Privacy Policy

0. Privacy Policy – Suraksha Kranti Mobile Application

**Last Updated:** June 4, 2026
**Effective Date:** Upon acceptance by the User

This Privacy Policy is an electronic record in accordance with the provisions of the Information Technology Act, 2000, the rules framed thereunder, and the applicable amendments relating to electronic records under various laws in force in India. This electronic record is generated by a computer system and does not require any physical or digital signatures.

This Privacy Policy is published in compliance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the Digital Personal Data Protection Act, 2023 (where applicable), and other relevant laws governing the collection, processing, storage, and protection of personal data in India.

This Privacy Policy explains how **Suraksha Kranti** ("Platform", "we", "our", or "us") collects, uses, stores, shares, secures, and otherwise processes your personal information when you access or use the Suraksha Kranti mobile application, website, or any related services.

By downloading, installing, registering for, accessing, or using the Platform, you ("User", "you", or "your") acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy. Where your consent is required under applicable law, your continued use of the Platform constitutes your consent to the collection and processing of your personal information for the purposes described herein.

If you do not agree with this Privacy Policy or do not wish to provide the information required for the operation of the Platform, you should refrain from registering, accessing, or using the Platform.

1. Heading: Introduction and Scope

This Privacy Policy governs the collection, use, storage, processing, and disclosure of personal data
by Suraksha Kranti (“Application”), operated by the Data Fiduciary. This policy is in compliance
with the Digital Personal Data Protection Act, 2023 (“DPDP Act”). By accessing or using the
Application, the user (“Data Principal”) provides informed, specific, and unambiguous consent for
processing of personal data for lawful purposes related to safety, emergency response, and user
verification.

2. Categories of Personal Data Collected

The Application collects the following categories of personal data:
(a) Basic Identity Data: Name, email address, phone number, and password for authentication and
account management.
(b) Demographic Data: Age, gender, religion, educational qualification, occupation, and annual
salary to personalize services and improve response prioritization.
(c) Emergency Network Data: Emergency contact numbers, family member details, and children’s
information to enable rapid emergency outreach.
(d) Identity Verification Documents: Aadhaar Card, Driving License, Voter ID Card, Passport,
PAN Card, School/College ID, and associated verification numbers for identity validation and fraud
prevention.
(e) Medical Profile Data: Height, weight, blood group, medical conditions (including diabetes,
hypertension), insurance details, and other health-related data to assist responders in emergencies.
(f) Device and Sensor Data: Continuous background location, camera access, notification
permissions, motion sensors, and device activity for features like live tracking and Shake-to-SOS.

3. Purpose of Data Processing

Personal data is processed strictly for lawful purposes, including:
• Emergency alert generation and response coordination
• Identity verification and fraud prevention
• Communication with emergency contacts and responders
• Enhancing user safety features (e.g., live tracking, SOS triggers)
• Regulatory compliance and legal obligations
No personal data is processed beyond the stated purposes without obtaining additional
explicit consent.

4. Legal Basis for Processing

Processing of personal data is based on:
• Explicit consent provided by the Data Principal
• Legitimate uses as permitted under the DPDP Act (including emergency response and safety
services)
• Compliance with legal obligations imposed by Indian law
Sensitive personal data such as medical and identity documents is processed only with explicit and
informed consent.

5. Consent Mechanism

The Application ensures that consent is:
• Freely given, specific, informed, and unambiguous
• Provided through clear affirmative action (e.g., app permissions, checkbox agreements)
• Capable of being withdrawn at any time through in-app settings or support channels
Withdrawal of consent may limit or disable certain safety functionalities.

6. Data Storage and Security Measures

The Data Fiduciary implements reasonable security safeguards including:
• Encryption of sensitive data (both in transit and at rest)
• Secure authentication mechanisms and access controls
• Regular vulnerability assessments and security audits
• Role-based access to sensitive information
Data is stored only for as long as necessary to fulfill the stated purpose or comply with legal
obligations.

7. Data Sharing and Disclosure

Personal data may be shared only under the following circumstances:
• With emergency responders, security agencies, or authorized personnel during distress
situations
• With service providers under strict contractual confidentiality obligations
• When required by law, court order, or government authority
No personal data is sold or shared for commercial advertising purposes.

8. Cross-Border Data Transfers

If personal data is transferred outside India, such transfer shall comply with restrictions prescribed
under the DPDP Act and applicable government notifications, ensuring adequate protection
standards.

