Privacy Policy

Account data — your name, email address, phone number, country of practice, and role (lawyer, firm administrator, law student, or client). This data is provided by you at sign-up.

Profile data — title, Bar Council enrolment number, firm name, hourly rate, and profile photo, where you choose to provide them.

Workspace content — matters, clients, hearings, time entries, expenses, trust ledgers, documents, messages, calendar events, and notes that you create inside the application.

Technical data — IP address, browser type, device type, operating system, and pages visited. We collect this to keep the service secure and to debug issues.

• To provide the practice management features you sign up for.
• To send service notifications (hearing reminders, deadlines, billing emails).
• To answer your support enquiries when you email us.
• To detect, prevent, and respond to fraud, abuse, or security incidents.
• To comply with applicable law, lawful court orders, and regulatory obligations.

We process your personal data on the basis of your contract with us (to deliver the service), our legitimate interests (to secure and improve the service), your consent (where you opt in to optional features), and legal obligations we are required to meet.

We share personal data only with service providers who help us run Legal Diary, and only to the extent strictly necessary. These include:

• Cloud hosting and database (Google Firebase, Singapore region by default).
• Email delivery providers used to send transactional emails.
• Payment processors for paid plans.

We do not sell, rent, or trade your personal information. We will disclose information when required by law or to protect the safety of users.

By default, your workspace data is stored in our Singapore (asia-southeast1) region. We may also replicate technical metadata to other regions for redundancy. Where personal data is transferred across borders, we rely on appropriate safeguards such as Standard Contractual Clauses.

We keep your workspace data while your account is active. If you cancel your account, your data is retained for 30 days to allow you to reactivate, after which it is permanently deleted within a further 60 days. We may retain limited financial and tax records longer where required by law.

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal retention requirements).
• Export your workspace data in a machine-readable format.
• Object to or restrict certain types of processing.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, email us at info@LegalDiary.com.pk.

We use encryption in transit (TLS 1.2+) and at rest, role-based access controls, and audited cloud infrastructure. No system is perfectly secure — please use a strong password and enable multi-factor authentication where available.

Legal Diary is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with information, please contact us so we can remove it.

We may update this Privacy Policy from time to time. Material changes will be communicated by email or by an in-app notice at least 14 days before they take effect.

For privacy questions or to exercise your rights, email info@LegalDiary.com.pk.