This Privacy Policy explains how Digital Munshi ("Digital Munshi", "Munshi", "we", "us") handles personal data when you use the Digital Munshi: Lawyer Case Diary mobile app, the web app at https://app.digitalmunshi.com.pk (opens in a new tab) and the website https://digitalmunshi.com.pk (together, the "Service").
In short: we collect what we need to run your diary, we never sell your data, we do not use it for advertising, AI providers do not train on it, voice recordings are deleted after 30 days by default, and you can export or delete everything at any time.
Who we are
The Service is provided by Digital Munshi, a sole proprietorship owned and operated by Abdullah Rauf, Lahore, Punjab, Pakistan. We are the controller of the personal data described in this policy.
- Privacy questions and requests: [email protected]
- General support: [email protected] · Phone: +92 321 0431919 · WhatsApp: +92 321 0431919
The developer name on Google Play and the App Store is Digital Munshi, and the app is listed as Digital Munshi: Lawyer Case Diary.
Data we collect
Data you give us
- Account details: your name, mobile number, email (if you sign in with Google), title (e.g. Advocate High Court), optional bar licence number, city, the courts you appear in and your practice areas.
- Voice recordings: audio you record when you press the microphone. The app never records without you pressing the mic.
- Case and client data ("diary content"): cases, parties, clients (names, father’s names, phone numbers), courts, judges, FIR numbers, police stations, legal sections, hearing dates and times, purposes, outcomes, notes, to-dos, fees and the transcripts and AI drafts created from your recordings. This often includes personal data about third parties (your clients and other parties) — see Your responsibilities.
- Documents: files you scan or upload to a case.
- Chamber data: if you create or join a chamber, the names and phone numbers of members you invite and their roles.
- Messages to us: what you send through support, WhatsApp, email or our website forms (waitlist, beta, founding lawyers, contact, account deletion).
Data collected automatically
- Device and diagnostics: device model, operating-system version, app version, crash reports and error logs (without diary content).
- Usage events: which features are used (for example "case approved"), linked to a pseudonymous ID — never the content of your cases.
- Push token: a device identifier used to deliver notifications.
- Website: our website uses privacy-friendly page statistics that do not use cookies and do not track you across sites. Our servers process IP addresses transiently for security (e.g. rate limiting).
Payment data
Subscriptions bought in the Android app are processed by Google Play; in the iPhone app by Apple. Direct payments are processed by our payment partner or by bank transfer. We receive the purchase status, plan, amount and renewal date — never your full card number.
Summary table
| Data type | Examples | Why we collect it | Shared with | Optional? |
|---|---|---|---|---|
| Personal info | Name, phone number, email, title, bar licence (optional), city, courts | Account, app functionality, communication | Processors only | No |
| Audio | Voice recordings you make in the app | App functionality (transcription) | Processors only (speech-to-text) | No |
| App content | Cases, hearings, clients, notes, outcomes, fees, transcripts | App functionality | Processors only (AI structuring) | No |
| Files and docs | Scanned or uploaded documents | App functionality | Processors only (storage) | Yes |
| Financial info | Purchase history and subscription status (no full card numbers) | Billing | Payment providers | No |
| App activity | Feature usage events | Analytics, improving the product | Processors only | No |
| App info and performance | Crash logs, diagnostics | Stability | Processors only | No |
| Device or other IDs | Push notification token | Notifications | Processors only | No |
How we use your data
- To provide the Service: transcribe your recordings, draft case records for your approval, schedule reminders, build cause lists, send the WhatsApp evening brief you opted into, sync your diary between your devices and your chamber, and answer Ask Munshi questions from your own data.
- To run your account and subscription: sign-in codes, trial and billing status, receipts, read-only mode after expiry.
- To support you: answer questions and fix problems you report.
- To keep the Service secure and reliable: prevent abuse, detect fraud, fix crashes.
- To improve the Service: aggregate usage statistics and the corrections you make to AI drafts (as text, without audio) to improve accuracy.
- To communicate: service messages (for example changes to these terms). Marketing messages only with your consent, and you can opt out at any time.
- To meet legal obligations: for example tax and accounting records of payments.
We do not sell personal data, use it for advertising or build advertising profiles.
Legal bases
We process personal data because it is necessary to perform our contract with you (providing the Service), for our legitimate interests (security, improving the product, answering enquiries) balanced against your rights, to comply with law, and on the basis of your consent where we ask for it (for example the WhatsApp brief, microphone access, marketing). You can withdraw consent at any time; this does not affect processing already carried out.
AI processing of your recordings
When you record a voice note, the audio is sent securely to third-party AI speech and language services, which return a structured draft. These providers act as our processors, are bound by API terms under which submitted data is not used to train their models by default, and do not use your data for their own purposes. A person at Munshi does not listen to your recordings. Nothing is saved to your diary until you approve it. See our AI and voice processing policy.
