Download Now

Privacy Policy

mySahal — a product of Forteve Private Limited

This Privacy Policy explains how Forteve Private Limited, operating under the brand name mySahal (“mySahal,” “we,” “us,” or “our”), collects, uses, shares, and protects information across the mySahal mobile applications and related services (collectively, the “Platform”).

mySahal Retailer

For shopkeepers & merchants

mySahal ASM

For Area Sales Managers

mySahal Distributor

For distributors

By downloading, accessing, or using any mySahal app, you agree to the collection and use of information as described in this Policy. This Policy should be read together with our Terms of Use. If you do not agree with this Policy, please do not use the Platform.

1. Information We Collect
1.1 Information you provide directly
  • Identity information: full name, CNIC/NICOP number, date of birth, and business/shop details submitted during KYC/KYB onboarding, in accordance with State Bank of Pakistan (SBP) AML/CFT regulations.
  • Contact information: phone number, email address, and landline (where provided).
  • Financial information: bank account number / IBAN, and transaction details, used to process payments, transfers, bill payments, and commission withdrawals.
  • Identity documents & photos: images of your CNIC, a live selfie, and shop-front photographs (mySahal Retailer, for identity verification), and onboarding documents for new Area Sales Managers (mySahal Distributor).
  • Login credentials: your MPIN and password (stored securely; never visible to our staff in plain text).
1.2 Information collected automatically
  • Location: the mySahal Retailer app requests precise/approximate device location solely to help you pin your shop’s location on a map during onboarding and profile updates. The mySahal ASM and mySahal Distributor apps do not request or collect device location.
  • Device & app information: device identifiers, app crashes, and performance/usage data, collected via Firebase (Google) Analytics, Crashlytics, and Performance Monitoring, to keep the Platform stable and improve it.
  • Push notification token: used solely to deliver transaction and account notifications to your device.
1.3 Biometric authentication

If you enable fingerprint or face unlock, authentication is handled entirely by your device’s operating system. mySahal never receives, stores, or transmits your biometric data — the app only receives a yes/no confirmation from your device.

2. How We Use Your Information
  • To verify your identity and complete KYC/KYB checks required by law.
  • To process transactions — mobile recharge, bill payments, money transfers, and commission withdrawals.
  • To operate core features such as retailer/ASM management, onboarding, and credit collection.
  • To detect and prevent fraud, unauthorized access, and money-laundering activity.
  • To send you transactional and service-related notifications.
  • To maintain, monitor, and improve the stability and performance of the Platform.
  • To comply with regulatory, tax, and law-enforcement obligations under Pakistani law.
3. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

Recipient
Purpose
Google / Firebase
Cloud infrastructure, analytics, crash reporting, and push notifications. Google acts as our data processor.
Banking & payment partners
To execute transfers, bill payments, and settlements (e.g., IBFT/RAAST rails, partner banks).
NBFC / financing partners
Where you opt into financing offers such as working capital or merchant cash advances.
Regulators & authorities
State Bank of Pakistan, SECP, FBR, or law enforcement, where legally required.

We do not use any advertising SDKs, and we do not share your information with third-party advertising or marketing networks.

4. Data Security

All data in transit between the app and our servers is encrypted (HTTPS/TLS). Access to production data is restricted to authorized personnel. While we take reasonable technical and organizational measures to protect your information, no method of transmission or storage is 100% secure.

5. Data Retention

We retain personal and transaction data for as long as your account is active and thereafter for as long as required to meet our regulatory record-keeping obligations under SBP and other applicable Pakistani law, after which it is deleted or anonymized.

6. Your Rights & Account Deletion

You may review and update your profile information at any time from within the app. You may request permanent deletion of your account directly from Settings → Delete Account in any mySahal app, subject to re-authentication (MPIN or password) and any regulatory record-keeping requirements that require us to retain certain transaction records even after account deletion.

7. Children's Privacy

The Platform is intended for users who are at least 18 years old, as required for financial account eligibility. We do not knowingly collect information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified within the app or via the contact details on file. Continued use of the Platform after changes take effect constitutes acceptance of the revised Policy.

9. Contact Us

For any questions about this Privacy Policy or your personal data, contact us at:
Forteve Private Limited
84J Ghazali Road, Block-02, PECHS, Karachi – 74000, Pakistan
Email: muntasir@forteve.com
Website: forteve.com

This Privacy Policy is governed by the laws of Pakistan and should be read alongside the mySahal Terms of Use available within each app.