What parhao collects, why, where it lives, and how to reach us about your data. This policy covers parhao.com and the parhao iOS app.
Last updated: 27 July 2026
parhao is a pre-launch education-sponsorship platform for Pakistan. Sponsors pay a student's school fees directly to the school's bank account — parhao never holds the money and takes 0%. You can reach us at any time at [email protected].
Sponsors: name, email, phone/WhatsApp, country, city, and your monthly pledge amount and preferences.
Schools: school name, type, city, grades, enrolment, principal/contact name, phone, email (optional), bank name, IBAN, account title, monthly fee, and call-time preferences. Bank details are used only to enable direct fee transfers and are shared with a sponsor only after you are matched.
Parents / guardians: your name, relationship, city, phone, call-time preferences, and each child's name, age, class, and school.
Students: name, age, class, city, school, dream, a short story, phone, and call-time preferences — plus an optional profile photo and story video. Photos and videos are shown only to verified sponsors, never the public.
Receipts: when a sponsor or school uploads a fee-transfer receipt, we store the receipt image/PDF, amount, and date.
Automatically: IP address, browser/device user-agent, and approximate country (from our CDN) — used for security, rate limiting, and abuse prevention only.
To run the platform: reviewing and verifying applications (including a short video call), matching sponsors with students, and operating your account. We also send a small number of transactional emails: team alerts to our staff inbox, signup confirmations, reference-code recovery, and admin security emails. We do not send marketing email.
We never sell your data. We never show student photos or videos publicly. We run no advertising and no cross-site tracking. The only third-party checks are Cloudflare Turnstile (bot protection on signup forms) and Cloudflare's content delivery network in front of the site.
Application data is stored in a managed PostgreSQL database, and uploaded files (photos, videos, receipts) in an AWS S3 bucket — both in the ap-southeast-1 (Singapore) region. Email is delivered through Cloudflare Email Sending. Access is limited to the parhao team.
While your application is active, and for a reasonable period afterwards for record-keeping. You can ask us to correct or delete your information at any time at [email protected] — tell us your reference code (PHO-…) and we'll handle it.
Student and family applications are submitted with a parent or guardian's involvement — contact details belong to an adult, and verification always happens with the family and school. We never contact a child directly without a guardian.
Connections are encrypted (HTTPS). Uploads are type-checked and stored under random, unguessable keys. Our admin dashboard is rate-limited and password-protected; the mobile API requires a shared key. No system is perfectly secure, but we collect the minimum needed to run the platform.
If this policy changes, we'll update this page with a new date. Questions, corrections, or deletion requests: [email protected].