VETRIPEN — Privacy Policy

Version 1.0 · 2026-10-18

This policy explains what Vetripen by Digital Catalyzt collects, why, who receives it, how long it is kept and how you can delete it. It describes what the app does today.

1. Who we are

Vetripen by Digital Catalyzt is a personal-safety app. It is a product of Digital Catalyzt and is operated by Na. Thamizharasu, the responsible individual. Website: www.digitalcatalyzt.com. Email: support@digitalcatalyzt.com. The operator decides why and how your personal data is used.

Contact: support@digitalcatalyzt.com. Grievance Officer: Thamizharasu Na, support@digitalcatalyzt.com, +91 94452 43263.

2. VETRIPEN is not an emergency service

VETRIPEN helps you alert people you trust. It does not replace 112. Nobody at VETRIPEN watches alerts, and alerts are not sent to the police or to 112. If you are in danger, call 112.

3. What we collect

Account: your name, email address and password. The password is stored only as a one-way hash. You may add a date of birth, gender, address and mobile number; these are optional.
Trusted contacts: the name and phone number of each person you add, and an email address if you enter one. They are kept on your phone and, when you are signed in, on our server so that alerts can be delivered. Only add someone who knows and agrees.
Location: read on your phone while a safety feature runs (SOS, Safe Walk, Ride Along). While an SOS or journey is open, your position is sent to our server about every 30 seconds so your contacts can follow the live link. VETRIPEN does not read your location in the background: it is read only while the app is open and a safety feature is running.
Alerts and journeys: records that an SOS or journey was started, its status and its time, with the location points above.
Sign-in and security data: email verification codes (stored only as a keyed hash; a code stops working after 10 minutes or once used), sign-in sessions, your IP address for abuse prevention and rate limits, and an audit log of important account actions.
Consent record: which version of the terms and policy you accepted, when, and your optional choices.
Subscription status: not collected during closed testing, because Premium is not offered. If Premium is offered later, we will receive confirmation of a purchase from Google Play or the Apple App Store (not your card or bank details), and this policy will be updated.
Places you search for and routes you plan are sent to map services (see section 5).
Optional AI analysis: not switched on in this release, so no report text is sent to an AI provider. If it is offered later, this policy will be updated first.

4. What stays on your phone and is not collected by us

Audio and photos recorded during an SOS are stored on your phone. VETRIPEN does not receive them, and this release has no option to copy them to a cloud account.
Voice and motion detection (optional, off until you switch it on) is analysed on your phone. Audio is not stored or sent.
On Android, with your permission, the app sends SOS text messages from your phone to your contacts. It does not read your messages.
Your app PIN is stored only as a salted hash on your phone.

5. Who receives your data

We do not sell your data and we show no ads.

The contacts you choose: your name, the alert type, a live location link and the time, when you start an SOS or share a journey.
Hosting: Railway (our server and database), in the United States.
Email: Resend delivers sign-up and password-reset codes and account notices to your email address.
Messaging: your phone's own SMS service sends your SOS texts from your own SIM. No other messaging service (WhatsApp or an SMS gateway) receives your data at present. If that changes, this policy will be updated first.
Maps and places: Google, OpenStreetMap, BigDataCloud and OSRM receive the place or route you search for.
Purchases: none during closed testing. If Premium is offered later: Google Play or the Apple App Store, and Razorpay for payments made on the web.
AI: no AI provider receives your data at present.
Authorities: only when the law requires it and after legal review.

6. How we use it

To create and secure your account and sign you in.
To send your SOS and journey alerts to the contacts you chose.
To show maps, routes and your live location link.
To keep the service safe: rate limits, abuse prevention, fixing faults.
To record what you agreed to, and to provide your subscription.
To obey the law.

7. Your trusted contacts' data

The people you add did not sign up themselves. We use their name and number only to send them your alerts. At present no message is sent to a person when you add them as a contact. If such a notice is switched on later, it will include a way to reply STOP, and if they reply STOP we do not message them again. A contact's details are removed when you delete the contact or your account (their STOP choice is kept so that it keeps being honoured).

8. How long we keep it

Currently: live-location trails and ended journeys 90 days; closed SOS records 90 days; alert records 365 days; audit log about 3 years; your account and contacts until you delete them. These are the periods the server applies today.

Backup copies of our database made before you delete your account are not edited. Backup copies are kept for a limited time and then deleted, but we do not state a fixed period. Until a copy is deleted, data you deleted may still exist in it. We use backups only to recover from a failure.

Sign-in, verification and recovery codes work for 10 minutes; records of used or expired codes are removed within a day. An account that was never used and whose email address is never verified is deleted after 14 days. When you delete your account we also keep, for 35 days, a record that it was deleted (a one-way coded form of your email address and the date, nothing else), so that, if an old backup has to be restored, we can delete your account again. This is an extra precaution, not a guarantee.

Subscription records (Premium is not offered in this release) are deleted together with your account. The payment provider keeps its own records under its own rules.

9. Security

Data travels over HTTPS. Passwords are hashed. Sign-in codes are short-lived, single-use and rate-limited. Access to the server is restricted. No system is perfectly secure, and alerts can fail or be delayed because of network, battery or phone settings.

10. Your rights and deleting your account

You can see and correct your details in the app (Settings → My profile).
You can delete your account and your data on our server in the app: Settings → Privacy and lock → Privacy and my data → Request Full Data Deletion (you confirm with your password). You can also ask on the public deletion page or by writing to support@digitalcatalyzt.com.
You can withdraw consent in Settings → Privacy and lock → Privacy and my data. Withdrawing pauses the app until you choose again.
You can complain to the Grievance Officer named above.

11. Age and consent

VETRIPEN is for people aged 18 and over. You must confirm that you are 18 or older before you can use the app, and we do not knowingly collect data from children. If you are under 18, do not use VETRIPEN.

Before the app works, you must read and accept this Privacy Policy and the Terms, and agree that VETRIPEN may process your location, trusted contacts and reports to send SOS alerts to the contacts you choose. If these documents change in a way that matters, we ask you to agree again.

Your data is used and shared only for the safety features you start, and only as this policy describes: with the trusted contacts you choose (an SOS text, or a journey link you share); with the map and place services that look up an address, a route or a nearby place for Safe Walk and Ride Along; and with our hosting and email providers, who process it for us. We do not sell your data, show ads, or share it for advertising.

Choices that need your own decision have their own switches in Settings: sending SOS texts for you, recording audio, taking photos, Voice SOS and Shake SOS. You can turn them off. You can withdraw your consent at any time in Settings → Privacy and lock → Privacy and my data; withdrawing pauses the app until you choose again.

12. Data outside India

Our server and database are hosted in the United States (Railway). Some of the other services above also process data outside India.

13. Changes

If this policy changes in a way that matters, we will tell you in the app and ask you to agree again.