Privacy policy

Last updated: 24 October 2026

Wahan sends a team member to photograph property in Pakistan for owners who live elsewhere. This policy explains what information we collect, why, who can see it, how long we keep it, and the rights you have over it.

1. Who is responsible for your information

Wahan is operated by Ekdutn Inc., a corporation incorporated under the Canada Business Corporations Act (corporation number 1818608-1), with its registered office in Ontario, Canada. In this policy "Wahan", "we", "us" and "our" mean Ekdutn Inc., which is the organisation accountable for the personal information described here. Where the GDPR or UK GDPR applies, we are the controller of that information.

You can reach us about privacy at hello@wahan.app.

2. Information we collect

• Your request. When you ask for an inspection: your name, email address, and optionally your WhatsApp number and the country you live in; the type of property, its area and plot or house number; the interests you tick; and any notes you write.
• How you found us. The web address you arrived from and any campaign tags in the link (for example utm_source), so we can tell which adverts or posts bring requests.
• Inspection records. When we inspect a property for you: photos of the property, taken from public land or inside your own property where you have asked us to go in (for example House Opening, Caretaker or Repairs and Cleaning), the date, time and GPS location of each photo, a digital fingerprint of each photo, and the observations noted on the visit. For Repairs and Cleaning this also includes the quote and the photos taken before and after the work. For Caretaker you give us a key to your property, which is logged and kept safe, used only on scheduled visits, and returned when you ask or the plan ends. These describe the property, not you, but they are linked to your request.
• Messages. Emails and WhatsApp messages you exchange with us.
• Payments. Once we have confirmed the visit and the price by email, we send you a secure payment link. You pay by card on a payment page run by Stripe, our payment processor, which collects your card details. We receive confirmation that the payment was made, not your card number, and we do not keep your card details.
• Technical data. Our hosting provider keeps standard server logs, such as IP address, browser type and time of request, to run and secure the website.

• Website analytics. We use Google Analytics to see how many people visit, which pages they read, and which links and searches bring them here. It records the pages you view, roughly where you are (city and country, worked out from your IP address), your device and browser type, and the site you came from, using cookies described in section 9. It is not used on the report pages we send you.

We have turned off Google’s advertising features and Google Signals, so this information is not used to show you adverts or linked to your Google account. We do not use advertising trackers, and we do not buy personal information from data brokers. Our host Cloudflare also counts page views through its Web Analytics, which uses no cookies.

3. How we use it, and why we are allowed to

We use your information to reply to your request, arrange and carry out the inspection, send you the report, invoice and collect payment, answer your questions, understand which services people want, keep the service secure and prevent abuse, and meet legal obligations.

If the GDPR or UK GDPR applies to you, our legal bases are: steps you ask us to take before entering an agreement, and the agreement itself, for your request and inspection; our legitimate interests, for security, abuse prevention and understanding demand, balanced against your rights; and legal obligation, where a law requires us to keep or disclose something.

We do not sell your personal information, share it for advertising, or use it for automated decisions about you.

4. Who can see it

• Us, handling your request and reviewing the inspection photos before they are sent to you.
• Whoever carries out the visit, who is given the property’s location and what to photograph. They are not given your contact details. For Repairs and Cleaning, the tradesperson or cleaner who quotes and does the work is told the property’s location and what needs fixing, and not your contact details.
• You, and anyone you choose to share your report with.
• Service providers, listed in section 5, acting on our instructions.
• Legal and safety. We may disclose information where a law or valid legal process requires it, or where we reasonably believe it is necessary to prevent fraud or protect someone’s safety.
• Business transfer. If Wahan is merged, acquired or sold, information may transfer to the new owner under this policy or one at least as protective, and we will tell you.

5. Our service providers

• Supabase: database and photo storage, in the European Union (Frankfurt, Germany).
• Cloudflare: website hosting, security, email routing, and cookieless page view counts through Cloudflare Web Analytics.
• Resend: sending email, such as sign-in codes and notifications.
• Google: the email inbox where messages to our addresses are received, and Google Analytics, which measures visits to this website.
• Stripe: our payment processor, which collects and processes the card payment for every invoice we send.
• WhatsApp (Meta): only if you choose to talk to us on WhatsApp.

