कवच
Last updated: 22 July 2026 · Applies to the Kavach mobile app.
Kavach (“we”, “us”) helps families care for an ageing parent: saving their life stories through a gentle AI “Story Call” and keeping a quiet watch over their daily wellbeing. This policy explains what personal data we handle, why, and the choices and rights you have. We are operated by Mudit Tiwari.
Kavach is intended for adults: family members (“guardians”) and the elderly parent whose care they support. Kavach is not directed to children under 18, and we do not knowingly collect data from them or show targeted advertising to anyone.
| Category | Examples | Why |
|---|---|---|
| Account & identity | Google sign-in identifier, name, city | Create your account; secure access |
| Family circle | Parent's name & city, invite code, relationships | Connect your family; show the right dashboard |
| Care & wellbeing | Reminders you set; the Document Vault — reference details you type in (e.g. an ID number, an insurance detail, a key contact) and, if you choose, photos of documents you take with the camera or pick from your gallery (e.g. a photo of an ID or insurance card); daily check-in and "all is well" / mood status | The core care features |
| Photos | Only images you deliberately add to the Document Vault. Taken with the camera or chosen from your gallery; stored with additional encryption | Let the family keep a copy of an important document |
| Story Call content | The conversation transcript, the saved story and the mood summary — all as text | Create and store the family's stories |
| Voice input | If the parent chooses to answer by speaking, the microphone captures their voice during the call so it can be turned into text on the device in real time. The audio itself is not recorded or stored — only the resulting text is kept | Let the parent reply by talking instead of typing |
| Device | Push notification token & app installation identifier, platform, timezone | Deliver reminders & alerts at the right time |
| Payments (if/when offered) | Processed by Razorpay / Google Play; we do not store card details | Take payment for premium features |
To provide and run the app's features (stories, check-ins, reminders, the Document Vault, Help alerts), to keep the service secure, to respond to your requests, and to comply with law. We do not sell your personal data, and we do not use it for cross-context behavioural advertising.
We process your data with your consent, which you give in the app and can withdraw at any time, and as needed to deliver a service you asked for. The information you enter is processed only to run the care features you enable.
We use trusted processors who act on our instructions:
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication, sync, serverless functions |
| Google / Firebase | Sign-in and push notifications |
| Moonshot AI (Kimi) | Generates the Story Call conversation & summary |
| Render | Hosts the backend that keeps AI keys server-side |
| Razorpay / Google Play | Payments (if offered); payment data handled by them |
Our AI processor (Moonshot AI / Kimi) generates the Story Call conversation and summary strictly on our instructions. Story Call transcripts and stories are not used to train AI models, and we do not sell or share this content for advertising.
We also share data when required by law, or to protect someone's safety (for example, a Help alert to your own family circle).
Your data may be processed on servers outside your country. Where required, payment data for Indian users is stored in India by our payment partner. We take steps to protect data wherever it is processed.
We keep your data while your account is active and for as long as needed for the purposes above. When you delete your account, we delete the personal data we hold about you, except anything we must retain by law. You can ask us to delete specific data sooner.
We use access controls, encryption in transit, and additional encryption for the Document Vault. No system is perfectly secure, but we work to protect your information and will notify you and the relevant authorities of a qualifying personal-data breach as the law requires.
Depending on where you live, you can:
Deleting your account & data. You can delete your account and all associated data directly in the app (Settings → Privacy & contact → Delete account). You can also request deletion from the web, without reinstalling the app, at kavach-38b49.web.app/delete-account.html.
To exercise any other right, contact us (Section 12). We respond within the time the law allows (for India, within 90 days; we aim for sooner).
We act as a Data Fiduciary. You may withdraw consent, exercise the rights above, nominate a representative, and raise a grievance with our contact below. You may complain to the Data Protection Board of India.
We handle your information carefully and will notify you of any qualifying data breach as the law requires. We do not sell personal information. Residents of states with privacy laws (e.g. California) may exercise access, deletion and correction rights by contacting us; we will not discriminate against you for doing so.
Kavach is not for users under 18. If you believe a child's data has reached us, contact us and we will delete it.
Questions, requests, or grievances:
Mudit Tiwari — Grievance Officer
Email: app.help.suppot@gmail.com
Postal address: available on request
We may update this policy; we'll change the “Last updated” date and, for significant changes, notify you in the app.