IMR Privacy Policy

Publisher: IMR Ambulance
Contact: iftikharescue@gmail.com | Online Operations Portal, Lahore, Pakistan
Policy URL: https://lifeline-backend.imr-rescue.workers.dev/privacy
Effective date: 27 September 2026

This policy describes the intended data handling in the IMR applications.

English

Information collected

For a patient booking, IMR processes the contact phone number(s), pickup and destination text and coordinates, emergency situation, requested ambulance type, agreed fare, and trip status. During an active trip, the driver app sends live location and a GPS trail. Patient and driver can exchange text and short voice notes and make internet calls; call metadata such as time, duration and outcome is recorded. The service does not intentionally store call audio or WebRTC media.

Drivers submit their name, phone, address, CNIC and driving-license details, emergency contact, vehicle information, and identity/document images. Admins can see records needed to dispatch, support, verify drivers, investigate a complaint, and keep the service safe.

Why it is used and who can see it

Location is used to find nearby available ambulances, dispatch a suitable vehicle, and show the assigned ambulance during the trip. Before a driver is assigned, the dispatch feed must not expose the patient's phone number or private contact details. During a matched trip, the patient and assigned driver receive the information needed to complete that trip. Authorized IMR administrators can access operational records and driver documents. Other patients and unassigned drivers must not have access.

Retention and deletion

Detailed trip data follows a 90-day limit: GPS points and trip messages/voice notes are deleted once they are 90 days old. Active rides are preserved until they are completed or cancelled. Completed or cancelled ride records are then anonymized when they reach 90 days old by removing the patient's phone, contact numbers, patient token, pickup and destination details, and driver phone; an anonymous service summary (date, status, ambulance type and fare) may remain for reporting and accounting. Records covered by a documented dispute, complaint, or legal hold are preserved until the hold is released. Approved drivers' documents are kept while their account is active and deleted within 90 days after administrative deactivation. Rejected or withdrawn application documents are deleted after 90 days; incomplete applications may be deleted after 14 days. Retention is subject to the live implementation and applicable law.

Administrator messages and push delivery receipt records are kept for up to 90 days. App diagnostic reports are deleted after 30 days and notification inbox items after 60 days. A patient's phone number attached to a session is scrubbed after 90 days without use (or after an expired session is no longer needed); a session credential may remain until its security expiry. Completed data-deletion requests are kept without their phone, token, or free-text details after 90 days. Pending deletion requests and records under an active ride or hold are retained until they can be safely processed.

To request access or deletion, contact iftikharescue@gmail.com and include the phone number used for the trip and, if available, the trip ID. We may need to verify the request and may retain information required for safety, an active dispute/hold, or legal obligations. Drivers can ask for their account and data to be deleted in the IMR Driver app (Settings > Delete account) or at https://lifeline-backend.imr-rescue.workers.dev/delete-account. IMR completes these requests within 7 days: it deletes the document photos, name, phone number, CNIC and licence details and location history, and keeps only anonymous trip records (date, fare, status). Driver applicants may also request withdrawal through iftikharescue@gmail.com.

Security and third parties

Data is sent to the IMR service over HTTPS. Cloudflare provides the server, database, object storage, and live connection infrastructure; Expo may deliver push notifications. Push notifications are designed not to include the patient's phone number, name, or address. No service can promise perfect security; report a suspected privacy issue to iftikharescue@gmail.com.

Roman Urdu

Kaunsi maloomat li jati hai

Patient ki booking ke liye phone number, pickup aur destination ka pata/coordinates, emergency ki qisam, ambulance type, tay-shuda kiraya aur trip status process hota hai. Trip ke dauran driver app live location aur GPS raasta bhejti hai. Patient aur driver text, chhote voice notes aur internet call kar sakte hain. Call ka waqt, duration aur outcome record ho sakta hai; call ki audio ya WebRTC media jaan-boojh kar store nahi ki jati.

Driver apna naam, phone, address, CNIC, driving licence, emergency contact, gaari ki maloomat aur documents ki tasveerain deta hai. Authorized admin dispatch, support, verification aur complaint ki jaanch ke liye zaroori records dekh sakta hai.

Istemaal aur access

Location qareebi ambulance dhoondhne, dispatch karne aur assigned ambulance dikhane ke liye use hoti hai. Driver assign hone se pehle patient ka phone/private contacts dispatch feed mein nahi dikhne chahiye. Match hone ke baad patient aur assigned driver ko trip poori karne ke liye zaroori maloomat milti hai. Doosre patients aur unassigned drivers ko yeh data nahi milna chahiye.

Data kitni dair rakha jata hai

Trip ka tafseeli data 90 din tak rakha jata hai: GPS points aur trip ke text/voice messages 90 din purane honay par delete hote hain. Jaari ride ka data ride complete ya cancel honay tak mehfooz rehta hai. Completed ya cancelled ride 90 din purani honay par patient ka phone, contacts, patient token, pickup/destination ki tafseel aur driver phone hata kar record ko gumnaam kiya jata hai; date, status, ambulance type aur fare ka gumnaam summary reports/hisaab ke liye reh sakta hai. Dispute, complaint ya legal hold wala data hold release honay tak nahi mitaya jata. Approved driver ke documents account active honay tak rehte hain aur admin ke account band karne ke 90 din ke andar delete hote hain. Rejected/withdrawn application ke documents 90 din baad; adhoori application ke documents 14 din baad delete ho sakte hain.

Admin messages aur push delivery receipt records zyada se zyada 90 din rehte hain. App diagnostic reports 30 din aur notification inbox items 60 din baad delete hote hain. Patient session se jura phone 90 din tak istemal na honay par scrub hota hai; security ke liye session credential apni expiry tak reh sakta hai. Completed data-deletion request ke 90 din baad us ka phone, token aur free-text detail hata di jati hai. Pending request, active ride aur hold wala data safe processing tak mehfooz rehta hai.

Apna data dekhne ya delete karwane ke liye iftikharescue@gmail.com par phone number aur agar ho to trip ID bhejein. Request verify ki ja sakti hai. Safety, chalti complaint/hold ya qanooni zaroorat ka record kuch waqt tak reh sakta hai. Driver apna account aur data IMR Driver app mein (Settings > Account delete karein) ya https://lifeline-backend.imr-rescue.workers.dev/delete-account par delete karwa sakte hain. IMR yeh darkhwast 7 din mein poori karta hai: documents ki tasveerein, naam, phone, CNIC aur licence ki maloomat aur location ka record mita deta hai, aur sirf trips ka gumnaam record (tareekh, kiraya, status) rakhta hai. Driver application wapas lene ke liye: iftikharescue@gmail.com par email karein.

Hifazat

Data HTTPS ke zariye bheja jata hai. Cloudflare server/database/storage chalata hai aur Expo push notifications bhej sakta hai. Push message mein patient ka phone, naam ya address nahi jana chahiye. Privacy concern ke liye iftikharescue@gmail.com par rabta karein.