9. Rights of the Data Principal

Under the DPDP Act, the Data Principal has the following rights:
• Right to Access Information: Obtain confirmation and summary of personal data processed
• Right to Correction and Erasure: Request correction, updating, or deletion of inaccurate
or outdated data
• Right to Withdraw Consent: Revoke consent at any time
• Right to Grievance Redressal: File complaints regarding data processing
• Right to Nominate: Nominate another individual to exercise rights in case of incapacity or
death
Requests can be submitted via the Application or designated support channels.
To exercise any of the above rights, the Data Principal may submit a request by emailing
info@surakshakranti.com or through the account management features available within the
Application. Requests relating to correction, erasure, withdrawal of consent, or other privacy rights
shall be processed in accordance with the Digital Personal Data Protection Act, 2023 and applicable
laws

10. Duties of the Data Principal (Section 15 – DPDP Act)

The Data Principal shall:
Heading: Duties of the Data Principal (Section 15 – DPDP Act)
• Provide authentic and verifiable personal information
• Not impersonate another individual
• Not submit false or misleading identity documents
• Not misuse the Application by generating fake emergency alert
Violation of these duties may result in suspension of access, legal consequences, and penalties
under applicable law.

11. Children’s Data and Parental Consent

Where data of minors (children) is collected, verifiable parental or guardian consent shall be
obtained. Processing of children’s data shall be done with enhanced safeguards.

12. Grievance Redressal Mechanism

In compliance with the Information Technology Act, 2000, the Information Technology
(Reasonable Security Practices and Procedures and Sensitive Personal Data or Information)
Rules, 2011, the Digital Personal Data Protection Act, 2023, and other applicable laws, the Data
Fiduciary has appointed a Grievance Redressal Officer to address complaints relating to the
collection, processing, storage, disclosure, correction, deletion, or misuse of personal data. The
Grievance Redressal Officer shall acknowledge and resolve grievances within the timelines
prescribed under applicable law.
Grievance Redressal Officer Details:
• Name: Indu Kumari
• Designation: Grievance Officer
• Email: kumariindukranti@gmail.com
• Business Email: info@surakshakranti.com
• Working Hours: Monday to Friday (09:00 AM to 06:00 PM IST)
The above contact details shall remain available on the official website and within the Application
for the benefit of all Data Principals.

13. Escalation to the Data Protection Board of India (DPBI)

If a Data Principal is dissatisfied with the resolution provided by the Grievance Redressal Officer, or
if the grievance remains unresolved within the time prescribed under applicable law, the Data
Principal may seek remedies available under the Digital Personal Data Protection Act, 2023,
including approaching the Data Protection Board of India (DPBI) in accordance with the
applicable legal framework.

14. Data Retention Policy

Personal data shall be retained only for the duration necessary to fulfill the purposes outlined or as
required under law. Upon completion of purpose or withdrawal of consent, data shall be securely
erased unless retention is legally mandated.

15. Updates to Privacy Policy

This Privacy Policy may be updated periodically to reflect legal, technical, or operational changes.
Users will be notified of material changes, and continued use of the Application constitutes
acceptance of the revised policy.

16. Contact Information

For any questions regarding this Privacy Policy, exercise of Data Principal rights, privacy concerns,
consent withdrawal, data correction, account deletion, or any other data protection matter, please
contact:
• General Support & Privacy Email: info@surakshakranti.com
• Grievance Officer: Indu Kumari
• Grievance Officer Email: kumariindukranti@gmail.com
• Website: https://surakshakranti.com
• Account Deletion Portal: https://surakshakranti.com/delete-account
The Data Fiduciary shall respond to requests and grievances in accordance with the Digital Personal
Data Protection Act, 2023 and applicable provisions of the Information Technology Act, 2000.

17. Account Deletion and Personal Data Erasure

Suraksha Kranti provides the Data Principal with the ability to permanently delete their account and
request the erasure of personal data, subject to applicable legal retention requirements. Upon receipt
of a valid deletion request, the Data Fiduciary shall securely erase or anonymize personal data that
is no longer required for legal, regulatory, fraud prevention, dispute resolution, or public safety
purposes.
Data Principals may initiate an account deletion request through the following methods:
• Account Deletion Portal: https://surakshakranti.com/delete-account
• Email: info@surakshakranti.com
Certain information may be retained where required by applicable law, ongoing investigations,
court orders, or to establish, exercise, or defend legal claims. After completion of the retention
period, such data shall be securely deleted or irreversibly anonymized.
End of Policy