Privacy Policy
Last updated
This policy explains what personal information Kurchu Software Solutions collects through this website, why, how long we keep it and the rights you have — including under UK GDPR, US state privacy laws, Canada's PIPEDA and the UAE's Personal Data Protection Law.
01Who we are
Kurchu Software Solutions is a mobile app development company based in Lahore, Pakistan, working with clients in the United Kingdom, the United States, Canada and the United Arab Emirates. We are responsible for the personal information described in this policy.
For any privacy question or request, email info@kurchu.com.
02Information we collect
We only collect what we need to answer enquiries and run this website:
- Enquiries you send us — your name, email address, company, phone number and anything you tell us about your project, budget or timeline. When you submit a project-brief form, your details are sent to our server and delivered to our inbox by our email provider, Resend. If that delivery fails, the form opens your own email app or WhatsApp with the message prepared instead.
- Conversations with our AI assistant — the messages you type and any images you attach are sent to Google's Gemini API to generate a reply. We do not keep a stored history of these chats on our servers. Please do not share sensitive personal information in the chat.
- Technical data — like most websites, our hosting provider records basic server logs (such as IP address, browser type and the pages requested) to keep the site secure and working.
04How we use your information
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
- To reply to your enquiry, arrange calls and prepare proposals.
- To deliver and manage projects if you become a client.
- To keep this website secure and working properly.
- To meet our legal, tax and accounting obligations.
05Legal bases (UK GDPR)
Where UK GDPR applies, we rely on: steps taken at your request before entering a contract (answering your enquiry and preparing a proposal); performance of a contract (delivering a project); our legitimate interests (running and securing our business and website); and legal obligation (keeping records the law requires).
07International transfers
We are based in Pakistan, so information you send us is processed there, and some of our service providers process data in other countries. Where the law of your country requires it, we use appropriate safeguards for these transfers, such as contractual protections.
08How long we keep it
Enquiries that do not lead to a project are kept for up to two years after our last contact, then deleted. Client records are kept for the length of the engagement and afterwards for as long as legal, tax and accounting rules require.
09Your rights
Depending on where you live, you may have the right to access, correct or delete your personal information, to object to or restrict how we use it, to receive a copy in a portable format, and to withdraw consent. To make a request, email info@kurchu.com. We will respond within one month, and we will not treat you differently for exercising your rights.
- United Kingdom — you can also complain to the Information Commissioner's Office (ICO).
- United States — residents of California and other states with privacy laws can request access, correction and deletion; we do not sell or share personal information for targeted advertising.
- Canada — under PIPEDA you can request access to and correction of your information, and complain to the Office of the Privacy Commissioner of Canada.
- United Arab Emirates — under the Personal Data Protection Law you can request access, correction and erasure, and object to certain processing.
10Children
This website is intended for businesses and is not directed at children. We do not knowingly collect personal information from children under 16; if you believe a child has contacted us, email us and we will delete their information.
11Security
We use appropriate technical and organisational measures to protect personal information, including encrypted connections (HTTPS) and limiting access to the people who need it. No method of transmission or storage is completely secure, but we work to protect your information and will act promptly if a problem occurs.
12Changes to this policy
We will update this page when our practices change and show the date of the latest version at the top.