Privacy Policy

Last updated: 15 October 2026

This policy covers xpertcreation.com, the XpertCreation Android app (com.xpertcreation.app) and our services: XpertConnect, Freelance, Property, Store, Rides, Money, Roots of Love, Blood bank, XpertAcademy (learn.xpertcreation.com) and XpertLoad (load.xpertcreation.com). It describes what we actually collect and why.

Who we are

XpertCreation (a sole proprietorship owned by Syed Khalid Hussain Shah, NTN 3361230-7), 1-S-3B/2, Ghazali Park, Wahdat Colony, Lahore 54000, Pakistan. For any privacy question, write to [email protected].

What we collect

Your account

Email address. Required. It is how you sign in, and where receipts, certificates and notices are sent.
Name, profile photo, username. Shown on your profile, posts and certificates.
Phone and WhatsApp number. Only if you give them. Used for top-ups, orders, rides and (if you choose) to let contacts find you.
Birthday (day and month; year only if you add it), city and country you pick from a list, and language.
IP address and sign-in times. For security: stopping abuse and protecting accounts.

What you add

Profile and CV: headline, about, skills, experience, education, links.
Posts, comments, stories, chat messages, photos, voice notes and files you send.
Listings: freelance services and projects, property, Store shops and products, jobs, pets, donations.
Money app: the entries you record, and receipts you attach (stored encrypted).
Roots of Love: family members you add to a family tree (names, relations, dates, photos). Trees are shared with the family members you invite.
Blood bank: if you register as a donor, your blood group, city and availability.
Learning: course progress, quiz results and certificates.

Identity and business checks

For the blue tick, a shop, a company page or driving on Rides, you may upload CNIC or passport pictures, address proof, company documents, a driving licence and vehicle papers. They are kept outside the public website. Only our review team can open them.

Payments

Orders: what you bought or sold, the price, dates and the payment reference, so we can show receipts and handle refunds.
JazzCash / Raast payments: the transaction ID, the sender name or number you type, and the screenshot you upload. Only you and our team can open the screenshot.
Withdrawals: the wallet or bank account name and number you give us to send your earnings.

From your device, only when you use a feature

Location. Only when you tap a feature that needs it and allow it: Rides (pickup, drop-off and the driver's position during a ride), Steps (the route of a walk you record), Blood bank (donors near you) and some tools (prayer times, weather, "near me"). We do not track your location in the background.
Contacts. Only if you choose "Find friends from my contacts". The emails and numbers you pick are checked against members and not kept. If you also tick "remember my contacts", each one is kept only as a one-way scrambled code, so we can tell you when that person joins. You can delete them any time.
Camera, photos and files. Only when you choose a picture or file to upload.
Notifications. If you allow them, we keep your device's push address so we can send alerts.

How you use the site

Profile views. When you open a member's profile, they can see that you visited, unless you switch on private browsing in Settings.
Sponsored items. We count views and clicks on promoted items to show the advertiser how they did.
Search. Searches are used to show results and trending topics, and are not kept against your name.

We show sponsored posts, products, jobs and profiles that members pay us to promote. They are marked as sponsored or boosted. We do not use outside advertising networks, and we do not sell or share your data with advertisers.

Cookies and storage

Session cookie keeps you signed in across xpertcreation.com and its subdomains.
CSRF cookie stops other websites submitting forms as you.
Storage on your device remembers small choices (pinned items, language, draft text).

We use no analytics or advertising cookies. Videos from YouTube may set YouTube's own cookies when you play them.

Why we use it

To provide the service you asked for, to keep accounts and payments safe, to stop fraud and fake accounts, and to keep records the law asks for. We do not use your data for anything you would not expect.

Who else sees it

Other members see what you make public: your profile, posts, listings and shop. You choose who sees your phone, WhatsApp and birthday.
Nobody buys it. We do not sell or rent your details to anyone, ever.
Safepay (getsafepay.com) for card and wallet payments. You enter card details on Safepay's page, not ours; we receive only whether the payment worked, the amount and a reference.
JazzCash processes payments you send to our JazzCash Business account.
Cloudflare carries our website traffic and protects it from attacks. When you tap Translate, the text is translated by Cloudflare's AI service.
Push services (Google on Android and Chrome) deliver notifications you allowed.
Our email server sends the messages we send you.
Top-up suppliers get the phone number and amount of a top-up you order.
Law enforcement only where we are legally required, and only what is required.

Certificates are public by design

Read this before you earn one Every certificate has a number, and anyone holding that number can check it at learn.xpertcreation.com. The check shows the holder's name, the course, the score and the issue date, nothing else. It never shows your email address.

How long we keep it

Account data and what you add: until you delete it or delete your account.
Chat pictures, files and voice notes: removed automatically after a while, as shown in chat.
ID and business documents: while your blue tick, shop, company page or driver account exists, then deleted with your account.
Payment records: an anonymous copy (order number, amount, date, payment reference, no name or contact details) is kept for tax and refunds after you delete your account.
Server logs: up to 90 days. Backups: up to 30 days.

Deleting your account

You can delete your account yourself at any time from xpertcreation.com/account/delete. It is permanent: your profile, posts, listings, messages, uploaded files and documents are removed. If you have a freelance or Store order in progress, earnings not yet withdrawn, or a payment being checked, you are asked to finish those first so nobody loses money. If you would rather ask us, email [email protected].

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Write to [email protected] and we will respond within 30 days.

Children

XpertCreation is for people aged 18 and over. If you believe a child has created an account, tell us and we will remove it.

Changes

If we change this policy in a way that matters, we will say so on this page and update the date at the top.