Your safety data stays on your phone.

1 The short version #

Chiraiya is a women’s safety app. When you press SOS, it alerts the guardians you have chosen, shares your live location, sounds a deterrent alarm, and records audio and photographs as a private record.

2 Who we are #

Chiraiya (“Chiraiya” / chrysalis — a symbol of protection and transformation) is developed and published by the independent developer named in the Google Play Store listing for this app.

This privacy policy applies to the Chiraiya Android application distributed through Google Play. It does not apply to other apps, websites or services operated by the same developer, which have their own policies.

3 Data Chiraiya handles #

Chiraiya handles sensitive information because these are the exact capabilities required to keep you safe. All of it is processed locally on your device.

4 What we never collect #

In line with the Google Play Data Safety standard, “collection” means data leaving your device. Because Chiraiya is fully on-device, the following are not collected and not shared with us or with anyone else:

• No name, email address, phone number, or user ID is collected — there is no sign-up.
• No advertising ID, device ID, or cross-app identifier.
• No analytics, crash-reporting, telemetry, or usage-tracking SDKs.
• No advertising networks, ad profiles, or remarketing pixels.
• No precise or approximate location, audio, or camera data reaches any server.
• No data is sold, rented, traded, or shared with data brokers.
• No data is used for profiling, automated decision-making, or AI model training.
• No reading of your device contacts, call logs, SMS inbox, photos, gallery, or files.
• No microphone or camera access outside an SOS you trigger.

Because we operate no server, we hold no copy of your data and there is nothing for us to lose, leak, subpoena or breach.

5 How your data is used #

• To alert your guardians. Your chosen emergency contacts receive an SMS and/or WhatsApp message containing your live location, only when you trigger SOS.
• To deter a threat. A loud siren, flashlight strobe and vibration pattern play on your phone to discourage an aggressor. This is entirely local.
• To preserve evidence. Audio and photographs are recorded so that you retain a private, timestamped record of an incident.
• To let you review outcomes. The app reports the real delivery result of each SMS, so you know whether your guardians actually received the alert.
• To confirm you are safe. If you end an SOS, a “I am safe” message is sent so your guardians know not to escalate.

We do not use your data for advertising, marketing, analytics, or any purpose unrelated to your safety. There are no automated decisions made about you.

6 How data leaves your device #

Chiraiya never transmits your data to us. The only data that ever leaves your phone is sent by your own action, directly from your device to a service you already chose:

7 Permissions explained #

Google Play requires that apps disclose high-risk permissions clearly and obtain meaningful consent. Chiraiya explains each permission in-app before requesting it, and all of them are used only while an SOS you triggered is active — except the optional floating button, which is yours to enable.

8 Storage, retention and deletion #

Your data is retained only for as long as you keep it. There is no server-side copy and no automatic expiry, because deleting evidence on a schedule could destroy the only record of an incident.

• You control deletion. Individual events can be deleted from the Evidence Vault, and deleting an event removes its associated audio and photographs.
• Uninstalling removes everything. Removing Chiraiya from your device permanently deletes all recordings, photographs, location history and guardian contacts.
• Cloud backup is disabled. Chiraiya is explicitly excluded from Google Drive backup and device-to-device transfer, so a new phone starts with an empty vault rather than inheriting a record of your emergencies.
• No retention by us. Because we hold no data, there is nothing for us to retain, disclose to authorities, or delete on your behalf after you uninstall.

9 Security #

Chiraiya relies on the Android security model rather than on our own infrastructure:

• Sandboxed storage. Evidence and contacts are written to app-private storage protected by Android’s per-app permission and UID model.
• No transmission channel. There is no endpoint for us to intercept, and no database behind an API key. Data in transit to any server is simply not applicable.
• No analytics supply chain. Because no third-party SDKs are bundled, there is no third-party code inside the app that could read your data.
• Backups disabled. Evidence is excluded from cloud backup and transfer.
• Minimal permissions. The app requests only what a safety tool genuinely requires, and each permission is explained before it is requested.
• Honest status reporting. SMS outcomes are confirmed by the handset’s own delivery reports, so the app never displays a false “sent” confirmation.
• Guarded recipients. Placeholder and structurally invalid phone numbers are refused before any alert is sent, so the app cannot accidentally message a stranger while you believe your guardians were told.

