BundleWala is built to work without an account and without advertising. This policy explains, in plain language, the limited data the app and this website do handle, why we handle it, who processes it, and how you can have it deleted.
1. Who we are
BundleWala is a free Android application published by TechShiner, an independent software studio based in Pakistan. For the purposes of applicable data-protection law, TechShiner is the controller of the personal data described here.
Privacy contact: contact@techshiner.com. Postal contact: TechShiner, Pakistan.
2. Scope
This policy covers:
- the BundleWala Android app (package com.techshiner.bundlewala);
- the marketing site at bundlewala.techshiner.com; and
- the support, feedback and launch-notification forms connected to it.
It does not cover the operator websites, blog sources, Google Play or other third-party services you may open from the app. Those services have their own privacy policies.
3. Information you provide
Account details
Browsing the catalogue, comparing packages, using the guided finder, favourites and trackers does not require an account. If you choose to sign in — which is required for AI chat — Firebase Authentication processes:
- your email address and display name;
- a Firebase user identifier (UID);
- the sign-in method used (Google or email); and
- a profile photo, only if your sign-in provider supplies one and the app displays it.
If you sign in with email, Firebase handles authentication. TechShiner does not receive or store your password. You can use the app as a guest for every feature except AI chat.
Favourites and tracked packages
Favourites and package trackers are stored locally on your device. If you are signed in and have a connection, they are also synced to the BundleWala API so they survive a reinstall or a new phone. A synced record contains the package identifier, network identifier and the date you added it. It does not contain your contacts, messages or browsing history.
AI chat
AI chat requires an account for access control, but your questions are processed on your device against the local catalogue. The conversation context — at most the last ten questions — is stored only on the device and clears after three days, or sooner if you clear it. We do not receive your question text, and we do not send it to a paid language-model provider.
Feedback, support and contact messages
When you send feedback in the app or use a contact form on this site, we collect the name and email address you enter, the subject or topic, your message, and — for in-app feedback — the star rating and feedback category. If you write to us directly, we receive whatever you include in that email.
Launch notifications
If you ask to be notified when BundleWala reaches Google Play, we collect the email address you submit. We use it to send one launch message and for no other purpose.
What we do not ask for
We do not ask for your national identity number, payment-card details, contacts, precise location, SMS content or call history. BundleWala has no in-app purchases and processes no payments.
4. Information collected automatically
Push notification token
If notifications are enabled, Firebase Cloud Messaging issues a device token. We use it to send new-package notifications on the new_packages topic and to open the relevant package when you tap a notification. The token identifies an app installation; it is not your phone number.
Product analytics
The app uses Firebase Analytics (Google Analytics 4) to understand which parts of the catalogue are used. Events include screen views, package views, search terms, sort and category changes, favourite and tracker actions, activation method, refresh outcomes and feedback rating/category. Google also collects technical information such as device model, operating-system version, app version, language, an app instance identifier and an approximate location derived from IP address.
Analytics is used in aggregate to improve the catalogue and the app. It is not used to serve ads, and BundleWala contains no advertising SDK.
Crash and diagnostic data
BundleWala does not currently include a separate crash-reporting SDK. Depending on your device and Google Play settings, Android or Google Play may collect crash or application-not-responding diagnostics and share them with the developer. Those diagnostics can include device model, operating-system version, app version and a stack trace.
Server logs
Our API and website infrastructure processes standard request logs — IP address, user agent, requested path, timestamp, response status — to deliver content, prevent abuse and diagnose failures. These logs are not used to build advertising profiles.
5. Device permissions
- Phone state / phone numbers. Used to detect the carrier of SIMs inserted in your device so BundleWala can suggest the right network. This happens on the device. We do not upload your phone number or SIM serial number, and the app works if you deny the permission.
- Microphone. Used only when you tap the voice-input button in the assistant. See the voice section below.
- Notifications. Used for new-package alerts when you opt in. Android asks once; if you decline, you can change it in system settings.
- Internet. Used to refresh the catalogue, sign in, sync favourites and trackers, load the blog and receive notifications.
6. Voice input
Voice input uses your Android device's speech-recognition service. BundleWala does not record, store or upload audio to TechShiner servers. Depending on your device, Android version and Google settings, the recognition service may process your audio with Google. That processing is governed by Google's privacy policy and your device settings, not by this policy.
You can always type instead. If you prefer that audio never leaves your device, do not use the microphone button and review your Android speech-recognition settings.
7. How we use information
- To provide the catalogue, accounts, chat gate, favourites and trackers.
- To sync favourites and trackers across your devices when you sign in.
- To answer support, feedback, correction and deletion requests.
- To send the launch notification you asked for and new-package alerts you opted into.
- To understand feature usage and improve the catalogue and app.
- To secure the service, rate-limit forms and prevent abuse.
- To comply with legal obligations and enforce our terms.
We do not use your data for automated decision-making that produces legal or similarly significant effects. The assistant ranks packages; it does not make decisions about you.
8. Legal bases
Where data-protection law requires a legal basis, we rely on:
- Contract — creating and operating your account, syncing favourites and trackers at your request.
- Legitimate interests — operating and securing the app, preventing abuse, understanding aggregate product usage, and answering messages you send us. We keep these interests balanced against your rights.