6. Where your information is stored

We operate from Canada, store requests and inspection records in the European Union, and inspect properties in Pakistan. Our providers operate in several countries, so your information may be processed outside the country where you live. While it is in another country it is subject to that country’s laws, and authorities there may be able to access it under those laws. Traffic is encrypted in transit, and our providers encrypt data at rest.

If a data breach puts your personal information at real risk, we will tell you without undue delay and report it to the regulators we must report to.

7. How long we keep it

• Requests that do not lead to an inspection: up to 24 months, then deleted.
• Inspection photos and reports: while you use Wahan and for up to 7 years after, because they may be needed as evidence in a property matter. You can ask us to delete them sooner.
• Messages: as long as needed to deal with your request or inspection.
• Server logs: a limited period, then routinely cleared.
• Website analytics: Google Analytics deletes visit-level data after 2 months. Totals in our reports, which do not identify you, are kept.
• Backups: deleted data may remain in encrypted backups for a limited time before they expire.

8. Your rights

Depending on where you live, you may have the right to access the information we hold about you, correct it, delete it, restrict or object to how we use it, receive a copy in a portable format, and withdraw consent. Email hello@wahan.app. We will reply within the time the law requires and may need to confirm who you are first.

• Canada: PIPEDA gives you the right to access your personal information, challenge its accuracy, and complain to us and then to the Office of the Privacy Commissioner of Canada. In Quebec, Law 25 also gives you rights of portability and de-indexing.
• European Economic Area and United Kingdom: you may complain to your local data protection authority or the UK Information Commissioner’s Office.
• United States: where state privacy laws such as California’s apply, you may ask what we collect, and ask us to delete or correct it. We do not sell or share personal information.

9. Cookies

Google Analytics sets cookies named _ga and _ga_MSVGRYDHEM, which tell it that two visits came from the same browser. They last up to 2 years and are used only for this website’s analytics. If you are in the European Economic Area, the United Kingdom or Switzerland, these cookies are not set and Google Analytics counts your visit without them.

You can block or delete cookies in your browser settings, or stop Google Analytics on every site with Google’s opt-out add-on. The website works the same without them. The request form does not use cookies, Cloudflare Web Analytics counts page views without them, and our hosting provider may use strictly necessary cookies for security.

10. Children

Wahan is for adults. We do not knowingly collect personal information from anyone under 18. If you think a child has sent us information, email us and we will delete it.

11. People who apply to join the team

This section is for people who apply at wahan.app/jobs/ to work with us in Pakistan.

• What we collect. Your name, email address, phone and WhatsApp number, city and area, CNIC number, age band, what you do now, phone model, whether you have a motorbike, the work you want, your free hours each week, and the name, relation and phone number of two references. We also record that you ticked the box agreeing to our checks. We ask for the CNIC number only, never a photo. Later we may ask to see the original card on a video call. We keep only the number and a note of who saw the card and when.
• Why. To assess your application, phone your references and, if you join the team, set up your account and pay you.
• Who can see it. Only Wahan’s admin and managers. It is never shown to clients and never sold. The email that tells us about a new application shows only the last four digits of the CNIC.
• References. We phone them only because you gave your consent on the form, and we keep a short note of what they said. Please tell your references before you apply.
• Checks against abuse. The form notes whether a hidden field was filled in or the form was completed within seconds, and your IP address is turned into a scrambled code (a salted hash) that is used only to limit how many applications one connection can send in an hour.
• Where it is stored. With our other records in the European Union (section 6). The email that tells us about a new application is sent through Resend (section 5).
• How long we keep it. Applications that do not lead to a job, whether rejected or withdrawn, are kept for up to 12 months and then deleted. If you join the team, your application becomes part of your team record, which we keep while you work with us.
• Your rights. You can ask to see or delete your application by writing to hello@wahan.app.

12. Changes to this policy

We may update this policy. We will change the date at the top, and tell you about material changes by email before they apply to you.

This policy describes what Wahan actually does.