Last updated: 11-10-2026
1. Who we are
Wolfin (“we”, “our”, or “us”) operates the Wolfin mobile applications (the “App”) as a two-sided marketplace platform that connects customers who need home services (such as plumbing, electrical work, and related Services) with qualified independent service providers who offer those services.
Wolfin is available on Android through Google Play and on iOS through the Apple App Store. This Privacy Policy applies to both mobile applications and to our website at wolfin.io.
This Privacy Policy explains how we collect, use, store, and protect personal information from both customers (users who hire service providers) and service providers (professionals who offer their services on the platform).
By downloading, registering, or using the Wolfin App, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the App.
2. Information we collect
We collect information in two ways: information you provide to us directly, and information collected automatically when you use the App.
Information you provide directly
Account information : Customers & providers
We may collect your full name, phone number, email address (optional), city, profile photo (optional), and password.
Location and address information : Customers & providers
We may collect your city, service area, job address and landmark. We only access your device location when you choose to use the “Use current location” feature in the App.
You may also save up to 5 addresses in your account for future use.
Payment information : Customers & providers
We may collect bank account details displayed or provided within the App for payment transfers, transaction amounts, payment request details, account references, job identifiers and timestamps.
We do not store full bank account numbers or card numbers on our servers unless expressly stated otherwise in this Privacy Policy.
Service provider verification : Providers only
We may collect CNIC numbers, verification documents, trade certifications, government-issued identification, professional licence information, insurance documents and service categories to verify that service providers are qualified to offer services through Wolfin.
Communications : Customers & providers
We collect chat messages, images, videos and voice notes exchanged between customers and service providers. We may also collect job descriptions, reviews, ratings and support tickets.
Requests and job information : Customers & providers
We may collect service type, request description, voice notes, photos, videos, address, landmark, booking history, bid amounts and other information you attach or provide in connection with a service request.
Saved addresses : Customers & providers
You may save up to 5 addresses in your Wolfin account for use when submitting or managing service requests.
Commission payment records : Providers only
For service providers, we may collect commission payment records including transaction IDs and payment screenshots.
Signing in
You can create or access a Wolfin account using:
Phone number and password – we verify your number with a one-time SMS code at sign-up and password reset.
Sign in with Google – we receive your name, email address and a Google account identifier from Google. We do not receive your Google password.
Sign in with Apple (iPhone) – we receive a unique Apple identifier and, if you choose to share them, your name and email address. If you choose “Hide My Email”, Apple gives us a private relay address that forwards to your real email. We do not receive your Apple ID password.
We use this information only to create and secure your account and to let you sign in.
Reports and blocks
When you report a user, we store your report, including the reason and the details you provide, together with the related job and the most recent messages from that chat (up to 30 messages), so our safety team can review the report.
When you block a user, we store that block so you cannot be matched with that user or message each other.
Reports are visible only to authorised WolfIn staff and are never shown to the reported user. If an account is suspended, we retain the related reports for safety and legal reasons.
Information collected automatically
We may automatically collect certain technical and usage information when you use the App, including:
- Device information such as device model, operating system version and unique device identifiers
- App usage data such as features used, screens viewed, session duration and crash reports
- IP address and approximate location derived from it
- Analytics data through third-party SDKs such as Google Firebase Analytics
- Advertising identifier and limited device and usage signals collected by Google AdMob for advertising on Android
- Device notification token used to deliver push notifications
- App version and related technical information
- Log data such as access times, app interactions and error logs
Notifications
We send push notifications about your requests, offers, bids, chat messages and account status.
On Android, push notifications are delivered through Firebase Cloud Messaging (Google). On iPhone, push notifications are delivered through Apple Push Notification service via Firebase Cloud Messaging.
To provide these notifications, we store a device notification token linked to your account.
You can turn notifications off at any time in your phone’s settings.
