Cyberakshak1. Who we are
Cyberakshak (“we”, “us”, “our”) is a mobile app and website that helps people in India recognise, avoid and respond to cyber frauds and scams. The app is built and maintained by Krishankant Sharma and Kanishka Angira. This policy covers the Cyberakshak Android app, the website at cyberakshak.in and related services.
We process personal data in line with the Information Technology Act, 2000, the rules made under it, and the Digital Personal Data Protection Act, 2023 (DPDP Act), as applicable.
2. What we collect
| Data | Why we need it |
|---|---|
| Account details: full name, email address, password (stored securely by our authentication provider, never in plain text) | To create and secure your account and let you sign in. |
| Profile details: phone number (optional), city, state, preferred language, profile picture (optional) | To personalise language, show relevant events and alerts, and improve the app. |
| Chatbot messages: the text you type to the AI Safety Assistant | To generate guidance in reply. See section 4. |
| Scam reports (if you submit any): scam type, description, evidence links you provide | To help us understand scam trends and improve guides. |
| Device token: an identifier for push notifications | To send event reminders and safety alerts you have allowed. |
| Feedback you send us: name, email, message (website contact form) | To reply to you and improve Cyberakshak. |
| Basic technical data: app version, device type, error logs, approximate usage | To keep the service reliable and fix problems. |
The app asks for only two Android permissions: Internet (to work) and Notifications (to send alerts, only if you allow it). We do not read your SMS, contacts, call logs, photos or location.
3. How we use your data
- To provide, run and secure the app and your account.
- To answer your questions through the AI assistant.
- To send notifications about events, advisories and updates you have enabled.
- To respond to your feedback, support requests and grievances.
- To analyse problems and improve features, guides and the quality of answers.
- To detect and prevent misuse, and to comply with the law.
We do not sell your personal data and we do not show third-party advertising based on it.
4. AI chatbot & your messages
The assistant is “hybrid”: part of each answer comes from guidance written by our team, and part is generated by third-party AI language-model providers. To get a reply, the text of your message (and recent chat context) is sent from our server to these providers. We choose providers and settings intended to avoid personal identifiers being included, but you should avoid sharing sensitive personal details in the chat.
AI can make mistakes. Read our Disclaimer before relying on any answer.
5. Who we share your data with
We share data only with service providers who help us run Cyberakshak, under appropriate safeguards:
| Provider type | Purpose |
|---|---|
| Supabase | Database, authentication and storage of account and app data. |
| Google Firebase Cloud Messaging | Delivering push notifications. |
| AI model providers (such as Google Gemini, Groq) | Generating chatbot replies from your message text. |
| Vercel and other hosting providers | Hosting our website, admin panel and backend. |
| Web form service | Delivering messages sent through the website contact form to our inbox. |
Some of these providers process data on servers outside India. We may also disclose information if required by law, court order or a lawful request from a government authority, or to protect the rights and safety of users and the public.
6. How long we keep your data
We keep your account data while your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, normally within 30 days, except where we must keep limited records to meet legal obligations or resolve disputes. Backups are overwritten on a regular cycle. Feedback emails are kept as long as needed to deal with your request.
7. Security
We use industry-standard safeguards, including encrypted connections (HTTPS), access controls on our database, and a restricted, allow-listed administrator panel. No system is perfectly secure, so we cannot guarantee absolute security. Please use a strong, unique password and tell us immediately if you suspect misuse of your account.
8. Your rights
Subject to applicable law, you can ask us to:
- give you a summary of the personal data we hold about you;
- correct or update inaccurate data (most details can be edited in the app’s Profile screen);
- erase your data and close your account;
- withdraw your consent for any processing based on consent (for example notifications, which you can also switch off in your phone settings);
- nominate another person to exercise your rights in the event of your death or incapacity;
- raise a grievance (see section 12).
To exercise a right, email cyberakshak.team@gmail.com from the email address linked to your account.
9. Children
Cyberakshak is intended for users aged 18 and above. Users under 18 should use the app only with the involvement and consent of a parent or legal guardian. We do not knowingly collect personal data from children without that consent. If you believe a child has given us data without it, contact us and we will delete it.
10. Deleting your account and data
You can request deletion at any time by following the steps on our Delete account page.
11. Changes to this policy
We may update this policy as the app grows. When we make important changes, we will update the effective date above and, where appropriate, notify you in the app. Continued use after an update means you accept the revised policy.