No security system is perfectly infallible. If you believe your device is compromised, uninstalling Chiraiya and deleting its data immediately removes every trace.

10 Children’s privacy #

Chiraiya is intended for adults aged 18 and over. It is not directed at children, and it is not designed to collect information from anyone under 18. Because the app does not collect any personal data to any server, no child information is gathered, stored or transmitted. Guardian contacts are supplied voluntarily by the adult user.

If you believe a child has entered personal information into Chiraiya, please uninstall the app — that permanently removes the data — or contact us using the details in Section 14.

11 Your rights #

Chiraiya is designed to give you direct control of your data without needing us. Depending on where you live, regulations such as the GDPR (EU/UK), the CCPA/CPRA (California), or India’s Digital Personal Data Protection Act, 2023 may apply to you.

• Access and view — open the app to see every event, photograph and recording you have.
• Correct — edit or update your guardian contacts at any time.
• Delete — delete any event from the Evidence Vault, or uninstall to erase everything.
• Withdraw consent — revoke any permission in Android Settings, or turn off individual automations inside Chiraiya’s own Settings screen.
• Portability — export or share any evidence photo yourself using the in-app share action.
• Object / restrict processing — stop all processing by uninstalling the app.

We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we have not done so in the preceding 12 months. We have not disclosed sensitive personal information for the purpose of inferring characteristics about you. Under India’s DPDP Act 2023, a Data Protection Officer is not required as we operate no server and process no data at our behest; grievances may be raised with the appropriate authority after attempting to resolve them with us.

12 Third-party components #

Chiraiya itself bundles no third-party advertising or analytics SDKs. It interacts with the following platform components, each governed by its own privacy policy:

None of these receives your evidence files, guardian database, or event history. They only see a message or a link at the moment you ask Chiraiya to send one.

13 Google Play compliance #

This policy is written to be consistent with Google Play’s Developer Program Policies and the Data safety section requirements, and to match the disclosures shown inside the app.

What to declare in the Play Console Data Safety form

Because Chiraiya collects nothing off-device and shares nothing with third parties, the accurate declaration is:

• Does your app collect or share any of the required user data types? → No
• Is all of the user data collected by your app encrypted in transit? → Not applicable (no data is transmitted off-device)
• Do you provide a way for users to request that their data is deleted? → Yes — via the Evidence Vault and app uninstall

If your Play Console form contains any affirmative answers about data collection, location, audio, or photos, it currently contradicts this policy and should be corrected before publishing the listing.

Policy alignment checklist

• Privacy policy is publicly reachable over HTTPS at a stable URL.
• The same URL is submitted in Play Console under Store Settings → Privacy policy.
• The policy is also linked from inside the app — Chiraiya surfaces it in Settings under “Read Google Play Privacy & Safety Disclosure”.
• Every runtime permission is disclosed in-app before the system prompt, with its purpose stated in plain language.
• All declared sensitive permissions are necessary for a declared core feature, and are used only while that feature is active.
• No marketing claim implies the app contacts police or emergency services.
• Data Safety declarations match the behaviour described in this document.

14 Changes to this policy #

If this policy changes, the “Last updated” date at the top of this page will be revised and the new version will be published at this same URL. For material changes, the updated policy will also be noted in the app’s release notes on Google Play.

Continuing to use Chiraiya after a change means you accept the revised policy. If a future version were ever to introduce a server, account, analytics, or advertising — anything that would alter how your data is handled — this section would be updated first, and the in-app disclosure would be changed to match, before that version is distributed.

15 Contact us #

Questions, privacy concerns, or requests about this policy are welcome. Because we hold no data, requests are generally resolved by helping you delete or correct it on your device — which you can always do yourself in under a minute.