Privacy Policy

Last Updated: April 06, 2026

1. Introduction

Welcome to DHAP Task Management System ("we," "us," "our," or "Company"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application, including any related features, functionalities, and services we offer (collectively, the "Service").

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide Directly

Account Registration: Name, email address, phone number, username, password, and profile information
Profile Data: Department, designation, DHAP number, profile picture, and biographical information
Task & Communication Data: Tasks, comments, follow-ups, and notifications you create or share
Deletion Requests: Reasons and comments provided when requesting account deletion
Contact Information: Any support requests, feedback, or communications you send us

2.2 Information Collected Automatically

Device Information: Device type, operating system, browser type, and device identifiers
Connection Information: IP address, connection type, and mobile network information
Usage Data: Pages visited, features used, tasks accessed, login times, and interaction patterns
Log Data: Server logs containing access times, pages viewed, and error information
Cookies & Tracking: Session tokens, authentication tokens, and website usage analytics

2.3 Information from Third Parties

Information provided by administrators or organization management
Device push notification services and FCM tokens

3. How We Use Your Information

We use the information we collect for various purposes:

Service Provision: To create and maintain your account, authenticate users, and provide core functionality
Communication: To send notifications, alerts, service updates, and respond to inquiries
Task Management: To enable task assignment, tracking, and collaboration features
Security: To detect fraud, prevent abuse, enforce terms, and maintain system security
Analytics: To understand usage patterns, improve our Service, and develop new features
Account Management: To process account deletion requests and handle account maintenance
Compliance: To comply with legal obligations and regulatory requirements

4. How We Share Your Information

4.1 Information Shared Deliberately

Team & Organization: Task assignments, comments, and work-related information within your organization
Administrators: User profiles and account information to organizational administrators
Service Providers: Email service providers, notification services, and hosting providers

4.2 Legal Requirements

We may disclose information when required by law or to protect rights, safety, and property.

4.3 Business Transfers

In case of merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

5. Data Retention

Active Accounts: Information is retained while your account is active
Deactivated Accounts: After account deletion request is completed, we retain data for:
- Legal compliance (up to 7 years)
- Tax and financial records (as required by law)
- Fraud prevention and security purposes
Login History: Retained for 12 months for security auditing
Task Records: Retained per organizational policies and legal requirements

6. Security of Your Information

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These include:

HTTPS/TLS encryption for data in transit
Secure password hashing (PBKDF2 with SHA-256)
Account lockout mechanisms after failed login attempts
Session management and token-based authentication
Regular security audits and updates

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights and Choices

7.1 Access Your Data

You can access your account information through your profile section.

7.2 Correct Your Data

You can update your profile information at any time through your account settings.

7.3 Delete Your Account

You can request account deletion through the account settings. Your account will be deactivated within 48 hours.

7.4 Marketing Communications

You can opt out of non-essential communications through your notification preferences.

8. GDPR & Privacy Regulations

If you are located in the European Union or other jurisdictions with privacy laws, you have additional rights including:

Right to access your personal data
Right to rectify inaccurate data
Right to erasure (right to be forgotten)
Right to restrict processing
Right to data portability
Right to object to processing

To exercise these rights, please contact us at the address provided in the "Contact Us" section.

9. Children's Privacy

Our Service is not intended for children under the age of 13 (or the minimum age in your jurisdiction). We do not knowingly collect information from children. If we become aware that we have collected information from a child, we will take steps to delete it immediately.

10. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by updating the "Last Updated" date and, if applicable, by providing additional notice. Your continued use of the Service following such changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

DHAP Task Management System
Email: privacy@dhapeshawar.org
Address: Nasir Bagh Road, Peshawar, Postal Code 24710
Phone: +92-91-111-342-342