1. Who We Are

DigiRaksha is a parental control service operated by Rakshak Digital Technologies Private Limited, based in India. We build software that helps parents protect their children's digital experience on Android devices.

Contact us: getdigiraksha@gmail.com | getdigiraksha.com

2. Information We Collect

2.1 Information You Provide

Data	Purpose	Retention
Mobile phone number	Account creation and login via OTP. No password is ever stored.	Until account deletion
Name (optional)	Personalise the app experience	Until account deletion
Referral code (optional)	Attribute referrals for rewards	Until account deletion

2.2 Information Collected Automatically on Child's Device

Data	Purpose	Stored where
App usage statistics (screen time per app)	Show parent weekly/daily reports	On device + our servers
List of installed apps	Parent can see and manage apps remotely	Our servers
Blocked app attempts (count, app name)	Show blocking effectiveness reports	On device only (SharedPrefs)
DNS query statistics (adult/gambling/malware sites blocked count)	Show protection summary	On device only (SharedPrefs)
Bedtime lock events	Alert parent when device is used after the configured bedtime	Our servers (alert log)
New app install events	Alert parent when child installs an app	Our servers (alert log)
Precise and background location	Share the child's device location with the parent, including while the app is in the background, so the parent can see where the device is from their own app	Our servers (most recent location only)
Foreground app name (via Android's Accessibility API)	Detect which app the child is using, to block restricted apps in real time	On device only (SharedPrefs) — not transmitted to our servers
On-screen page views and taps, but only inside the Android Settings app (via Android's Accessibility API)	Detect if the child tries to disable DigiRaksha's protection or factory-reset the device	On device only (SharedPrefs) — not transmitted to our servers

Android's Accessibility API is used only for the purposes above: knowing which app is in front, and watching for tamper attempts inside the Settings app specifically. DigiRaksha never reads the content of messages, emails, photos, or on-screen text inside any app other than Settings, and cannot be used to monitor general device activity.

2.3 What We Do NOT Collect

• We do not read, record, or transmit messages, emails, calls, or chats
• We do not access photos, videos, or files on the device
• We do not record audio or video from the microphone or camera
• We do not track browsing history or individual URLs visited
• We do not collect payment card details (handled entirely by Razorpay)
• We do not use third-party advertising SDKs or analytics trackers

3. How We Use Your Information

• Authenticate you via OTP and maintain your session
• Provide parental control features (app blocking, screen time, content filtering)
• Show the child's device location to the parent, including while DigiRaksha runs in the background on the child's device
• Send push notifications and alerts to parents about child activity
• Process subscription payments via Razorpay
• Send OTP messages via MSG91
• Send you transactional emails about your subscription
• Improve our service and fix bugs (using aggregated, anonymised data)

4. Third-Party Services

Service	Purpose	Data shared
Razorpay	Payment processing	Amount, currency, your name/contact for invoice
MSG91	OTP SMS delivery	Phone number, OTP code
Firebase FCM	Push notifications to parent's device	FCM device token, notification payload

We do not share your personal data with any other third parties, sell data to advertisers, or use your data to train AI models.

5. Children's Privacy

DigiRaksha is designed for use by parents to protect children — not for children to use independently. The app is installed on a child's device under the explicit knowledge and consent of a parent or legal guardian.

The parent account holder is responsible for ensuring they have the right to install and configure the app on the child's device. We do not knowingly create accounts for users under 18 without parental consent.

Data collected from a child's device (usage stats, app list) is accessible only to the parent who created the family account. It is not shared with other users or third parties.

6. Data Storage and Security

• All data is stored on servers located in India
• Data in transit is encrypted using HTTPS/TLS
• Passwords are never stored — we use OTP-only authentication
• JWT tokens expire and are invalidated on logout
• OTPs expire within 10 minutes and can only be used once

7. Data Retention

• Account data: Retained until you delete your account
• Alert logs: 90 days, then auto-deleted
• Location: Only the most recent location is stored; each new update overwrites the last
• On-device data (SharedPreferences): Deleted when app is uninstalled
• OTPs: Deleted immediately after use or upon expiry

8. Your Rights

Under the Information Technology Act 2000 and applicable Indian data protection regulations, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your account and all associated data
• Request a copy of your data in a portable format

To exercise these rights, email us at getdigiraksha@gmail.com. We will respond within 30 days.

9. Cookies and Web Tracking

Our website (getdigiraksha.com) does not use advertising cookies or third-party tracking pixels. We use a session cookie only for maintaining your logged-in state on the website. We do not use Google Analytics or any similar tracking service on our website.

10. Changes to This Policy

We may update this policy from time to time. When we make significant changes, we will notify you via the app or email. Continued use of DigiRaksha after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data:

• Email: getdigiraksha@gmail.com
• Website: getdigiraksha.com
• Company: Rakshak Digital Technologies Private Limited, India