DigiBharosa privacy notice
Version 1.0 — 17 October 2026
DigiBharosa is a free public service that helps you check messages, links, numbers, payment IDs, apps and pictures for scams. It is run by Continuum AI Global Private Limited (the Data Fiduciary). This notice explains, in plain words, what we collect, why, how long we keep it and your rights under the Digital Personal Data Protection Act, 2023.
What we never collect or keep
- The links, messages, numbers, payment IDs, QR codes and pictures you check are examined in memory and are not stored. We keep only a daily count of how many checks gave which result.
- We never ask for, and never store, your OTP, UPI PIN, card number, CVV, Aadhaar number or bank password. Anyone who asks for these in our name is a fraudster.
- Screenshots and media you upload for a photo or deepfake check are deleted as soon as the check ends.
- We do not sell or rent your data, and we do not use it for advertising.
What we collect when you register (optional)
- Mobile number (your sign-in name), name, gender, date of birth, e-mail address, language and country — to create your account, keep it secure and show you advice in your language.
- A one-way hash of your password and of your optional 4-digit PIN (never the password or PIN itself), sign-in times and the consent version you accepted.
- You can use the checker without an account. Registration is only for features such as saved complaint drafts on your phone, alerts and faster sign-in.
What we collect when you report a scam (only with your consent)
- The scam link, number, ID or app you report, the type of scam and your optional description — long numbers (card, Aadhaar, account) are removed automatically.
- A pseudonymous code for your phone and a keyed hash of your network address (never the address itself), so one person cannot make a number look reported by many people.
- The message text only if you tick "Share the message text" — numbers and e-mail addresses are removed first.
- Reports warn other citizens only after a trained moderator has checked them.
Why we use it (purposes)
- To give you a scam verdict and advice; to protect other citizens through moderated warnings; to keep the service secure (preventing abuse, fake reports and break-ins); to meet legal duties.
- DigiBharosa never files complaints with the police or any authority for you. It helps you prepare the text; you decide whether and where to file it.
How long we keep it
- Account data: while your account is active, and deleted when you delete your account.
- Reports: up to 3 years after a moderator's decision, so that confirmed scams keep protecting people; rejected reports are removed sooner.
- Security records: moderator actions are kept in a tamper-evident audit trail for as long as needed for security and legal obligations.
Where your data is stored and how it is protected
- On servers in India operated for us. Data is encrypted in transit (TLS 1.2+). Your mobile number, name, e-mail and date of birth are encrypted field by field in the database, so a copy of the database alone does not reveal them; the keys are kept separately. Passwords and PINs are stored only as salted hashes, and backups are encrypted.
- Access is limited to authorised staff with two-factor authentication, and every access to personal data by moderators is recorded.
- If a personal data breach happens we will inform the Data Protection Board of India and affected users as the law requires.
Your rights
- Access and correction: see and edit your profile in the app (My profile).
- Erasure: delete your account (Profile → Delete my account) or your reports and consent (More → Delete my reports).
- Withdraw consent at any time; this does not affect checks made before.
- Nominate a person to exercise your rights in case of death or incapacity, by writing to the Grievance Officer.
- Complain to the Grievance Officer; if you are not satisfied, you may approach the Data Protection Board of India.
Children
- Registration is for adults (18 years or older). Anyone under 18 can use the checker without an account. We do not knowingly create accounts for children.
Grievance Officer
- Grievance Officer, Continuum AI Global Private Limited, Mumbai, Maharashtra, India. E-mail: grievance@continuumai.io. We acknowledge grievances within 48 hours and resolve them within 30 days.