KAVACH Privacy Policy (For India Consumers)

Effective Date: 07 January 2026
Last Updated: 07 January 2026
App Name: Kavach

1. What this Privacy Policy covers

This Privacy Policy explains how Kavach collects, uses, shares, stores, and protects information when you use the Kavach mobile application, our website, and related services (collectively, the “Services”).

We aim to comply with applicable Indian law, including the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (as and when applicable), and relevant provisions of the Information Technology Act, 2000 and associated rules (including legacy SPDI rules where relevant).

2. Key concepts

• “Personal Data” means any data about an individual who is identifiable by or in relation to such data.
• “Anonymised data” means data processed so that an individual is not identifiable (directly or indirectly) using reasonable means.

3. Information we collect

Depending on the features you enable and device permissions you grant, we may collect:

A) Account & profile information

• Mobile number and/or email (if you create an account)
• Name (optional)
• Language and basic preferences

B) Emergency contacts

• Names and phone numbers you add as “Emergency Contacts”
• Relationship labels (optional)

C) Location data
Kavach supports safety features that may use location (e.g., SOS location sharing, “live location” during an incident, safe-route/deviation alerts if you enable them).

• Operational location (real-time): When you trigger SOS or enable live tracking, we process location to deliver the feature (e.g., share your location with your chosen emergency contacts).
• Stored location (anonymised): Any location data we store for analytics, reliability, or product improvement is stored in anonymised/de-identified form (e.g., aggregated heatmaps, event counts, coarse region analytics) and is not intended to identify you.

D) Device & app data

• Device identifiers and device information (e.g., device model, OS version), app version, language
• Network information (e.g., carrier), log data, crash diagnostics

E) Communications & content (if you use them)

• Messages you send through in-app support
• Support tickets and communications with us

F) Microphone / Bluetooth / Notifications (feature-based)

• Microphone access only if you use features that require it (e.g., recording evidence, voice activation)
• Bluetooth only if pairing with a Kavach device accessory
• Notifications permission to send safety alerts, confirmations, and updates

4. How we use your information

We use data for the following specified purposes:

• Provide and operate the Services (SOS, notifications, location sharing, device pairing)
• Safety incident workflows (trigger alerts to your emergency contacts and/or configured responders)
• Customer support and troubleshooting
• Fraud prevention, abuse detection, and security
• Analytics and product improvement using anonymised/de-identified data
• Legal compliance and responding to lawful requests

India’s DPDP framework expects clear notice and purpose limitation (collect only what’s necessary for a stated purpose).

5. Legal basis / consent

Where required, we process data based on your consent (which should be free, specific, informed, unambiguous, and easy to withdraw), and/or for purposes permitted under applicable law. You can withdraw consent with ease comparable to giving it; withdrawal may affect feature availability.

6. How we share your information

We may share limited information in the following cases:

A) With your emergency contacts (you choose them)
When you trigger SOS or enable a safety sharing feature, we may send your alert and your location (live/last known) to the emergency contacts you configured.

B) With service providers (“Data Processors”)
We use vetted third parties for:

• SMS/voice delivery, push notifications
• Cloud hosting, analytics, crash reporting
• Customer support tooling
  They process data under contract and only as needed to provide services to us.

C) With government / law enforcement
We may disclose information where required under applicable law or lawful orders, including to government agencies for verification, cyber incident investigation, or prevention/detection/prosecution of offences, consistent with applicable rules.

D) Business transfers
If we undergo a merger, acquisition, restructuring, or asset sale, your information may be transferred subject to confidentiality and applicable law.

7. Data retention

We retain personal data only as long as needed for the purposes described, unless longer retention is required by law, for dispute resolution, or to enforce agreements. Examples:

• Account information: retained while your account remains active, and deleted/anonymised upon request unless legally required to retain.
• Emergency contacts: retained until you remove them or delete your account.
• Operational incident data: retained only as needed to operate and secure the Services and resolve disputes.
• Analytics/location insights we store for product improvement: stored in anonymised/de-identified form.

8. Your rights (Data Principal rights)

Subject to applicable law, you may have rights including:

• Correction, completion, updating, and erasure of personal data you provided (subject to lawful retention needs)
• Grievance redressal through readily available means
• Nomination (a nominee may exercise your rights in case of death or incapacity)

To exercise rights, contact privacy@kavachsafety.com or use the in-app path: Settings → Privacy → Requests (if/when enabled).

9. Grievance redressal

You may raise grievances with our Grievance Officer at:

• Name: Aditya Shah
• Email: grievance@kavachsafety.com
• Address: MyoTrack Inc., 2503 Camino Ramon, San Ramon, California, 94583, USA

We will address grievances in a time-bound manner as required under applicable law.

10. Children’s privacy

Kavach is not intended to be used by a child (under 18) without verifiable parental/guardian consent where required. If you believe a child has provided personal data without appropriate consent, contact us to delete it.

11. Security safeguards

We implement reasonable technical and organisational measures to protect data (e.g., encryption in transit, access controls, least privilege, logging/monitoring). No system is 100% secure; if we become aware of a breach, we will take appropriate steps as required by law and rules.

12. International transfers

We are a US-based organization and may store/process data on infrastructure located outside India (e.g., the United States or other regions). Where we transfer data, we will do so in compliance with applicable Indian law and any applicable cross-border transfer restrictions.

13. Changes to this policy

We may update this Privacy Policy. We will post the updated version with a new “Last Updated” date, and where required, seek consent again.

14. Contact

General contact: contact@kavachsafety.com

For privacy questions: privacy@kavachsafety.com

For support: support@kavachsafety.com

© 2026 MyoTrack Inc. All rights reserved