Privacy Policy

SecuLogix Aadhaar eKYC ("the app", "we") performs consent-based Aadhaar identity verification for authorised operators. We collect the minimum data required to provide the service, and we never sell or rent your data or use it for advertising.

1. Who uses this app

The app is used by authorised operators of a SecuLogix customer organisation who sign in with credentials issued by their administrator. It is not a consumer sign-up app.

2. Data we collect and why

• Operator sign-in details — the username and password you enter are sent over encrypted HTTPS to authenticate you. We do not store your password on the device; a temporary session token is held in memory only while you are signed in.
• Aadhaar verification result — after the resident gives explicit consent in the official Aadhaar app, a signed credential (which may include name, date of birth, gender, address, mobile, email and photo) is returned, shown on screen briefly, and cleared automatically after 60 seconds. It is processed transiently and is not written to device storage.
• Acceptance flag — a single on-device flag records that you accepted this policy, so the consent screen is not shown again.

3. What we do NOT collect or store

• No Aadhaar number — it is not included in the offline credential and is never stored.
• No resident photo or full personal details are retained on the device or our servers.
• No location, contacts, files, camera, microphone, or advertising identifiers.
• No third-party tracking or analytics SDKs.

4. What our servers retain (audit / DPDP compliance)

For each verification, our backend keeps only a transaction reference, a masked name and masked mobile (e.g. V*** A***, 98XXXXXX10), and whether the check passed. No Aadhaar number, photo, address, or full personal data is stored. Verbose diagnostic logs, if any, are automatically purged within 7 days.

5. Data sharing

Verification is performed via the Unique Identification Authority of India (UIDAI) Aadhaar framework with the resident's consent. We do not share your data with any other third party, and we never sell it.

6. Security

• All communication with our servers uses encrypted HTTPS (TLS 1.2/1.3).
• Screenshots and screen recording are disabled inside the app to protect identity data.
• Verified details are held only transiently and auto-cleared.

7. Data retention & deletion

On-device data (the session token and acceptance flag) is removed when you sign out or uninstall the app. To request deletion of the audit records associated with your operator account, contact us at the address below or ask your SecuLogix administrator, who can clear individual or all verification records from the admin console.

8. Children

The app is intended for adult authorised operators and is not directed at children.

9. Changes

We may update this policy; material changes will be reflected by the "Effective" date above.

10. Contact

SecuLogix · info@seculogix.in · https://seculogixai.com