Back to Lawyer DiaryUX4U

Privacy Policy

Last updated: 2026-08-28

This Privacy Policy explains how Lawyer Diary ("we", "us", "our") — operated by Its 4 You / UX4U — collects, uses, stores, and protects your personal data when you use our website and services. We are committed to protecting your privacy in line with applicable laws of Pakistan, including the Prevention of Electronic Crimes Act 2016 (PECA) and the Electronic Transactions Ordinance 2002 (ETO), as well as emerging norms under the draft Personal Data Protection Bill.

1. Scope and applicability

This policy applies to all users of Lawyer Diary in Pakistan and elsewhere. By using our Service, you consent to the practices described herein. If you do not agree, please do not use the Service.

2. Information we collect

We collect the following categories of data:

  • Account and profile data: Name, email address, phone number, and firm affiliation used to create and manage your account.
  • Practice data: Client names, case details, court information, invoices, and other data you input while using the Service.
  • Technical and usage data: IP address, device type, browser information, and logs for security, operations, and product improvement.

We process your data for the following purposes:

  • Providing authentication, access, and core product features.
  • Firm onboarding and team management.
  • Preventing fraud, abuse, and unauthorized access (PECA compliance).
  • Fulfilling legal obligations and responding to lawful requests.
  • Operating, securing, and improving the Service.

4. Data retention

We retain your data only as long as necessary to provide the Service, comply with legal obligations (including under PECA and court orders), or resolve disputes. Upon account deletion, we remove or anonymize your data within a reasonable period, except where retention is required by law.

5. Third-party services

We use service providers only where needed to operate requested features:

  • Supabase — authentication and database (data may be stored in cloud infrastructure).
  • Vercel — website and application hosting.
  • Google Gemini, OpenAI, or Groq — artificial intelligence processing when an authorised user actively uses an AI feature. Questions, prompts, and relevant document excerpts may be sent to the configured provider.
  • Resend — transactional account, invitation, notification, and client-portal email delivery when configured.

We do not sell personal data or use advertising trackers inside the Lawyer Diary application. Providers may process data outside Pakistan under their own data processing terms.

6. Security measures

We implement technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction, in line with requirements under PECA 2016. This includes encryption in transit and at rest, access controls, and secure development practices.

7. Your rights

You have the right to:

  • Access and receive a copy of your personal data.
  • Correct inaccurate or incomplete data.
  • Request deletion of your data, subject to legal retention.
  • Withdraw consent where processing is consent-based.
  • Lodge a complaint with a relevant authority in Pakistan.

To exercise these rights, contact us via the app's contact page or the email provided below.

8. Cross-border transfers

Your data may be processed on servers outside Pakistan. Where we transfer data internationally, we ensure appropriate safeguards in accordance with applicable law, including any future requirements under the Personal Data Protection Bill when enacted.

9. Contact us

For questions about this Privacy Policy or to exercise your rights:

We will respond to your request within a reasonable time as required by applicable law.