Privacy Policy

Last updated: 19 May 2026

This Privacy Policy explains how Warka ("we", "us") collects, uses, and protects your information when you use our mobile applications and website at warka.pk.

Information we collect

• Account information: Your email address (for sign-in), and optionally your name and phone number.
• Documents: The files you upload (images and PDFs) and the title, document number, dates, notes, and tags you enter. We never run OCR or AI over your documents.
• Family information: Profiles you create for family members.
• Technical data: Device type, OS version, and crash logs (via Sentry).
• Usage data: Anonymous product analytics (self-hosted PostHog on Warka infrastructure).

How we protect your data

• All documents are encrypted at rest using AES-256.
• Files are stored in private buckets and served only via short-lived signed URLs (15 minutes).
• The Private Vault is end-to-end encrypted with a key derived from your PIN. Warka cannot read these documents.
• All data is hosted in EU datacenters (Germany) under strict EU privacy laws.

Sharing

We do not sell or share your personal data with third parties. We use the following service providers:

• Hetzner Online GmbH (EU) for hosting and storage.
• Resend for transactional emails (sign-in codes, expiry reminders, share notifications).
• Cloudflare for DNS and traffic protection.
• Google (Firebase Cloud Messaging) and Apple (APNs) for push notifications on the mobile apps.

Your rights

You may at any time export all of your data (Settings → Export my data), delete your account (Settings → Delete account, with a 30-day grace period), or contact us at privacy@warka.pk.

Contact

Warka, Lahore, Pakistan. Email: privacy@warka.pk.