3. How we use your information
We use the information we collect for the following purposes:
- To operate the platform: create and manage your account, match customers with service providers, and facilitate job bookings
- To process payments: review and manually approve payment requests submitted through the App (see Section 4 below)
- To verify service providers: validate professional credentials, identity documents, CNIC information and licences before a provider can offer services
- To provide customer support: respond to enquiries, resolve disputes and handle complaints
- To manage service requests: process requests, bids, offers, bookings, job information and communications between customers and service providers
- To provide location-based features: use your device location when you choose “Use current location” to help provide the address for a service request
- To improve the App: analyse usage patterns, fix bugs, develop new features and optimise performance
- To provide notifications: send information about requests, offers, bids, messages, account status and other important service updates
- To display and personalise advertisements: via Google AdMob on Android, subject to your consent where required by law
- To communicate with you: send booking confirmations, payment updates, promotional offers (with your consent) and important service notices
- To ensure safety and security: detect fraud, prevent misuse, investigate suspicious activity and enforce our Terms & Conditions
- To verify and process provider commissions: maintain transaction records and review payment evidence submitted by service providers
- To comply with legal obligations: fulfil requirements under applicable laws and respond to lawful requests from authorities
Our legal bases for processing your personal data under UK GDPR / GDPR are: contract performance (processing necessary to provide the service you signed up for), legitimate interests (fraud prevention, security, improving the App), consent (marketing communications and, where required, personalised advertising) and legal obligation (compliance with applicable law).
4. Payment processing & manual review
Important: Wolfin uses a manually reviewed payment process. Payments are not processed automatically. Every payment request is reviewed and approved by our team before funds are released.
When a customer or service provider initiates a payment through the App, the following process applies:
Payment submission: the user submits a payment request through the App, including the amount and relevant job details. Payment is made to the bank account displayed within the App.
Manual review: our team reviews the payment request to verify the transaction details, confirm the job was completed and check for any irregularities or disputes.
Approval or rejection: once reviewed, we approve or reject the request. Both parties are notified of the outcome through the App.
Release: upon approval, the payment is processed and released to the appropriate party.
To facilitate this process, we collect and temporarily store payment-related information including transaction amounts, account references, job identifiers and timestamps. This information is used solely for payment processing and fraud prevention purposes.
For service providers, payment and commission records may also include transaction IDs and payment screenshots submitted through the App.
We do not store full bank account numbers or card numbers on our servers. Payment account details displayed in the App are used only for the purpose of directing payment transfers and are handled with strict access controls.
Payment data is retained for a period necessary to comply with financial regulations and resolve potential disputes, typically up to 7 years, after which it is securely deleted unless legal obligations require longer retention.
5. How we share your information
We do not sell your personal data. We share your information only in the following limited circumstances:
Between customers and providers: when a booking or service request is made, relevant contact, location and job information may be shared between the customer and the assigned service provider to facilitate the service.
Service providers and vendors: we share data with trusted third-party service providers who assist us in operating the App, such as cloud hosting, analytics, push notifications and customer support tools. These parties are contractually bound to protect your data and may only use it as we direct.
Advertising partners: on Android, Google AdMob may receive or collect certain device identifiers and usage information to serve, personalise, cap and measure advertisements. We do not share your name, phone number, email address or payment details with advertisers.
Legal compliance: we may disclose your information if required by law, court order or to protect the rights, property or safety of Wolfin, our users or others.
Business transfers: if Wolfin is acquired, merged or sold, your personal data may be transferred as part of that transaction. We will notify you before this occurs where required by applicable law.
Third-party tools we currently use may include Google AdMob for Android advertising, Google Firebase for analytics and push notifications, Apple Push Notification service for iOS notifications, cloud hosting providers and payment processing infrastructure. Each third party operates under its own privacy policies and applicable terms.
6. Advertising
Android
The Android app may show advertisements provided by Google AdMob.
AdMob may collect and process device identifiers and limited device and usage information to display, personalise, cap and measure advertisements, as described in Google’s privacy policy.
Users in the EEA and UK are asked for consent where required by applicable law before personalised advertising is provided.
