Privacy Policy

Last updated: 2026-02-16

This Privacy Policy explains how Lawyer Diary ("we", "us", "our") — operated by Its 4 You / UX4U — collects, uses, stores, and protects your personal data when you use our website and services. We are committed to protecting your privacy in line with applicable laws of Pakistan, including the Prevention of Electronic Crimes Act 2016 (PECA) and the Electronic Transactions Ordinance 2002 (ETO), as well as emerging norms under the draft Personal Data Protection Bill.

1. Scope and applicability

This policy applies to all users of Lawyer Diary in Pakistan and elsewhere. By using our Service, you consent to the practices described herein. If you do not agree, please do not use the Service.

2. Information we collect

We collect the following categories of data:

  • Account and profile data: Name, email address, phone number, and firm affiliation used to create and manage your account.
  • Practice data: Client names, case details, court information, invoices, and other data you input while using the Service.
  • Technical and usage data: IP address, device type, browser information, and logs for security, operations, and product improvement.
  • Payment data: Billing information processed via Stripe. We do not store full payment card details on our servers.

We process your data for the following purposes:

  • Providing authentication, access, and core product features.
  • Firm onboarding, team management, and subscription administration.
  • Preventing fraud, abuse, and unauthorized access (PECA compliance).
  • Fulfilling legal obligations and responding to lawful requests.
  • Improving our Service with aggregated, anonymized analytics.

4. Data retention

We retain your data only as long as necessary to provide the Service, comply with legal obligations (including under PECA and court orders), or resolve disputes. Upon account deletion, we remove or anonymize your data within a reasonable period, except where retention is required by law.

5. Third-party services

We use trusted third parties for hosting, authentication, and payments:

  • Supabase — authentication and database (data may be stored in cloud infrastructure).
  • Stripe — payment processing. Stripe's privacy policy governs their handling of payment data.

These providers are bound by data processing agreements and applicable law. We do not sell your personal data to third parties.

6. Security measures

We implement technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction, in line with requirements under PECA 2016. This includes encryption in transit and at rest, access controls, and secure development practices.

7. Your rights

You have the right to:

  • Access and receive a copy of your personal data.
  • Correct inaccurate or incomplete data.
  • Request deletion of your data, subject to legal retention.
  • Withdraw consent where processing is consent-based.
  • Lodge a complaint with a relevant authority in Pakistan.

To exercise these rights, contact us via the app's contact page or the email provided below.

8. Cross-border transfers

Your data may be processed on servers outside Pakistan. Where we transfer data internationally, we ensure appropriate safeguards in accordance with applicable law, including any future requirements under the Personal Data Protection Bill when enacted.

9. Contact us

For questions about this Privacy Policy or to exercise your rights:

  • Use the contact form in the Lawyer Diary app (when logged in).
  • Email: support at the domain of this Service.

We will respond to your request within a reasonable time as required by applicable law.