Privacy Policy

Last Updated: September 2026

Kwiktest Pvt Ltd (“Company”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our website https://kwiktest.com/ and our Kwiktest Mobile Application (available on the Google Play Store and Apple App Store).

This Privacy Policy applies when you:

Create an account or log into our mobile application or website.
Purchase health products or diagnostic self-test kits from us.
Contact us, submit data forms, or interact with our services.
Provide information through integrations or third-party services authorized by you.

Our website and mobile application are not intended for children. We do not knowingly collect personal data from children in violation of applicable law. If you believe that a child has provided personal data to us, please contact us so that we can review and take appropriate action.

1. Data Controller & Contact Details

Kwiktest Pvt Ltd is responsible for the processing of personal data described in this Privacy Policy, subject to applicable law.

Contact Details:

Kwiktest Pvt Ltd
3rd Floor, 210-B Commercial
Sector C, Tulip Block
Bahria Town, Lahore
Pakistan

Email: hello@kwiktest.com
Phone: +92 3208337264

2. Data We Collect

Depending on how you use our website and mobile application, we may collect, use, store, and transfer the following categories of personal data:

Identity Data: Name, username, and account-related information.
Contact Data: Delivery address, billing address, email address, and phone number.
Financial & Transaction Data: Order history, order details, payment status, refund information, and transaction references. We do not directly store your credit card details or wallet PINs where these are processed by the relevant payment provider.
Technical & Device Data: IP address, device identifiers, device type, operating system, and other technical information where collected by our services or authorized third-party technologies.
Usage Data: Information about how you interact with and navigate our mobile application and website, where such information is collected through analytics or other technologies.
Health & Diagnostic Data: Where applicable, health-related or diagnostic information that you voluntarily provide when using diagnostic self-test kits or related application features. The specific information collected depends on the functionality you use.

We aim to collect only the information reasonably necessary for the purposes described in this Privacy Policy and for other purposes disclosed to you at the time of collection.

3. How We Collect Data

We may collect personal data through the following methods:

Direct Interaction: When you create an account, purchase products, complete forms, submit information, or contact customer support.
Automated Technologies: Through server logs, cookies, device permissions, analytics tools, and other technologies used by our website or mobile application, where applicable.
Third Parties: Through payment providers, logistics partners, service providers, and other integrations where information is shared with us in accordance with applicable permissions, contractual arrangements, or legal requirements.

4. How We Use Your Data

We may use your personal data for the following purposes:

To create, manage, and authenticate your user account.
To process, fulfill, and deliver your health product and diagnostic kit orders.
To process and verify digital payments through integrated payment service providers.
To provide customer support and respond to inquiries.
To manage refunds, returns, and order-related issues.
To prevent fraud, detect suspicious activity, and protect the security of our services.
To maintain, troubleshoot, and improve our website, application, and infrastructure.
To send service-related communications, including order updates and account notifications.
To send promotional communications where permitted and where you have provided the required consent.
To comply with applicable legal, financial, tax, health, safety, and regulatory obligations.

5. Marketing & Communication

We may send promotional communications where you have opted in or where otherwise permitted by applicable law.

You may opt out of promotional communications at any time by using the unsubscribe mechanism included in applicable emails or by adjusting your notification preferences within the application, where available.

Opting out of marketing communications will not prevent us from sending essential service-related communications, such as order confirmations, delivery updates, security notifications, or account-related messages.

We do not sell your personal data to third parties for their own marketing purposes.

5.1 Push Notifications

We may send push notifications through the Kwik Test application to provide important service-related information, including order confirmations, order status updates, delivery updates, account-related alerts, security messages, and, where applicable, promotional communications.

To deliver push notifications, we may process a device or application push notification token, such as a Firebase Cloud Messaging (FCM) token, together with information required to associate the notification with the relevant user account or device. The token is used only for notification delivery and related notification-management purposes.

You can manage or disable push notifications through your device settings and, where available, through the notification preferences within the application. Disabling notifications may prevent you from receiving timely updates, although essential information may remain available within your account or through other communication channels.

When you delete your account, we will remove or deactivate the associated push notification token and stop using it for account-related notifications, subject to technical processing and legally required retention.

6. Sharing Your Data (Payment Gateways & Partners)

We may share the information reasonably necessary to provide our services, fulfill orders, process payments, maintain our infrastructure, prevent fraud, and comply with applicable legal requirements.

Payment Gateways: We use integrated payment service providers, including JazzCash (Jazz Mobile Wallet) and PayFast (APPS Pvt Ltd), where applicable. Information necessary to process or verify payments may be shared with the relevant provider. These providers may process payment information in accordance with their own applicable terms, privacy policies, and legal obligations.
Logistics & Couriers: We may share necessary customer contact, delivery, and order information with delivery and logistics partners to fulfill and deliver orders across Pakistan.
Infrastructure & Technology Providers: We may use third-party hosting, database, security, monitoring, analytics, communication, and other technology service providers. Such providers may process information on our behalf where necessary to provide their services.
Legal & Regulatory Authorities: We may disclose information to courts, government authorities, regulators, law enforcement agencies, or other authorized parties where required or permitted by applicable law.
Fraud Prevention & Security: We may share or process relevant information where necessary to investigate suspected fraud, protect users, secure our services, or protect our legal rights.

We seek to use appropriate contractual, technical, and organizational safeguards for personal data processed by service providers on our behalf, as applicable to the relevant relationship and legal requirements.

We do not authorize third parties to use your personal data for purposes unrelated to their services to us unless such use is independently permitted or required by applicable law.

