This policy covers the BBI mobile app for Android. It explains what the app can see, why, where it is kept and what you can ask us to do about it. The app shows you information we already hold because you are our internet subscriber — it does not go looking for anything else on your phone.
1. Who we are
BBI Broadband (Broadband Business Ideas) — “BBI”, “we”, “us” — is an internet service provider operating in Sindh, Pakistan. We are the data controller for the information described here.
- Website: www.bbi.net.pk
- App server:
cms.bbi.net.pk - Email: info@bbi.net.pk
- Phone / WhatsApp: 0301 1196999
- Address: Sanghar District, Sindh, Pakistan CHECK: add street address if you have one
2. What the app collects
2.1 What you type in
| Data | Why | Kept on your phone? |
|---|---|---|
| CNIC number (13 digits) | To find your account. It is matched against the CNIC already recorded on your subscription. | No |
| Internet (PPPoE) password | To prove the account is yours. It is sent once to sign you in and checked against your connection password. | Never. Only a temporary sign-in token is kept. |
| Complaint category and description | To raise a support ticket and let our field team fix your fault. | No |
2.2 What the app shows you from your existing account
We already hold the following because you are a subscriber. The app displays it to you; it does not create it.
| Category | Details shown |
|---|---|
| Identity & contact | Name, username, address, city, mobile, phone, email |
| Subscription | Package name, speed, price, data allowance, start date, expiry date, days remaining, account credit, active/suspended state |
| Usage | Daily download and upload totals, time connected, share of any data allowance used |
| Connection sessions | Start and stop time, duration, data transferred, IP address, device MAC address, disconnect reason |
| Billing | Invoice number, date, service, amounts, tax, balance, paid status |
| Support | Your complaints: ticket number, category, description, status, resolution notes, dates |
| Live status | Whether you are currently online, and your current IP address |
2.3 What is stored on your phone
Held in Android’s encrypted storage, protected by the device keystore:
- A sign-in token that expires after 24 hours.
- A copy of your account details, so the app still opens and shows your plan and expiry when your connection is down. This is the only reason it exists.
- A flag recording that you have seen the welcome screens.
Signing out erases all of it, including the cached account details, so the next person to use the phone cannot see them.
What the app never does
- It contains no advertising, analytics or tracking software of any kind.
- It does not request or use your location.
- It does not access your contacts, photos, files, camera, microphone, call log or messages.
- It does not read which other apps you have installed.
- It does not inspect, log or monitor the content of your internet traffic — no websites visited, no messages, no files.
- We do not sell, rent or trade your information to anybody.
The app requests exactly two Android permissions: Internet and Network state — the minimum needed to talk to our server and tell “you are offline” apart from “the server is down”.
3. Why we use it
- To run your service — showing your plan, usage, expiry and bills, and taking complaints. This is necessary to perform our contract with you.
- To support you — a complaint you file in the app reaches our engineers with enough detail to find your line.
- To keep the service secure — sign-in attempts are rate limited to protect accounts from guessing attacks.
- To meet our legal duties as a licensed service provider in Pakistan.
We do not use your data for profiling, advertising, or automated decisions that affect you.
4. Who else can see it
Your information stays on servers we control. It is shared only:
- With our own staff — support and field engineers see your complaint, contact details and address so they can repair your connection. Access is limited by role.
- With our backup storage provider. Our support system is backed up nightly to Google Drive, encrypted in transit, in an account we control. This protects your records from being lost; it is not used for any other purpose.
- Where the law requires it — to the Pakistan Telecommunication Authority, courts, or law enforcement acting under lawful authority.
If you install the app from Google Play, Google collects its own information about the download under Google’s privacy policy. That is outside our control.
5. How long we keep it
| What | How long |
|---|---|
| Account and contact details | While you are a subscriber, and afterwards only as long as needed for billing, disputes and legal obligations |
| Connection and usage records | Retained as required of service providers under Pakistani law, including the record-keeping duty on service providers under the Prevention of Electronic Crimes Act 2016 — currently a minimum of one year |
| Invoices | As required by tax and accounting rules |
| Complaints | Kept as a service history so repeat faults on a line can be spotted |
| Backups | Rolling 7-day cycle, then overwritten |
| Data on your phone | Until you sign out or uninstall |
6. Security
- All traffic between the app and our server uses HTTPS encryption.
- Your password is never stored on your phone. The app keeps only a token, and that token expires after 24 hours.
- The account the app uses to read our database has read-only access. Nothing the app does can alter your billing, your package or your connection settings.
- The only thing the app can write is a complaint.
- Our database is not reachable from the public internet.
- Staff access to the support system is by individual login, limited by role.
No system is perfectly secure. If a breach affects your personal information we will notify affected subscribers and the relevant authority without undue delay.
7. Your choices and rights
You may ask us to:
- See the information we hold about you.
- Correct anything wrong — a misspelled name, an old phone number or address.
- Delete your information. We will do this except where we must keep records to meet billing, tax or legal retention duties. Closing your account is a separate request; deletion does not by itself cancel your service.
- Get a copy of your usage or billing history.
- Complain if you think we have handled your data badly.
Write to info@bbi.net.pk, or message 0301 1196999 on WhatsApp, from the email or phone number on your account. You can also visit any BBI office. We aim to respond within 30 days. You can also raise a complaint with the Pakistan Telecommunication Authority.
You can stop all app data collection immediately by signing out and uninstalling the app. Your internet service is unaffected — the app is optional.
8. Children
The app is not directed at children. Internet service contracts are held by adults, and accounts are issued against a CNIC. We do not knowingly collect information from anyone under 18. If you believe a child has used the app, contact us and we will remove the data.
9. Changes to this policy
If we change how the app handles your information we will update this page and move the “Last updated” date. Significant changes will be announced in the app or by SMS. Continuing to use the app after a change means you accept the updated policy.
10. Contact us
Questions about this policy or your data:
BBI Broadband (Broadband Business Ideas)
Email: info@bbi.net.pk
Phone / WhatsApp: 0301 1196999
Address: Sanghar District, Sindh, Pakistan
Web: www.bbi.net.pk