- Consent — notifications, microphone access, and any analytics or communications that specifically require consent in your jurisdiction. You can withdraw consent at any time through device settings or by contacting us.
- Legal obligation — retaining records where the law requires it.
9. Third parties and sharing
We do not sell personal data. We share the minimum necessary with service providers that help us run BundleWala:
| Provider | Service and data | Policy |
|---|---|---|
| Google LLC | Firebase Authentication (account email, name, UID); Cloud Messaging (device token, topic); Firebase Analytics (events, device and app information, approximate location); Google Play services and Android speech recognition (voice, when used). | policies.google.com/privacy |
| Cloudflare, Inc. | API hosting, D1 database storage for accounts, favourites, trackers and submissions, and network security/logs. | cloudflare.com/privacypolicy |
| Hostinger International Ltd | Email mailbox and delivery for feedback, support and deletion correspondence (name, email, subject and message). | hostinger.com/privacy-policy |
| Vercel Inc. | Hosting and request logs for this website (IP address, user agent, requested path, timestamp). | vercel.com/legal/privacy-policy |
| Google Play | App distribution, install and crash diagnostics, and any review you choose to leave. Governed by Google's policies. | policies.google.com/privacy |
We may also disclose information if required by law, to protect rights or safety, or as part of a merger or acquisition — in which case we will tell you before your data becomes subject to a different policy.
Activation codes and sharing are handled by your device. When you tap activate, dial or share, Android opens the dialler, SMS app or share sheet. We do not send your account details to mobile operators.
10. No sale, no ads, no model APIs
- We do not sell, rent or trade personal data.
- BundleWala has no advertising SDK and no behavioural advertising.
- The assistant is deterministic retrieval running on your device. We do not send your chat questions to a paid language-model provider or use them to train a model.
- We do not use data brokers or enrichment services to identify you.
11. How long we keep data
| Data | Retention |
|---|---|
| Account profile, synced favourites and trackers | Until you delete your account, or 30 days after a verified deletion request. Local copies are removed when you sign out and clear app data or uninstall. |
| Feedback, support and contact messages | Up to 24 months for support history and legal records, unless a longer period is required by law. |
| Launch notification email | Until the launch message is sent or you ask us to remove it, whichever comes first. |
| Push notification token | While the installation is active; tokens that become invalid are removed. Signing out or uninstalling stops delivery. |
| Analytics events | Up to 14 months, in line with our Firebase Analytics setting. |
| Server and security logs | Normally up to 30 days. Security or abuse records may be kept longer where necessary. |
Residual copies in routine backups expire on the normal backup cycle. When data is no longer needed, we delete or aggregate it.
12. Security
We use HTTPS/TLS for data in transit, Firebase Authentication for sign-in, access controls on the API and database, input escaping and rate limits on public forms. Access to production systems is limited to people who need it to operate and support the app.
No method of transmission or storage is perfectly secure. If a breach affects personal data and requires notification under applicable law, we will notify affected users and the relevant authority without undue delay.
13. International transfers
TechShiner is based in Pakistan, but our providers operate globally. Your data may be processed in countries other than Pakistan, including the United States, the European Union and other locations where Google, Cloudflare, Hostinger or Vercel operate. Where required, we rely on appropriate safeguards such as standard contractual clauses and the providers' data-processing terms. You can contact us for more information about the safeguards used.
14. Children
BundleWala is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If local law sets a higher age for digital consent, that age applies. If you believe a child has provided personal data, contact us and we will delete it.
15. Your rights
Depending on where you live, you may have the right to:
- access a copy of the personal data we hold about you;
- correct inaccurate information;
- delete your account and associated data;
- restrict or object to certain processing;
- receive portable data in a machine-readable format;
- withdraw consent where processing is based on consent; and
- complain to a competent supervisory authority.
Email contact@techshiner.com with the subject “Privacy request”. We may ask you to verify control of the account before acting. We aim to respond within 30 days. We will not charge a fee for a normal request.
16. Account and data deletion
You can request deletion from our dedicated page: bundlewala.techshiner.com/data-deletion, or by emailing contact@techshiner.com with the subject “Account deletion request”. We verify the request and complete it within 30 days.
Deletion removes your account profile, email link, Firebase UID record, synced favourites and synced trackers. Some records may be retained where we have a legal or security need — for example, a support message kept for dispute resolution. Those records are not used to recreate your account. See the data deletion page for the full list.
Uninstalling the app does not delete your account. If you signed in and synced data, open the app and go to Profile & settings → Delete account. The deletion page and email route above remain available if you no longer have the app. In-app deletion is available in the app.
17. Cookies and this website
The marketing site does not set advertising or cross-site tracking cookies. The forms submit directly to our API. Our hosting provider processes standard request logs as described above. If we add site-analytics that uses cookies or similar identifiers, we will update this policy and, where required, ask for consent first.
18. Changes to this policy
We may update this policy when the app, our providers or the law change. The “last updated” date at the top always shows the current version. If a change materially affects how we handle personal data, we will provide a clear notice in the app or on this page before it takes effect.
19. Contact
Questions, requests or complaints about privacy:
TechShiner — BundleWala privacy
Email: contact@techshiner.com
Location: Pakistan
Response time: within two business days.
If you are not satisfied with our response, you may contact the data protection authority in your country.