Privacy

Privacy policy

Saabit ("we") is a free app that checks whether a CNIC or NTN is on the Active Taxpayer List (ATL) published by Pakistan's Federal Board of Revenue (FBR), and shows tax estimates. This policy explains what happens to information when you use the Saabit app and this website.

Last updated: 30 October 2026

On this page
  1. No account, no personal details
  2. The numbers you check
  3. Property values
  4. Other things the app downloads
  5. The app ID and limits against bots
  6. What stays on your phone
  7. Sharing and printing
  8. Advertising
  9. This website
  10. Children
  11. Changes and contact

The short version

  • No account
  • Numbers you check are not stored
  • The CNIC photo never leaves your phone
  • Names are always masked

No account, no personal details

Saabit has no sign-up and no login. We do not ask for your name, phone number, email address or location. The app can use your camera only when you tap Scan, to read the CNIC number on the phone itself. The photo is deleted straight away and never sent anywhere. The app has no access to your contacts, photos or microphone.

The numbers you check

  • When you check a CNIC or NTN, the app sends that one number to our server to look it up in FBR's public list. The server answers with the status (filer / non-filer), a masked name (for example RIZWAN A•••) and the date of the list.
  • Our server does not store or log the numbers you check. They are used only to answer that request.
  • Names are always masked and taken from FBR's public list; we never show a full name.

Property values

When you look up an FBR property value, the app sends the city and the area or society name you type to our server. The server answers from FBR's published valuation tables (and provincial DC rates where FBR has none). It does not store these searches. Plot size and price stay on your phone; the tax is worked out there.

Other things the app downloads

The app also fetches the current tax rates, the date of the latest FBR list and the list of cities from our server. These requests carry no personal data.

The app ID and limits against bots

When the app is first opened it creates a random ID on your phone. It contains nothing about you and no CNIC. It stays on your phone until you delete the app (on iPhone, the system's secure storage can keep it after the app is deleted), and it is sent with every filer check and every property value search so the server can tell phones apart.

To stop automated bulk use, the server keeps counters linked to your network (IP) address and this app ID. The counters hold only times of requests, never the numbers you check or what you searched for. They are kept only in the server's memory, are never written to disk or to logs, and are cleared once 24 hours have passed since the last check they counted (counters for property searches after 1 minute). All of them are wiped when the server restarts. If too many checks come from the same network or phone, checking pauses for a while (up to 1 hour).

What stays on your phone

Your recent checks (up to the last 10) are saved only on your phone so you can see them again. Each one keeps the full CNIC or NTN you checked, the result, the masked name, the list date and the time of the check; a buyer-and-seller check keeps both numbers. You can export them as a CSV file through your phone's share sheet; where that file goes is up to you. You can turn saving off or clear the list in the app under More, and it is removed when you delete the app. Your language choice is also saved on your phone.

Sharing and printing

If you tap Share or Print, the result is passed to the app you choose (for example WhatsApp). What happens after that is covered by that app's own privacy policy.

Advertising

The current version of Saabit shows no ads. If ads are added in a later version, they will come from Google AdMob, which may use your device's advertising ID; this policy will be updated before that happens, and you can reset or limit the advertising ID in your phone's settings.

This website

saabit.pk sets no cookies and has no analytics or tracking. Fonts are loaded from Google Fonts and the page animation script from cdnjs (Cloudflare), so those services see your browser's request as with any website. Our web host may keep standard request logs, as with any website.

Children

Saabit is meant for adults dealing with property, cars and banks, and is not directed at children.

Changes and contact

We will post any change to this policy on this page with a new date. Questions: support@saabit.pk.