Privacy Policy

Who We Are

NeoRakshak ("we", "our", "us") is an AI-powered digital fraud protection application developed and operated by NeoRakshak (India). Our registered office is in Bhopal, Madhya Pradesh, India.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the NeoRakshak mobile application and related services at api.neorakshak.in.

By using NeoRakshak, you agree to the collection and use of information described in this policy. If you do not agree, please do not use the app.

Information We Collect

We collect only what is necessary to provide fraud protection services:

Account Information

• Mobile phone number (used for OTP login — no password stored)
• Display name (optional, set by you)
• Preferred language for AI responses
• Subscription plan details

Scan Data

• Text content you submit for scanning (SMS, URLs, phone numbers, UPI IDs)
• Scan results and threat classifications
• Scan history (stored for your reference, deletable anytime)

Device & Usage Data

• Device token for push notifications (FCM)
• App usage statistics (scan count, features used)
• Crash reports and error logs (anonymized)

Family Circle Data

• Names and phone numbers of family members you add (with their consent)
• Family member safety scores and alert history

App Permissions Explained

• Phone State & Call Log — To detect incoming calls and display the Caller ID Shield overlay showing whether a caller is a known scammer.
• Contacts (READ_CONTACTS) — Used only when you tap "Pick from Contacts" in Family Circle to select a family member. We never access your full phonebook automatically.
• Internet — To communicate with our secure API for AI-powered scan analysis.
• Notifications (POST_NOTIFICATIONS) — To send you real-time fraud alerts and family safety updates.
• System Alert Window — Required to display the floating Caller ID overlay during incoming calls.
• Camera — Used only when you scan a QR code or take a screenshot for fraud analysis.

Purpose of Data Use

• Providing AI-powered scam detection and threat analysis
• Displaying real-time Caller ID Shield during incoming calls
• Sending fraud alerts to you and your Family Circle members
• Improving our scam detection models (anonymized, aggregated data only)
• Processing subscription payments via Razorpay
• Sending OTP for secure login via MSG91
• Generating your personal safety score and threat statistics

Who We Share Data With

We do not sell, trade, or rent your personal information to third parties. We share data only with:

• Supabase — Secure database hosting (servers in ap-southeast-1)
• Anthropic — AI analysis of submitted text content only
• Razorpay — Payment processing for subscriptions
• MSG91 — OTP delivery via SMS
• Firebase (Google) — Push notification delivery
• Railway — Secure API hosting infrastructure

All third-party providers are bound by their own privacy policies and data processing agreements. We require them to maintain appropriate security standards.

We may disclose information if required by Indian law, court order, or to protect the rights and safety of our users.

How We Protect Your Data

• All data transmitted between the app and our servers is encrypted using HTTPS/TLS
• Authentication uses JWT tokens with configurable expiry (no passwords stored)
• Database access is protected by Row Level Security (RLS) policies
• API keys and secrets are stored as environment variables, never in code
• Payment data is processed exclusively by Razorpay — we never store card details

How Long We Keep Your Data

• Scan history — Retained for 90 days, then automatically deleted
• Account data — Retained while your account is active
• Payment records — Retained for 7 years as required by Indian tax law
• Deleted accounts — All personal data purged within 30 days of account deletion

Your Data Rights

Under the Digital Personal Data Protection Act 2023 (DPDP) and IT Act 2000, you have the right to:

• Access a copy of your personal data we hold
• Correct inaccurate personal information
• Request deletion of your account and all associated data
• Withdraw consent for data processing (may limit app functionality)
• Lodge a complaint with the Data Protection Board of India

To exercise any of these rights, contact us at privacy@neorakshak.in. We will respond within 30 days.

Children Under 18

NeoRakshak is not intended for use by persons under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

Policy Updates

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you through the app with a push notification and update the "Last Updated" date at the top of this page.

Continued use of the app after changes are posted constitutes acceptance of the updated policy.