Back to KAVAL
KAVAL — LEGAL

Privacy Policy

Last updated: 2026

KAVAL is a free digital-safety app by Yaqzan Technologies ("we", "us"). It has no user accounts, does not collect or sell your personal data, and runs almost entirely on your phone. This policy explains the little data involved and how the app behaves.

1. Information We Collect

We do not collect, store, or transmit your personal data to our own servers. KAVAL has no backend and no accounts. A few non-personal items — your language, safety score, points, streak, and whether you've seen the intro — are stored only on your device and are removed when you uninstall.

2. On-device Processing (never leaves your phone)

  • Phone Security Scan / App Permissions: reads installed apps, their permissions, install source, and signing certificate to assess risk — locally only, never uploaded.
  • Link Safety: pasted links are checked locally with built-in rules.
  • Wi-Fi Safety: connection type and VPN status are read locally.
  • Password Generator, Daily Tips, Quiz: fully offline.
  • Daily reminders: scheduled locally on your device.

3. Information Sent to Third-party Services

Only when you actively use these features:

  • Email Breach Check: the email you enter is sent to XposedOrNot to look up known breaches (their policy).
  • Password Leak Check: your password is never sent. Only the first 5 characters of its SHA-1 hash go to Have I Been Pwned (k-anonymity), so the password cannot be reconstructed (their policy).

4. Advertising

This version of KAVAL shows no ads and includes no advertising SDK. If a future update adds ads, this policy will be updated before that release to explain what is collected.

5. Permissions and Why

  • Query all packages — to list installed apps for the security scan.
  • Internet / Network state — for the email-breach and password-leak checks.
  • Notifications — for the daily security reminder.
  • We do not access your SMS, contacts, photos, microphone, camera, or location.

6. Children's Privacy

KAVAL is for a general audience and is not directed at children under 13.

7. Data Security & Retention

Your data stays on your device; we run no servers, so there is no central database to breach. Local data is removed when you uninstall the app.

8. Your Choices

Turn off the daily reminder in You → Daily reminder; reset your Advertising ID in Google settings; uninstall to remove all local data.

9. Changes

We may update this policy; the "Last updated" date will change accordingly.

10. Contact

Questions about this policy? Contact us at privacy@yaqzantechnologies.online.