At ARCG Private Limited, we are committed to protecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website or engage with our services.
Who this policy covers
This policy explains how Kavach (a business of ARCG Private Limited) handles personal information across the Kavach website, the Kavach Console web app, the Kavach Console mobile app for Android and iOS, and the Kavach safety band. It applies to account holders, family members and carers who are invited to an account, and to the people who wear a band. When a band is issued by an organisation, that organisation is responsible for informing wearers about this policy.
Information the band collects
The Kavach band is a wearable safety device. When it is worn it periodically records its location (from satellite positioning, nearby WiFi access points and mobile cell towers), health readings (heart rate, blood pressure estimate, blood oxygen, body and wrist temperature, step count and sleep periods), wear and motion state, falls and SOS button presses, battery level and signal strength, and device identifiers (IMEI and SIM ICCID). Location and health readings are taken on the schedule configured for the band, typically every 1 to 10 minutes, and are sent over the mobile network to Kavach servers. The band has no microphone or camera and does not record audio or video.
Information the app and console collect
To create an account we collect your name, email address, a password (stored only as a salted hash) and, optionally, a phone number. Family and carer invitations store the invitee's email. Emergency contacts you add are stored with their name, phone number and email so alerts can reach them. If you enter a wearer profile we store the details you provide, such as date of birth, blood group, medical conditions, allergies and notes, solely to display them to the people you share the account with and in emergency alerts. The mobile app asks for camera access only to scan a band's QR code when claiming it; images are not stored. If you enable notifications the app registers a push token with Kavach so alerts can be delivered to your phone. The app itself does not track your phone's location.
How we use this information
We use band data to show the wearer's live location and route history to the people on the account, to raise alerts (SOS, fall, geofence entry and exit, low battery, band removed, no report) and to deliver those alerts by push notification and email to the account's emergency contacts, and to display health trends. We use account information to operate the service, secure access, and send service notices. We do not use band or health data for advertising, and we do not sell it.
Who we share it with
Band and account data are processed on Kavach servers hosted on Microsoft Azure in India. To turn WiFi and cell-tower scans into a position, and to draw maps and routes, we send anonymised scan data and coordinates to Google Maps Platform. Push notifications are delivered through Expo's notification service and Apple and Google push services, which receive only a device token and the alert text. Email alerts are sent through our email provider. Our band manufacturer, Oviphone, does not receive data from bands connected to Kavach servers. We may disclose information where required by law or to protect a wearer's safety in an emergency.
Retention and deletion
Location and health history are kept for the life of the account so route history and trends remain available, and are deleted when a band is removed from an account or the account is closed. Raw device frames used for diagnostics are kept for 30 days. You can delete emergency contacts, wearer profiles, geofences and alert history yourself from the console or app. To close an account and delete all data associated with it, email support@ourkavach.com from the account's email address; deletion is completed within 30 days.
Security
Data between the app, the console and Kavach servers travels over TLS. Passwords are stored as salted hashes and sessions expire automatically. Access to production systems is restricted to named administrators. The band communicates with Kavach servers over the mobile network using the manufacturer's device protocol; we keep bands on our own servers rather than the manufacturer's so this data stays within our control.
Children and vulnerable wearers
Bands are often worn by elderly people, people with dementia, and children, and are set up by a family member or carer who holds the account. The account holder is responsible for having the authority to monitor the wearer. We do not knowingly create accounts for children under 18; the account holder must be an adult.
Your rights
You can view and export your account's data from the console, correct account details in Settings, remove people from your account, and delete data as described above. You may withdraw consent for push notifications in your phone's settings at any time. If you have a question or complaint about how we handle personal information, or want a copy of the data we hold, contact us at support@ourkavach.com and we will respond within 30 days.
Website cookies and analytics
Our public website uses Google Analytics to understand traffic and a cookie to remember your consent choice. The console and mobile app do not use advertising or analytics cookies; they store only your session token on your device.
Changes to this policy
We may update this policy as the product develops. We will post the new version on this page and update the "Last Updated" date, and for material changes we will notify account holders by email or in the app.
Questions about our privacy practices?
Contact our privacy team at privacy@ourkavach.com or reach out through our contact page.
Contact Us