Privacy policy

Aahlan is built privacy-first. This policy explains what we collect, how we use it, and the choices you have. We comply with GDPR (EU) and India's DPDP Act.

1. What we collect

• Account: name, email, phone (optional), hashed password, locale.
• Tag profiles: data you choose to attach (vehicle make, pet name, business card details).
• Scan events: timestamp, IP, user-agent, optional location (only with explicit consent).
• Documents: encrypted at rest with per-user keys; access requires OTP.

2. What we never collect

• Full government IDs unless you explicitly upload them to your private vault.
• Biometric data, contacts list, microphone or camera content unless you start a video call.
• Browsing data outside the Aahlan app or website.

3. Phone-number masking

Your phone number is never displayed publicly. Calls placed via an Aahlan scan page route through a temporary masking number provided by our voice partner. Sessions expire after the call ends.

4. Sharing

We share data only with: voice/SMS/WhatsApp providers (encrypted in transit), payment processors (when you pay), cloud infrastructure providers, and legal authorities when compelled by law.

5. Your rights

• Export your data from Settings → Privacy.
• Delete your account and all data, with optional 30-day grace period.
• Withdraw consent for any optional channel at any time.

6. Contact

Email privacy@aahlan.com for any privacy request.