Privacy Policy

1. Who we are

GrassWork is a home services business serving customers in Pakistan. For privacy matters, you can contact us at contact@grasswork.pk.

Business address: C-4 Main Commercial, Yusuf Abdullah Plaza, Ghouri Garden, Islamabad.

2. Scope of this policy

This policy covers both the GrassWork website at grasswork.pk and the GrassWork mobile app for Android and iOS. Where a practice applies to only one of them, we say so.

3. Information we collect

On the website

In the mobile app

Using the app requires an account, because bookings and appointment chat are tied to it.

4. Location in the app — optional

When you set your address, the app shows a map with a pin so a technician can find your exact door. Sharing a location is optional and you have two ways to skip it.

• You can type your address instead. If you never move the map and never tap “Use my location”, no coordinates are sent to us — only the address text you typed is saved.
• You can decline the location permission. “Use my location” is the only feature that reads your device GPS. If you decline, the rest of the app works normally, and you can still position the pin by hand.
• You can remove it later. Editing your profile saves whatever pin is set at that moment.

When you do share a location, we collect two things. Precise location — the latitude and longitude of the pin, saved on your profile and copied onto each booking so the technician can find you. Approximate location — the city we work out from that pin, which we store on your profile and use to show you the services available in your area, or to tell you we don't cover it yet. We never ask you to pick a city by hand.

Two things happen on your device as you use the map. Map tiles are requested from OpenStreetMap, which reveals the area you are looking at but nothing about your account. Turning a pin into a readable address uses your device's built-in geocoding service, provided by Google on Android and Apple on iOS. We do not track your location in the background, and the app never reads your location while it is closed.

5. How we use your data

• To respond to service bookings and contact you about your request.
• To create and manage your account, and to sign you in.
• To send a technician to the right address.
• To show you the services available in your area.
• To carry your messages to and from our team, and to act on problems you report.
• To send you notifications about your bookings and appointments.
• To send you occasional announcements and offers by push notification, if you have notifications turned on.
• To receive and moderate customer reviews.
• To process join-team applications.
• To prevent spam, fraud, and repeated abuse of forms.
• To improve service quality and operations.

6. What we share

We do not sell personal information, and we do not share it with advertising networks or data brokers. We only share data with the service providers needed to run our website, app, and operations, and they may only process it on our behalf.

Separately, the technician assigned to your booking is given the name, phone number, and address on that booking so they can carry out the job.

7. Public reviews

If you submit a review, your name, rating, comment, and review time may be shown publicly on the site. Your phone number is used for authenticity checks and is not displayed publicly.

8. Push notifications and device identifiers — app

To deliver push notifications, the app registers a token with Firebase Cloud Messaging, a Google service. That token identifies your installation of the app rather than you personally, but we store it against your account so we know where to send your notifications. Firebase also generates its own installation identifier.

We use notifications for two things: updates about your bookings and appointments, and occasional announcements or offers from GrassWork. You can turn notifications off at any time in your device settings, and we will stop sending them. Your token is deleted when you sign out or delete your account.

9. Cookies and tracking — website

This section applies to the website only. The mobile app contains no analytics, advertising, or tracking software of any kind — see section 10.

On the website we use technical mechanisms needed to run forms and security checks, the Meta Pixel (Facebook Pixel) to measure website traffic and the performance of our advertising campaigns, and PostHog for product analytics.

The Meta Pixel is a tracking tool provided by Meta Platforms, Inc. It sets cookies on your device (such as _fbp and, when you arrive through a Facebook or Instagram ad, _fbc) and sends information about your visit — including the pages you view, your IP address, browser details, and a pseudonymous identifier — to Meta. This lets us understand how visitors use the site, measure ad effectiveness, and show relevant ads on Meta's platforms.

Meta acts as an independent controller for data it receives through the Pixel. You can review Meta's data practices in its Privacy Policy and manage your ad preferences in your Facebook ad settings. You can also block cookies in your browser or use browser privacy controls to limit tracking.

PostHog is a product analytics tool that helps us understand how visitors arrive at and move through the site. It stores identifiers in your browser (such as ph_<id>_posthog and an opt-out flag __ph_opt_in_out_<id>) and records usage events such as page views, clicks, and scroll depth, along with a pseudonymous identifier. We may also use session replay to view anonymized recordings of how pages are used; form fields are masked, so the details you type (name, phone, email, message) are never captured.

When you first visit, a banner notifies you about this. You can choose Opt out to disable PostHog and the Meta Pixel on your device, and you can review PostHog's practices in its Privacy Policy.

10. What the app does not collect

The GrassWork app contains no analytics SDK, no advertising SDK, and no crash or performance reporting tool. Specifically, it does not collect crash logs, diagnostics, or app performance data, and it does not track what you tap or how you move through the app. It has no access to your camera, photos, contacts, calendar, files, or microphone, and it does not read your phone number or any advertising identifier from your device.

Google Play separately collects anonymous crash and performance data from Android apps as part of the Play Store itself. That is done by Google, not by us, and you can manage it in your device's Google settings.

11. Data retention

We do not follow a single fixed retention schedule. We keep data only for as long as reasonably needed for service delivery, operations, and legal or compliance needs, and then delete or anonymize it when practical.

12. Data security

We use commercially reasonable safeguards to protect personal data. No internet-based system is fully risk-free, but we work to protect information and limit unauthorized access.

13. Your rights and deleting your account

You can request access, correction, or deletion of your personal information by emailing contact@grasswork.pk. We may ask for verification before processing your request.

If you use the app, you can delete your account yourself from the profile screen, without emailing us. Deleting your account permanently removes your profile, your saved address and any coordinates, your bookings, your appointment and support messages, your notification token, and your sign-in identity. This cannot be undone.

One thing is not removed: a public review is recorded against the phone number that submitted it rather than an account, so deleting your account does not withdraw a review you have already published. Email us if you would like a review taken down.

14. Changes to this policy

We may update this Privacy Policy from time to time. Any updates will be posted on this page with a revised effective date.