Privacy Policy
Effective: 24 September 2026 · Applies to the VAKSYN app, website and business API, operated by Synvertix Technologies Private Limited ("we", "us").
We built VAKSYN so that we know as little about your conversations as possible. This page explains, in plain language, what we do collect, why, and what you can do about it.
1. What we collect
| Data | Why | Notes |
|---|---|---|
| Phone number | To create and secure your account (SMS one-time code) and let people find you | Required |
| Profile name, photo, "about" | Shown to your contacts | Optional; you choose who sees the photo, about and last seen |
| Contacts you sync | To show which of your contacts are on VAKSYN and to apply your privacy settings | Phone numbers and the names you saved; you can turn off syncing in phone settings. Removed when you delete your account |
| Messages, groups and attachments | To deliver them | End-to-end encrypted. Our servers hold only encrypted data that we cannot read, until it is delivered or deleted. Exceptions: channel and community announcements (public by design), messages sent by businesses through the business API, stickers, and live location (see below) |
| Chat backup (optional) | So your chat history survives a reinstall or a new phone | Only if you turn it on. The backup is locked on your phone with a password only you know before it is uploaded, so we store data we cannot read. If you forget the password, nobody — including us — can recover it. You can delete it at any time; it is also deleted with your account |
| Linked browsers | To use VAKSYN on a computer (Web) | You scan a QR code (or type a code) with your phone; the browser gets its own encryption keys. It shows in Settings → Active sessions and you can sign it out at any time |
| Message metadata | To route messages and show delivery/read ticks | Who, when, which chat, delivery status. Read receipts can be turned off |
| Incoming-call alerts | To ring your phone when someone calls and VAKSYN is closed | A short message to your phone through Google Firebase Cloud Messaging containing the caller's name or number and whether it is a voice or video call; no call audio or video passes through it |
| Call details | Call history and missed-call alerts | Who called whom, when, how long. We do not record call audio or video |
| Status (photo or text you post) | So your contacts can see what you share for 24 hours | Not end-to-end encrypted (unlike chats): our server stores it and shows it to people in your address book and people you chat with, except anyone who blocked you or whom you blocked. It is deleted automatically after 24 hours or when you delete it; you can see who viewed it. |
| Live location | Only when you choose "share live location" | Not end-to-end encrypted while sharing, because our server has to relay the moving position; only the latest point is kept and it is deleted when sharing ends |
| Device and technical data | Push notifications, security, abuse prevention | Push token, device type, sign-in times, IP address in server logs |
| Reports you file | To keep VAKSYN safe | If you choose to attach the text of a message to a report, our safety team can read that text; we cannot read any other message |
2. Who we share data with
We do not sell your data and we do not show advertising. We use a small number of service providers who process data only to provide their service to us:
- Google Firebase Cloud Messaging — delivers push notifications (device token; for encrypted messages the notification says only "New message").
- SMS provider (Fast2SMS) — receives your phone number and the code to send it.
- Hosting provider (Hostinger) — our servers run there, in Mumbai, India.
- Payment provider (Razorpay and Cashfree) — only when you pay for a plan.
- Authorities, when the law requires it. We can only provide what we hold: account details and metadata, not encrypted message content.
3. How long we keep it
- Messages stay until you or the other person deletes them, or they disappear (if you turn that on). Encrypted attachments may be removed from our servers after 30 days; your device keeps its own copy.
- Disappearing messages (24 hours, 7, 30 or 90 days — you choose, per chat or for all chats) are deleted from our servers when their time is up, and your app removes its readable copy too. Photos, videos and files you download stay on your phone until you delete them or the time you set for that chat (24 hours or 1 month) has passed.
- When you delete your account, your profile, messages you sent, your one-to-one chats, contacts, keys, sessions and chat backup are deleted immediately. Encrypted backups of our database may keep residual copies for up to 30 days.
- Server logs are kept for up to 90 days. Records we must keep by law are kept as long as the law requires.
4. Your choices and rights
- Delete your account in the app (Settings → Delete account) or see how to delete your account.
- Edit your profile and privacy settings in the app. Block and report people. Sign out devices you no longer use (Settings → Active sessions).
- Ask us for a copy of the personal data we hold about you, or to correct it, by writing to contact@vaksyn.com. Under India's Digital Personal Data Protection Act, 2023 you may also withdraw consent, nominate someone to exercise your rights, and complain to us and then to the Data Protection Board.
5. Security
Messages, groups and attachments are encrypted on your device with the Signal protocol before they leave it; keys never leave your device. Sign-in codes are stored hashed, sessions can be revoked, and you can add a two-step verification PIN. No system is perfectly secure; please keep your phone locked and your PIN private.
6. Children
VAKSYN is for people aged 18 and over. If you believe a child is using VAKSYN, write to us and we will remove the account.
7. Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect.
8. Contact and grievance officer
Synvertix Technologies Private Limited
H No 26, Krishna Reddy Layout, Konappana Agrahara, Electronic City Phase 2, Near Varasiddi Vinayaka Temple, Bangalore, Karnataka 560100
Email: contact@vaksyn.com
Grievance Officer: Palakolanu Swami Reddy, Managing Director — we acknowledge complaints within 24 hours and resolve them within 15 days.