7. Data Security

We implement reasonable technical and organizational safeguards designed to protect personal data against unauthorized access, alteration, disclosure, loss, or misuse.

Depending on the type of information and the system involved, these safeguards may include:

Encryption in transit using appropriate security protocols, such as SSL/TLS, where supported.
Access controls and authentication mechanisms for systems handling personal data.
Role-based access controls intended to limit access to authorized personnel.
Security monitoring, server protections, and measures designed to reduce the risk of unauthorized access.
Additional safeguards for sensitive information, including health-related data, where applicable.

No method of transmission, storage, or electronic security can guarantee absolute security. We continuously review and improve our security measures based on the nature of the data and the risks involved.

8. Data Retention & Account Deletion Policy

We retain personal data only for as long as reasonably necessary to provide our services, fulfill our legal and regulatory obligations, resolve disputes, prevent fraud, maintain security, and maintain appropriate financial and transaction records.

8.1 Immediate Account Deletion

When you request account deletion through the Kwiktest Mobile Application and confirm your request, your account will be deleted immediately, subject to applicable legal and regulatory retention requirements.

After your deletion request is confirmed:

Your account access will be disabled immediately.
You will be logged out of the application.
Your authentication credentials and active access tokens will be invalidated.
Personal information associated with your account will be deleted or anonymized, where applicable.
Profile images and other unnecessary personal account information will be deleted.
You will not be able to recover your deleted account or its associated personal data.

Account deletion is permanent and cannot be undone.

Certain information may be retained where necessary or permitted for legal compliance, financial and tax records, fraud prevention, security, dispute resolution, or other legitimate purposes described in this Privacy Policy.

8.2 Account Deletion Requests

You may request account deletion through either of the following methods:

In-App Deletion: Navigate to Account Profile > Delete Account within the Kwiktest Mobile Application. After you confirm the deletion request, your account will be deleted immediately, subject to lawful retention requirements.
Web-Based Deletion: If you have uninstalled our application or cannot access your account, you may submit a deletion request through our Account Deletion & Data Removal Request Page.

We may verify deletion requests as reasonably necessary to protect accounts from unauthorized deletion. Website deletion requests may require identity verification or other security checks before processing.

8.3 Information Deleted Following Account Deletion

Following a confirmed account-deletion request, we will delete or anonymize applicable personal information, subject to lawful retention requirements.

Account name and profile information.
Email address and phone number.
Saved delivery and billing addresses.
Profile images and other personal account information.
Authentication credentials and account access information.
Other personal information that is no longer necessary for a legitimate purpose.

8.4 Retention of Order & Transaction Records

Deleting your account does not necessarily result in the deletion of all historical order and transaction records.

We may retain certain order, payment, refund, invoice, and transaction records where necessary to comply with applicable financial, tax, legal, fraud prevention, dispute resolution, or other legitimate recordkeeping requirements.

Where such records are retained, we aim to limit the information to what is reasonably necessary for the applicable purpose and, where feasible and appropriate, delete or anonymize personal identifiers that are no longer required.

8.5 Retention Periods

We do not apply a universal retention period to all personal data. The retention period depends on the type of information, the purpose for which it is retained, applicable legal or regulatory requirements, and legitimate business needs.

Information that is no longer necessary and is not subject to a lawful retention requirement will be deleted or anonymized in accordance with our applicable procedures.

8.6 Deletion Completion & Backups

We will take reasonable steps to delete or anonymize applicable personal data from our active systems following a confirmed account-deletion request, in accordance with our deletion procedures and applicable legal requirements.

Some information may remain temporarily in secure backups until the normal backup deletion or overwrite cycle. Backup copies are not used to restore deleted accounts for normal account recovery.

Where information is retained for a legitimate legal, financial, security, fraud prevention, or disaster recovery purpose, access and use will be restricted to that purpose.

8.7 Account Deletion Confirmation

Before confirming account deletion, we will provide a clear notice that account deletion is permanent and that the user will not be able to recover their deleted account or associated personal data, except for information retained where legally required or otherwise permitted by applicable law.

9. Your Rights

Subject to applicable law and any relevant legal limitations, you may have rights concerning your personal data, including:

Access: Request information about the personal data we hold about you.
Correction: Request correction of inaccurate or outdated personal information.
Deletion: Request deletion of your account and applicable personal data.
Withdrawal of Consent: Withdraw consent where processing is based on consent, subject to applicable limitations.
Restriction or Objection: Request restriction of or object to certain processing activities where such rights apply under applicable law.

These rights may be subject to legal exceptions, including requirements to retain certain information for financial, tax, security, fraud prevention, or other lawful purposes.

To exercise your rights or ask questions about this Privacy Policy, contact us at:

Email: hello@kwiktest.com
Phone: +92 3208337264

10. Legal & Regulatory Considerations

We aim to comply with applicable laws and regulations relevant to our business operations, data processing activities, and digital services.

These may include applicable provisions of Pakistan's Prevention of Electronic Crimes Act, 2016 (as amended), applicable tax and financial recordkeeping requirements, and the Google Play Developer Program Policies where applicable.

Our data processing and retention practices are subject to the legal requirements applicable to the services we provide and the jurisdictions in which we operate.

Nothing in this Privacy Policy is intended to limit any rights or protections that cannot lawfully be excluded under applicable law.

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, data processing practices, legal requirements, or security measures.

Any changes will be posted on this page with an updated “Last Updated” date. We encourage you to review this Privacy Policy periodically to remain informed about how we handle personal data.

Last Updated: September 2026