinates of that address (see §1.3). |
| Orders | The products you bought, the cut and weight, the quantity, the price, any tip, promo code or store credit used, your chosen payment method, and your delivery or pickup slot. |
| Bookings | The service (halal slaughter, Eid sacrifice, charity, Zakat or newborn celebration goat, or an event), the tier and animal, your chosen date and time slot, the address, the map coordinates if you chose to share your location, and any instructions for the butcher. |
| Payment screenshots | If you pay by JazzCash, EasyPaisa or bank transfer, a screenshot of the completed transfer that you pick from your gallery or take with your camera. Shop staff open it to confirm your payment, and we record the transaction ID from it. |
| Refund bank details | If you ask for a refund to be paid by bank transfer (for example on a cash-on-delivery order), the bank name, account title and account number or IBAN you type in. |
| Problem reports and support | Messages you send through the in-app support form or the "Report a problem" option on an order, and the details you give about the problem. |
| Reviews | The star rating and comment you leave on a product you received or a service booking that was completed. Published reviews are visible to other customers. |
| Preferences | Your theme (light/dark), preferred payment method, whether you want push notifications, and whether you want to receive offers and announcements (off unless you turn it on). |
1.2 Information the app produces
- Order and booking history — a count of your orders and bookings and your total spend, so the shop can recognise a regular customer.
- Store credit — a balance you can spend on future orders, for example from a refund you chose to take as credit. Only our servers can change it, never the app itself.
- Notification (FCM) tokens — one per device you sign in on, so we can tell you that an order is on its way or a booking has been confirmed. Removed when a device stops accepting notifications, or when you delete your account.
- Usage and crash information, through Google Analytics for Firebase and Firebase Crashlytics: which screens were opened, a pseudonymous app-instance identifier, your device model and operating-system version, and the technical detail of a crash. This is not tied to your name. The app does not collect the Android Advertising ID.
1.3 Your location — only if you ask for it
The app asks for location permission only when you tap "Use my current location" while adding a delivery address or booking a service. Android lets you choose precise or approximate location. The location is read once, used to fill in the address form, and saved with that address or booking so the rider or butcher can find you.
It is optional — typing your address works just as well. The app never reads your location in the background or at any other time.
1.4 What we never collect
- Card numbers. Card payment is not currently offered in the app. If it is added, card details will be entered on the payment provider's own screen and will never pass through this app or our servers.
- Your wallet or banking PIN or password. You make transfers in your own banking or wallet app; we only see the screenshot you choose to upload.
- Your contacts, calendar, microphone, SMS messages or call logs. The SMS confirmation code is typed in by you or read automatically by Google's verification service — the app does not read your messages.
- Your photo library, beyond the single image you actively pick (a payment screenshot, or, for shop staff only, a product photo). We never browse or scan your gallery.
Why we use it
- To take and deliver your order, and to confirm and carry out your booking — including giving a rider or a butcher the address, location and phone number they need to reach you.
- To confirm your phone number, stop one number being used for several accounts, and protect the shop against fraud and refund abuse.
- To confirm that a transfer you made has actually reached the shop, and to return money when you or the shop cancel an order or booking, a problem is upheld, or a booking cannot be confirmed.
- To tell you what is happening: order accepted, being prepared, out for delivery, delivered; booking confirmed or declined; payment confirmed or a new screenshot needed.
- To let you use store credit and promo codes at checkout.
- To answer your support messages and problem reports, and to let you review what you received.
- To keep the shop's own records, and to meet tax and accounting obligations.
- To find and fix crashes, and to understand which parts of the app are used, so we can improve it.
- Only if you opt in: to send you occasional offers and announcements from the shop by push notification. You can turn this off at any time in your Profile.
We do not sell your information, and we do not use it for third-party advertising or share it with advertisers.
Who else sees it
| Recipient | What they get, and why |
|---|---|
| Google (Firebase) | The app runs on Firebase — sign-in, SMS phone confirmation, database, file storage, push notifications, analytics and crash reporting. Data is processed on Google Cloud infrastructure on our instructions. See Firebase's privacy documentation. |
| Riders and butchers | Receive the delivery address, map location (if you shared one), recipient name and phone for the specific job they are carrying out, and nothing else. |
| Shop staff | Staff accounts are restricted to the areas the owner grants them (e.g. orders, bookings, customers, refunds), including viewing payment screenshots to confirm payment. Every administrative action is written to an append-only audit log. |
| Your bank or wallet provider | We do not send them your data. When you make a transfer, you do so in their app under their own privacy policy. When we pay a refund to you, our bank receives the account details you gave us for that refund. |
| YouTube | Recipe and process videos open in the YouTube app or your browser. We send YouTube nothing about you; what YouTube collects while you watch is governed by Google's privacy policy. |
| Anyone the law requires | We will disclose information where we are legally obliged to, such as in response to a valid court order or tax authority request. |
We do not otherwise sell, rent, or share your personal information with third parties.
