Privacy

What we collect

• If you create an account: your name, and a mobile number or an email address — whichever you signed up with. A password, stored only as a one-way hash we cannot reverse.
• If you sign in with Google or Apple: your name and email address as they provide it. We never see your password for those accounts.
• If you contact an agency: the fact that you did, and which property. Your number is shared with that agency so they can call you back.
• If you submit a property: what you tell us about it and how to reach you, passed to the agency holding your area.
• Everyone: ordinary server logs, and a count of how many times a listing was viewed. We do not build an advertising profile of you.

What stays on your device

Recent searches and recently viewed properties are kept in your browser, not on our servers. Clearing your browser data removes them and we never see them. Saved searches are different — those are deliberate, stored on your account, and are what we check each morning to tell you about new matches.

Who we share it with

The agency holding the area you enquired about, and nobody else for marketing purposes. We use a small number of processors to run the service — hosting, email delivery, push notifications — and they act on our instructions only. We do not sell your data.

Where it is kept

On servers in the European Union, with backups encrypted in transit and at rest. Enquiry records are kept as long as the agency’s account is active, because they are the evidence base for what that agency is invoiced.

What you can ask for

A copy of what we hold, a correction, or deletion of your account. Email hello@kothi.pk from the address or number on the account. Deleting an account removes your saved searches, notifications and shortlist; enquiry records already sent to an agency remain with that agency.

Notifications

Emails about a saved search stop the moment you delete the search, from your account page. Push notifications stop when you turn them off for the app on your phone.