Privacy Policy
How EkSaya collects, uses, and protects your information across the mobile app, the web dashboard, and the SMS service for basic phones. EkSaya is made for Nepal.
1. Who we are and what this policy covers
EkSaya is a personal-safety service operated by EkSaya (“we”, “us”). It has three parts that work together: a mobile app, a web dashboard for viewing and managing alerts, and an SMS service for people who use basic (non-smart) phones.
This policy explains what information we collect through all three parts, why we collect it, who can see it, how long we keep it, and the choices you have. It applies to people who use EkSaya to send an SOS, to the emergency contacts they add, and to staff who use the dashboard.
If you do not agree with this policy, please do not use EkSaya. You can ask us to delete your account and information at any time - see Section 8.
2. What we collect
We collect only what EkSaya needs to send help to the right people. The table below lists each kind of information, where it comes from, and why we have it.
| What we collect | Where it comes from and why |
|---|---|
| Account details | Your name and email address, and your phone number if you choose to provide it, given when you register. We use these to identify your account, let you sign in, and reach you about your account. |
| Emergency contacts | The names and phone numbers or email addresses of the 3 to 5 people you choose as your emergency contacts. You provide these; we store them so an SOS can reach them. |
| Location during an SOS | Your phone’s location, collected only when an SOS is triggered and only if you have given the app location permission. On the SMS service, we use any place hint you type after the trigger word (for example, “0000 Ratnapark”). Location is used to tell your contacts where help is needed, and is shown on the web dashboard. |
| SOS alert records | A record of each alert: when it started, the location shared, status changes (such as “I am safe”), and a timeline of what happened. These records let contacts and staff follow the alert and let us review how an alert was handled. |
| Device heartbeat data | Basic signals that your phone is on and reachable, such as when the app last checked in. We use these only to notice when a phone has gone silent or been switched off during an alert, so contacts are not left guessing. |
If you are listed as someone’s emergency contact, we hold your name and contact details because that person chose you. If you would like to be removed, contact us at hello@eksaya.com and we will take you off that person’s list.
3. What we do not collect
EkSaya is not a tracking app.
We do not collect your location in the background, and we do not collect your location while the app is idle. Your location is gathered only at the moment an SOS is active.
- We do not follow your movements day to day, and we cannot see where you have been before an SOS.
- We do not read your messages, photos, files, or other apps.
- We do not sell your information, and we do not use it for advertising.
- We do not collect information we do not need to run the SOS service.
4. How we use your information
We use the information above for a short list of purposes, all tied to running EkSaya:
- To operate the SOS flow. When you trigger an SOS, we alert your emergency contacts and show the alert on the web dashboard so help can be coordinated.
- To notify the right people. We send notifications to your contacts and to staff through the app, email, or SMS, depending on how each person can be reached.
- To keep your account working. We use your account details to sign you in, keep your contact list up to date, and answer your questions.
- To notice problems. Heartbeat data helps us detect a phone that has gone silent during an alert, and alert records help us check that alerts were handled properly.
- To meet legal duties. Where the law requires it, we may keep or share records as described in Section 5.
We do not use your information for marketing other products, and we do not make decisions about you using automated profiling.
5. Who can see your information
Your emergency contacts
During an SOS, your chosen contacts can see that you have triggered an alert, the location shared with that alert, and status updates such as “I am safe”. They see this so they can help you. They cannot see your alerts after the alert is closed, and they cannot see information from anyone else’s account.
Dashboard access
Authorised staff can see active alerts on the dashboard so they can help coordinate. Finding a person’s location outside an active alert is restricted: a staff member must give a written reason and get approval before that lookup is allowed, and the lookup is recorded. Staff access is limited to what their role requires.
Service providers
We use other companies to run parts of EkSaya - for example, the companies that host our servers, send SMS messages, and deliver email. They process information only to provide those services to us, and we require them to protect it.
When the law requires it
We may share information if we are legally required to - for example, under a valid court order - or where sharing is necessary to protect someone’s life or safety in an emergency. Where the law allows, we will tell you before we share.
Other than the cases above, we do not share your information with third parties.
6. How long we keep it
We keep information only as long as we need it to run EkSaya and to meet our legal duties:
- Account details and emergency contacts are kept while your account is active. If you delete your account, we delete them, subject to the note below.
- SOS alert records and timelines are kept for 12 months after an alert closes, so an alert can be reviewed if something is later questioned. After that period, they are deleted or stripped of details that identify you.
- Heartbeat data is kept only briefly and is not stored as a long-term history of your phone’s activity.
In some cases the law may require us to keep certain records for longer. When that happens, we keep only what the law requires and restrict who can see it.
7. How we protect it
We take reasonable technical and organisational steps to keep your information safe, including:
- Encrypting information while it travels between your phone and our servers, and protecting stored information with access controls.
- Limiting staff access to the people and roles that need it, with sign-in required for the dashboard.
- Recording staff lookups of location information, with the written-reason and approval step described in Section 5.
- Reviewing our providers and our own practices, and fixing problems we find.
No system can be made perfectly secure. If a breach happens that affects your information, we will notify you and the relevant authorities as the law requires, and tell you what steps you can take.
8. Your rights and choices
Your information belongs to you. You can:
- See it. Ask us for a copy of the information we hold about you.
- Correct it. Ask us to fix anything that is wrong or out of date - you can also update your details and contacts in the app yourself.
- Delete it. Ask us to delete your account and information. We will do so unless the law requires us to keep some records, and we will tell you if that is the case.
- Withdraw permission. You can turn off location permission in your phone settings at any time. EkSaya will still work for alerts that do not depend on location, but contacts will not receive a location with your SOS.
- Complain. If you are unhappy with how we have handled your information, contact us first and we will try to put it right. You may also complain to your local data protection authority.
To make any of these requests, email us at hello@eksaya.com from the email address on your account, or tell us the phone number on your account so we can verify it is you. We will respond within the time the law requires and explain any step we cannot take and why.
9. Children and young people
EkSaya is for everyone. If you are under 18, please have a parent or guardian set up the account with you — ideally as one of your emergency contacts — so someone you trust knows how it works.
If we learn that we hold information about a child without a parent or guardian involved, we will delete it. If you believe this has happened, contact us at hello@eksaya.com.
10. Changes to this policy and how to reach us
We may update this policy as EkSaya changes or as the law requires. If we make a significant change, we will announce it in the app or by email before it takes effect, and the new version will note its update date.
Questions, requests, and complaints about this policy or your information:
- Operator: EkSaya
- Email: hello@eksaya.com
A note on safety
EkSaya helps you reach your own contacts quickly. It is not a replacement for calling emergency services in an emergency, and it cannot guarantee that help will arrive or how quickly. Please keep your emergency contacts up to date and test that their details work.
EkSaya Privacy PolicyLast updated: October 2026