How long we keep it
| Data | Retention |
|---|---|
| Your account (name, email, phone, addresses, favourites, preferences, device tokens) | Until you delete your account. |
| Payment screenshots | Until you delete your account. They are removed with it. |
| Orders, bookings and refunds | Kept as business records for as long as tax and accounting rules require, even after an account is deleted. On deletion they are stripped of your name, phone, address, location and bank details (see §6). |
| Support conversations and problem reports | Kept for 2 years after the last message, then deleted automatically. If you delete your account sooner, they are detached from your name and email and kept until that 2-year point, because they are what a refund dispute or fraud claim is decided from. |
| Reviews | Kept while published, and kept anonymously after account deletion (shown as written by a deleted customer). |
| Suspended phone numbers | Only if the shop had suspended your account (for fraud or refund abuse): after the account is deleted, a one-way scrambled form of its phone number is kept for 12 months, then deleted automatically. See §6. |
| Crash and usage data (Firebase Analytics / Crashlytics) | Kept for the retention period Firebase applies, which is at most 14 months. |
Your choices
- Location — optional. Type your address instead, or deny or withdraw the permission in your phone's settings at any time.
- Notifications — turn them off in the app's Profile, or in your phone's system settings for the app.
- Offers and announcements — off unless you turn them on at sign-up or in your Profile, and you can turn them off at any time. Messages about your own orders and bookings are not affected.
- Your details — your name and delivery addresses can be viewed, edited or removed in the app at any time. Changing your phone number requires a new SMS confirmation.
- A copy of your data — contact us and we will provide a copy of the personal data we hold about you.
- Deletion — see §6 below.
Deleting your account
You can permanently delete your account and the personal data attached to it in two ways:
- In the app — go to Profile → Delete my account and confirm. This runs immediately and cannot be undone.
- By email or WhatsApp — if you cannot access the app, send a request from your registered email or phone number. We will verify it is you and complete it within 30 days.
An order still in progress, a booking that has not happened yet, or a refund still being processed must be finished or cancelled first. Any unused store credit is forfeited when the account is deleted.
If the shop had suspended your account, a one-way scrambled form of its phone number is kept for 12 months after deletion. This lets the shop know if a new account is opened with the same number. It cannot be turned back into your number, is not linked to your name or orders, and is deleted automatically after 12 months. An account that was never suspended leaves nothing like this behind.
Full detail on what is deleted, what is legally retained, and how long it takes is on our account deletion page.
Security
- Everything travels over an encrypted (TLS) connection, and is encrypted at rest by Google Cloud.
- The database enforces, on the server, that you can only read and write your own profile, addresses, orders, bookings, favourites and payment screenshots. This is enforced by Firestore and Storage Security Rules, which a modified app cannot bypass.
- Staff accounts are limited to the permissions the owner grants them, and every administrative action is recorded in an append-only audit log that no one, including staff, can edit or delete.
- Role (client / staff / owner) is carried in a server-signed authentication token, never in a document the app itself can write, so no account can promote itself to staff.
No system is perfectly secure, but these are the controls in place.
International data transfer
Firebase stores and processes data on Google Cloud infrastructure. Our database and files are held in Google's Mumbai (asia-south1) region, and some Firebase services such as Analytics, Crashlytics and Authentication may process data in other countries. By using the app, you understand that your information may be processed outside Pakistan under Google's own contractual and security safeguards.
Children's privacy
The app is intended for adults (18 and over) and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will delete it.
Payments
The app currently accepts:
- Cash on delivery, for regular meat orders only.
- JazzCash, EasyPaisa and bank transfer, made by you in your own wallet or banking app to the shop's account shown at checkout. You then upload a screenshot of the completed transfer. Your order or booking is not prepared until the shop has confirmed that the money arrived.
Bookings (slaughter, Eid sacrifice and other services) always require advance payment by transfer. Card payment is not currently offered. We never ask for, see or store your wallet PIN, banking password or card number.
Changes to this policy
If this policy changes, we will update the "Last updated" date at the top of this page. A material change will be announced in the app before it takes effect.
Contact
Al Madinah Premium Halal Meat Market
Operator: Al Madinah Premium Halal Meat Market
Email: contact@almadinahmeatmarket.com
Phone: +92 315 2903994
Address: RJ Mall, Rashid Minhas Rd, Gulistan-e-Johar, Karachi 75050, Pakistan