Your privacy.
Handled with care.

Aurat Card is a benefits and discount platform designed for girls and women in Pakistan. Users can explore Aurat Card options, participating merchants, brands, benefits and promotional experiences without being required to sign in.

Certain account-related features may require authentication.

Public Browsing

You may browse the public areas of Aurat Card without creating an account or providing your phone number.

Technical information necessary to operate and secure the service may still be processed, such as device type, operating system, app version, network information, error logs and security-related information.

Phone Number and Authentication

If you choose to sign in, we may collect your mobile phone number.

Aurat Card may use Firebase Authentication to send and verify a one-time password (OTP) for authentication and security purposes.

Your phone number is used for authentication, account identification, security and related account services.

Card and Benefit Information

When account-related functionality is used, we may process information associated with your Aurat Card, eligibility, selected card type, benefits, merchant offers and benefit usage as necessary to provide the service.

Information may be used to:

• Provide and maintain the Aurat Card service.
• Authenticate users who choose to sign in.
• Display eligible cards, participating brands and available benefits.
• Provide and validate discounts and benefit-related services.
• Protect users, merchants and the platform against fraud or misuse.
• Respond to support requests.
• Diagnose technical problems and improve application reliability.
• Comply with applicable legal and regulatory requirements.

Aurat Card may display offers, discounts and services provided by participating merchants, universities, healthcare providers, organizations and other partners.

The availability and conditions of an offer may be determined by the participating partner.

Aurat Card aims to disclose only the information reasonably required to provide or validate a benefit. We do not intend for merchants to receive unnecessary identity information simply because a user browses an offer.

Aurat Card may provide access to OyeBunny through an in-app web experience.

When you choose to open OyeBunny, web content is loaded from app.oyebunny.pk ↗.

Information you provide or activities you perform within the OyeBunny service may be subject to OyeBunny's own terms and privacy practices.

We may use third-party technology and infrastructure providers to operate certain features of Aurat Card.

For example, Firebase Authentication may be used for phone number authentication and OTP verification.

These providers may process limited information as necessary to deliver their services and are subject to their respective privacy and security terms.

Aurat Card includes a Girl Card category intended for users aged 13–17.

We recognize that information relating to minors requires additional care. Where consent from a parent or legal guardian is required by applicable law or programme policy, the appropriate consent process will be implemented before collecting information that requires such consent.

We use reasonable administrative, technical and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss or misuse.

No electronic system can guarantee absolute security, but we continuously work to maintain appropriate safeguards for the information processed through Aurat Card.

Personal information is retained only for as long as reasonably necessary to provide the relevant service, satisfy legitimate operational and security requirements, resolve disputes, and comply with applicable legal or regulatory obligations.

Information may be shared only when reasonably necessary with:

• Service providers supporting the operation of Aurat Card.
• Participating partners where information is required to provide or verify a requested benefit.
• Government, regulatory or law-enforcement authorities where disclosure is required by applicable law.
• Other parties where you have provided appropriate consent.

Depending on the functionality available and applicable requirements, you may request access to, correction of, or deletion of personal information associated with your Aurat Card account.

You may also choose not to sign in and continue using publicly available portions of the application where those features do not require authentication.

We may update this Privacy Policy when Aurat Card features, legal requirements or our information-handling practices change.

The revised policy will be published with an updated "Last Updated" date.