TRANSPARENCY & TRUST

VaaniX Privacy Policy

We believe that protecting citizens against voice fraud should never come at the expense of privacy. This policy outlines in plain English exactly what we record, what we discard, and how your data is protected.

Effective Date: October 2026 · Compliant with Digital Personal Data Protection Act (DPDP)

Zero Full-Call Recording

VaaniX never records full phone conversations. Only seconds 5 to 15 (a single 10-second window) are temporarily captured to verify vocal authenticity.

Clean Calls Are Dropped Instantly

If an audio sample is verified as natural speech or inconclusive, the audio buffer is wiped from memory immediately. Clean audio is never written to disk or database.

1. What We Record

When a voice verification is initiated on your device (via microphone capture or manual upload):

  • 10-Second Audio Chunk: High-resolution 16kHz mono audio captured strictly during the active listening window.
  • Optional Caller Number: If provided, the caller's phone number (in E.164 format) is used strictly to cross-reference Scam Radar reputation.
  • Speech Transcript: Converted to text locally and in memory to detect emergency scam coercion keywords (e.g. “accident”, “police”, “UPI”).

2. Retention and Cryptographic Evidence

We enforce a strict 30-day retention window exclusively for malicious calls:

Evidence Lifecycle
  • Non-Flagged Calls: 0 seconds stored. Completely ephemeral.
  • Flagged AI Voice Clones: Audio is cryptographically signed with an immutable SHA-256 hash and stored in an encrypted private vault for 30 days. This permits pre-filling official cyber cell police complaint dossiers.
  • Automated Purge: After 30 days, all retained evidence files are automatically purged from storage.

3. Access Control & Anonymity

Account Transcripts

Transcripts and check history are accessible solely by you through authenticated session tokens guaranteed by PostgreSQL Row Level Security (RLS). No public feeds exist.

Scam Radar Anonymity

When a number is reported on Scam Radar, your identity, account ID, and personal information are completely omitted. Only the aggregate count of distinct daily reporters is published.

4. Complete Data Deletion Rights

Right to Erasure (“Delete My Data”)

You retain absolute ownership of your data. You may delete your account, remove family members, or purge your entire check history at any time directly within the Settings console (/app/settings). Deletion permanently purges all database records and storage buckets.