Privacy Policy — SafeHoon

SafeHoon is a consumer app from ACH Security that helps keep you safe online — it checks email addresses for known data breaches and links and websites for scam risk. This policy explains briefly what we collect and the rights you have under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). For our business console, see console.achsecurity.com/privacy.

Your data is protected

We protect your information with strong, industry-standard encryption in transit, and sensitive details are protected at rest. Your password is never stored in readable form. Sensitive breach details are only shown to the verified owner of an email, and your monitored emails and findings are kept private to your account.

What we collect

Your sign-up email or phone number, the email addresses you choose to monitor and the results for them, and — only if you turn on Web Protection — the website domains your device visits, so we can warn you about unsafe ones. Domain checks are not linked to your account, and you can switch Web Protection off at any time to stop them immediately.

Why we collect it

To run your account, perform the breach and safety checks you ask for, and alert you to what we find. We use your personal data only for these purposes, and we never sell it.

Who we share it with

Only with trusted service providers that help us deliver the app (for example, breach checking, notifications and payments), and only as needed to do so. We do not share your data with advertisers or unrelated third parties.

How long we keep it

While your account is active, and afterwards only as long as required for legal or accounting purposes.

If something goes wrong

If a personal data breach affects you, we will notify you and the Data Protection Board of India as required under the DPDP Act, without undue delay.

Children and cross-border processing

SafeHoon is not directed at anyone under 18. Where a service provider processes data outside India, we take reasonable steps to keep it protected in line with the DPDP Act.

Your rights and withdrawing consent

You can access, correct or erase your data, and withdraw consent at any time. Removing a monitored email or turning off Web Protection in the app takes effect immediately; for anything else, email our Grievance Officer and we will act within 7 business days.

Grievance Officer and DPO

ACH Security Compliance Desk
Email: [email protected]
We acknowledge grievances within 24 hours and aim to resolve them within 30 days.

Changes

We may update this policy; the date above shows when it last changed.