DRAFT. This text is a working draft for review by counsel and is not yet final or binding. It describes how the service works today.
Last updated 2026-10-29
What we collect
Only what a booking, a safe stay and the law need.
- Your phone number, your name and, if you give it, your e-mail address; a one-time code proves the number is yours.
- For a stay or for hosting: an identity document and a selfie where the check is required, and the name on the document.
- Your bookings, messages, reviews, the cancellation and refund record, and what you tell us in a case.
- The payment status of a booking. We never see or keep a full card number; the payment provider does.
- A random device identifier, a hashed form of your network address and the browser type, to spot fake sign-ups and abuse. We keep the hash, not the address.
Why we use it
To run your account and bookings; to take payment and pay hosts; to keep guests and hosts safe and to prevent fraud; to answer you and resolve disputes; to meet tax, accounting and other legal duties; and, if you allow it, to send you offers. We use the data for these reasons and no others.
Who sees it
The people who need it to do their part, and no one else.
- A host sees the first name and booking details of a guest who has booked or asked about their place, and, once a stay is confirmed, what they need to receive the guest. A guest sees a host's display name and the place's address once the stay is confirmed.
- Our payment providers, our SMS and e-mail providers, our hosting provider and our identity-check reviewers, each only for their job and under a contract.
- The authorities, when a law or a court order requires it.
- Never sold, and never shared with advertisers.
How long we keep it
Identity documents and selfies are kept for up to 365 days after you upload them and are then deleted. Booking, payment and tax records are kept for the years the law requires. Messages are kept while the booking can still be disputed. When an account is closed we erase or anonymise what we are not required to keep.
Your choices
You can ask to see the data we hold about you, to correct it, to have it erased, or to take a copy. Write to us using the contact page and we answer within 30 days. [COUNSEL TO SET: the turnaround and the legal basis under the data-protection law in force.] You can switch off marketing and most notifications under Account, Notifications.
Cookies and devices
We use the cookies a sign-in needs and one device identifier for abuse prevention. We do not use advertising cookies. Analytics are first-party: they count page views and searches. For a signed-in visitor an event can carry the account, never the name or the phone number.
Security and transfers
Data is encrypted in transit and the sensitive fields are encrypted at rest. Access is limited and logged. Our providers may store data outside Pakistan; where they do we use contracts that keep the same protection.
Children
Phiro is for adults. We do not knowingly collect data from anyone under 18.