The agreement, the data, and the limits.

What the customer signs

Every financed sale produces a written agreement stating: the handset's brand, model and IMEI; the total, the down payment and the balance; every instalment date and amount; the grace period; any late fee; and that the phone may be restricted if payment is not made after that grace period.

The agreement is in both Urdu and English, and the customer signs it on screen. A copy goes to the customer.

What the software refuses a dealer

• Locking a phone whose agreement is unsigned
• Locking a phone whose agreement has been voided
• Locking a phone whose plan figures changed after signing
• Locking before the grace period has run out
• Seeing or touching another shop's customers or handsets

Every lock, unlock, payment and edit is written to an audit trail, naming the person who did it.

What data is held

The customer's name, phone number, CNIC, address and emergency contact; the handset's brand, model, IMEI and status; the instalment and payment record; and the agreement with its signature.

The handset app stores no messages, contacts, photos or location. The phone reports only that it is alive and whether a command was applied.

Who can see it

A shop owner sees everything in their own shop. CNIC, IMEI and address are hidden from counter staff — not merely masked on screen, but never sent at all. A customer sees only their own record.

Limits on the lock

A locked phone keeps emergency calling, keeps showing what is owed and how to pay, and unlocks itself as soon as a verified payment arrives. Nothing on the phone is erased.