You can reset or delete your Advertising ID, or opt out of personalised ads, through your device settings.
iPhone
The iOS app does not show advertisements and does not track you across other companies’ apps or websites.
We do not share your name, phone number, email address or payment details with advertisers.
7. Data retention
We retain your personal data only for as long as necessary to provide the service and fulfil the purposes outlined in this policy.
Active account data: retained for the duration of your account.
Job and booking history: retained for 3 years after job completion.
Payment transaction records: retained for up to 7 years where required for financial compliance, dispute resolution or other legal obligations.
Support correspondence: retained for 2 years after resolution.
Request attachments: photos, videos and voice notes attached to a service request are automatically deleted after the related request is completed, cancelled or expires.
Unaccepted requests: requests that are never accepted are automatically deleted after a short period.
Advertising identifier: on Android, retained for as long as advertisements are served or until you reset or opt out through your device settings.
Analytics data: aggregated and anonymised analytics data may be retained indefinitely where it can no longer reasonably be used to identify you.
Account data: retained while your account is active.
Certain information may be retained for longer where required by law, necessary for financial compliance, fraud prevention, dispute resolution or the establishment, exercise or defence of legal claims.
8. Account deletion & permanent data removal
You can delete your Wolfin account at any time inside the App by going to:
Profile → Delete Account
Deleting your account permanently deletes your profile and associated personal data, except for records we are required to retain by law, such as certain completed payment records.
If you signed in with Apple, we also revoke Wolfin’s access to your Apple account when you delete your account.
You can also request account deletion by email by contacting us at info@wolfin.io with your registered email address and the subject line “Account Deletion Request”.
You may also request deletion through our website where an account deletion request facility is available.
Upon receiving a deletion request, we may verify your identity to confirm that the request is genuine.
We will permanently delete your profile, account information, messages and other personal data that we are not legally required to retain.
Certain data may be retained beyond account deletion where required by law or necessary to establish, exercise or defend legal claims. For example, transaction records may need to be retained for financial compliance purposes.
Where possible, retained information will be anonymised and will not be used for purposes unrelated to the legal or compliance requirement.
Account deletion is permanent and cannot be undone.
9. Your rights (GDPR / UK GDPR)
If you are located in the United Kingdom or European Union, you have the following rights regarding your personal data:
Right of access: request a copy of the personal data we hold about you.
Right to rectification: request correction of inaccurate or incomplete data.
Right to erasure: request deletion of your personal data, subject to applicable legal exceptions.
Right to restrict processing: ask us to limit how we use your data in certain circumstances.
Right to data portability: receive your data in a structured, machine-readable format.
Right to object: object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting processing that took place before withdrawal.
To exercise any of these rights, please contact us at info@wolfin.io.
We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK or the relevant supervisory authority in your country.
10. Children’s privacy
The Wolfin App is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13.
If we become aware that a child under 13 has registered on our platform, we will take reasonable steps to delete their account and associated personal data.
If you believe a child under 13 has registered on our platform, please contact us immediately at info@wolfin.io.
11. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration or disclosure.
These measures include:
- Encrypted data transmission (HTTPS / TLS) for all communications between the App and our servers
- Restricted access to personal data — only authorised team members can access data on a need-to-know basis
- Secure cloud infrastructure with regular security controls and reviews
- Manual review processes for payment transactions to detect and prevent fraud
- Access controls designed to protect account, verification and payment-related information
However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities as required by law.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other operational reasons.
When we make significant changes, we will:
- Update the “Last updated” date at the top of this page
- Send a notification to your registered email address where appropriate
- Display a notice in the App when you next open it where appropriate
Your continued use of the App after any update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.
13. Contact us
If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please contact us:
Wolfin Privacy Team
Company: TECVEQ (Private) Limited, Pakistan
Email: info@wolfin.io
Website: wolfin.io
Response time: We aim to respond to all privacy-related enquiries within 5 working days.
This Privacy Policy applies to the Wolfin mobile applications available on Google Play and the Apple App Store, our website at wolfin.io and all associated services.