Who we share data with
We share personal data only with the following types of service provider ("sub-processors") that help us run the Service, including third-party AI services. They work under contracts that require them to protect the data and use it only to provide their service to us:
| Type of provider | What they do for us | Data involved | Location |
|---|---|---|---|
| Cloud hosting and database | Storing your account, diary, documents and recordings, and running our servers | Account, case, client, hearing and document data; voice recordings | Cloud data centre outside Pakistan |
| Third-party AI speech services | Turning your voice notes into text | Voice recordings; not used to train their models under their business terms | Outside Pakistan |
| Third-party AI language services | Structuring transcripts into case fields, writing summaries and answering Ask Munshi | Transcripts and relevant diary text; not used to train their models under their business terms | Outside Pakistan |
| Messaging services | The WhatsApp evening brief and sign-in codes | Phone number and the content of the message | Global |
| App platform services | Sign-in, push notifications, app builds and updates | Account identifier, email, device push token, app version | Global |
| Website delivery and security | Serving the website, blocking abuse and spam, privacy-friendly page statistics | IP address (temporarily) and form submissions passed to our database | Global |
| Diagnostics and analytics | Crash reports and feature-usage statistics, without case content | Device model, app version, error traces, pseudonymous usage events | Outside Pakistan |
| Payment providers | Taking payments through app stores and licensed payment partners | Name, contact details and payment status; full card numbers never reach us | Pakistan and global |
We may also disclose data if required by law or a valid order of a competent court or authority in Pakistan, to protect the rights, safety or property of our users or the public, or as part of a sale or reorganisation of the business (in which case this policy will continue to apply). Members of a chamber you join can see the chamber’s shared data according to their role.
International transfers
Some sub-processors are located outside Pakistan (see the table). Your diary database is hosted in West EU (Ireland). We choose providers with strong security practices and contractual protections for data transferred abroad.
Security
Data is encrypted in transit (TLS) and at rest. Database rules (row-level security) restrict each lawyer to their own records and their chamber’s shared records. API keys are held only on our servers. The app supports a fingerprint/device-PIN lock and hiding case names in notifications. No system is perfectly secure; if we become aware of a breach affecting your personal data we will notify you and, where required, the relevant authorities without undue delay. More detail: Security & privacy.
How long we keep data
- Voice recordings: deleted automatically 30 days after recording by default (you can choose a shorter or longer period in settings).
- Diary content and documents: for as long as your account exists, including read-only periods after a subscription ends, so you never lose your diary.
- After you delete your account: removed from our live systems within 30 days and from backups within a further 30 days.
- Payment and invoice records: kept as long as required by tax law (typically up to 6 years).
- Website form submissions: up to 24 months, unless they become part of an account.
See the full data retention schedule.
Deleting your data
You can delete your account and all associated data at any time:
- In the app: More → Privacy & security → Delete my account.
- On the web, without reinstalling the app: use the request form at https://digitalmunshi.com.pk/legal/account-deletion, or email [email protected] from the email or phone number on your account.
Deleting your account does not cancel a Google Play or App Store subscription — cancel it in the store first. Details of what is deleted and what is retained are on the account deletion page.
Your rights
Subject to applicable law, you can ask us to:
- access the personal data we hold about you and receive a copy (you can also export your diary as PDF or Excel in the app);
- correct inaccurate data;
- delete your data;
- restrict or object to certain processing;
- withdraw consent (for example, stop the WhatsApp brief by replying STOP);
- port your diary to another service (export to Excel).
Email [email protected]. We may need to verify your identity and will reply within 30 days. If you are not satisfied with our response, you may contact us again for escalation to the owner, and you may also raise a complaint with any competent authority.
Your responsibilities for client data
Your diary contains information about your clients and other people. You decide what to record and remain responsible for your professional duties of confidentiality and for having a lawful basis to record it. For that client data, we act on your behalf and only process it to provide the Service to you.
Children
The Service is intended for lawyers, law students and their staff, and is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
Cookies
The website does not set advertising or tracking cookies. Our page statistics are cookie-free. Forms use an anti-spam check, which may process limited device signals. See the cookie policy.
Pakistani law
Pakistan’s Personal Data Protection Bill has not yet been enacted. We follow internationally recognised principles — lawfulness, purpose limitation, data minimisation, accuracy, storage limitation, security and accountability — and comply with applicable Pakistani law, including the Prevention of Electronic Crimes Act, 2016. We will update this policy when new data-protection legislation comes into force.
Changes to this policy
We will post any changes on this page and update the "Last updated" date. If changes are significant, we will tell you in the app or by email/WhatsApp before they take effect.
Contact
Digital Munshi · Lahore, Punjab, Pakistan · [email protected] · +92 321 0431919